Privacy Policy

1. Identity of the Data Controller & Legal Framework

This platform is operated in compliance with the Data Protection Act, 2012 (Act 843) of the Republic of Ghana:

2. Personal Data We Collect

We believe in strict data minimization. We collect only what is strictly necessary to deliver and verify event tickets:

• Guest Ticket Buyers: Full Name, Email Address, and Mobile Phone Number (normalized to Ghana +233 standard). You are never forced to create an account, create a password, or download a native mobile app.
• Event Organizers: Business/Trading Name, Representative Name, Email, Ghana Phone Number, Mobile Money Account Details (MTN, Telecel, or AirtelTigo) or Ghanaian Bank Account for payouts.
• Gate Check-In & Security Logs: Timestamp of ticket scan, Gate Officer ID, and device hash to prevent ticket cloning and gate fraud.
• Technical Data: Inbound IP address (used temporarily for rate limiting and fraud prevention, never combined with external behavioral profiles).

3. Grounds for Data Processing

FrontRow processes your data strictly for legitimate operational purposes:

• Contractual Ticket Fulfillment: Generating your unique cryptographically secured SVG QR ticket, sending proof of purchase to your email and phone, admitting you at the gate, and handling organizer settlement.
• Voluntary Marketing Opt-In: Marketing communications require an explicit, unbundled checkbox at checkout. You can opt out at any time.
• Financial Accountability: Retaining financial transaction ledgers and payment logs for payment gateway reconciliation and payout verification.

4. Payment Processing & Financial Security

FrontRow does not store, process, or view your Mobile Money PINs, One-Time Passwords (OTPs), or full credit/debit card numbers. All payment processing is directly executed through Paystack, a licensed payment service provider certified under PCI-DSS Level 1.

5. Cryptographic Protection of Tickets & Stored Data

• Ticket QR Code Tokens: The QR code contains an opaque, unguessable token. Our database stores only the one-way SHA-256 cryptographic hash. Even in the event of a raw database dump, ticket admission tokens cannot be reverse-engineered or counterfeited.
• Organizer Bank & MoMo Details: Encrypted at rest using AES-256-GCM.
• Webhooks & Gate Communication: Cryptographically verified using HMAC-SHA512 signatures.

6. Rights Under Ghana Act 843

Every attendee and organizer using FrontRow is entitled to the following rights under Ghana's Data Protection Act, 2012 (Act 843):

• Right to Access: Request a copy of the personal data and ticket records FrontRow holds regarding your purchases.
• Right to Rectification: Request correction of erroneous phone numbers or email addresses on active tickets.
• Right to Erasure / Deletion: Request deletion of your contact data when the event has concluded.
• Right to Opt Out of Marketing: Unsubscribe from promotional announcements at any time with one click.

7. Contact Us About Your Privacy

For any questions, corrections, or data removal requests, please reach out to our team:

FrontRow Support & Privacy Team
Email: support@frontrow.com.gh
Ticket Helpdesk: Available via our Contact Form
Response Time: Usually within 24 to 48 hours.