Privacy Policy

1. Information We Collect

We collect the following categories of information:

2. How We Use Your Information

• Booking and ticketing: To process your ticket purchases, generate e-tickets, send booking confirmations via SMS and email, and manage cancellations or changes.
• Communication: To send booking updates, OTP codes for authentication, service announcements, and (with your consent) promotional offers.
• Security and fraud prevention: To verify your identity, detect suspicious activity, prevent unauthorized access, and protect against fraudulent transactions.
• Platform improvement: To analyze usage patterns, troubleshoot technical issues, and improve our services and user experience.
• Legal compliance: To comply with applicable laws, regulations, and legal processes in Sri Lanka.

3. Payment Processing

All payments on YeahTicket are processed through third-party payment gateways, including PayHere and Genie. When you make a payment, you are redirected to or interact with these providers' secure payment interfaces. We do not store your full credit/debit card numbers, CVV, or banking credentials on our servers. We only retain transaction identifiers and payment status information necessary to fulfill and track your bookings. Please review the privacy policies of PayHere and Genie for details on how they handle your payment data.

4. Information Sharing

We do not sell your personal information. We share information only in the following circumstances:

• Transport operators, event organizers, and attractions: We share your name, contact details, and booking information with the relevant service provider so they can fulfill your booking.
• Payment processors: Transaction data is shared with PayHere and Genie to process your payments securely.
• Legal requirements: We may disclose information when required by law, court order, or government regulation, or to protect the rights, safety, or property of YeahTicket, our users, or the public.
• Service providers: We use third-party services for SMS delivery, email, hosting, and analytics. These providers process data on our behalf under strict confidentiality agreements.

5. Data Security

We implement industry-standard security measures to protect your information, including encryption of data in transit (TLS/SSL), secure hashing of passwords, token-based authentication, and access controls that limit data access to authorized personnel. While no system is completely immune to security threats, we continuously monitor and improve our security practices.

6. Cookies and Tracking

We use cookies and similar technologies to maintain your session, remember your preferences (such as language selection), and understand how you interact with our platform. Essential cookies are required for the platform to function. You can control cookie preferences through your browser settings, though disabling essential cookies may affect platform functionality.

7. Your Rights

You have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal data, subject to legal retention requirements and legitimate business needs.
• Withdrawal of consent: Withdraw consent for optional data processing (e.g., marketing communications) at any time.
• Data portability: Request your data in a structured, machine-readable format.

To exercise any of these rights, contact us at support@yeahticket.lk. We will respond within 30 days.

8. Children's Privacy

YeahTicket is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it promptly. If you believe a child under 13 has provided us with personal data, please contact us at support@yeahticket.lk.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes by posting the updated policy on our platform and updating the effective date. Your continued use of YeahTicket after such changes constitutes acceptance of the updated policy.

10. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: