Terms & Conditions

PART 1: TERMS OF SERVICE

1. Introduction

These Terms of Service ("Terms") govern your use of Hexlura, an online event ticketing platform operated by Hexlura Ltd, a company registered in England and Wales (Company No. 17102803). By accessing or using hexlura.com (the "Platform"), registering an account, or purchasing tickets, you agree to be bound by these Terms. If you do not agree with any part of these Terms, you must not use the Platform.

These Terms constitute a binding legal agreement between you ("User") and Hexlura Ltd ("Hexlura", "we", "us", "our"). We may update these Terms at any time by posting the revised version on our website. Your continued use of the Platform following any changes constitutes your acceptance of the updated Terms.

2. Definitions

"Platform"

the website hexlura.com and any associated mobile applications.

"User"

any individual who accesses or uses the Platform, including Buyers, Organisers and Administrators.

"Buyer"

a User who purchases tickets through the Platform.

"Organiser"

a User who creates, lists and sells tickets for events through the Platform.

"Event"

any event listed on the Platform for which tickets are available.

"Ticket"

a digital token purchased through the Platform granting entry to an Event.

"Booking Fee"

the service charge applied to each ticket purchase by Hexlura.

"Payout"

the transfer of ticket sale proceeds to an Organiser following an Event.

"Content"

all text, images, data and other materials appearing on the Platform.

3. User Accounts

3.1 Registration Requirements

To access certain features of the Platform, you must register for an account. You must:

• Be at least 18 years of age.

• Provide accurate, complete and current information.

• Maintain the security of your password and account.

• Notify us immediately of any unauthorised use of your account.

• Accept responsibility for all activities that occur under your account.

3.2 Account Suspension and Termination

Hexlura reserves the right to suspend or terminate any account at its sole discretion, including where:

• These Terms have been violated.

• Fraudulent, misleading or illegal activity is suspected.

• An account has been inactive for 6 or more consecutive months.

• We are required to do so by law, court order or regulatory authority.

4. Ticket Purchases

4.1 Availability

All ticket purchases are subject to availability at the time of purchase.

4.2 Booking Fees

A non-refundable Booking Fee is applied to each ticket purchase. The applicable fee is shown clearly before you complete your purchase. Current fee details are available on our website.

4.3 Agent-Only Status

Hexlura acts solely as the agent of the Organiser. The contract for the supply of the Event is strictly between you (the Buyer) and the Organiser. Hexlura is not a party to that contract and accepts no liability for the quality, safety, legality, delivery or any other aspect of any Event.

4.4 Delivery

Upon successful payment, you will receive a booking confirmation and e-tickets at your registered email address. It is your responsibility to ensure that your email address is correct.

4.5 Transfers and Resale

Tickets are personal to the named holder and may not be resold or transferred except where the Organiser expressly permits this.

4.6 Third-Party Consent for Group Bookings

If you purchase tickets on behalf of other individuals, such as friends, family members or guests, you warrant that you have obtained their explicit consent to share their personal data, including names and email addresses, with Hexlura and the Event Organiser. You shall indemnify Hexlura against third-party complaints, claims or losses arising from a breach of this clause.

5. Refunds and Cancellations

5.1 Organiser Policy

Refund eligibility is determined strictly by the Organiser's refund policy, which is displayed on the Event listing before purchase. It is your responsibility to review this policy before completing your purchase.

5.2 Non-Refundable Fees

Booking Fees are non-refundable under all circumstances, including where an Event is cancelled, postponed or rescheduled.

5.3 Event Cancellation

If an Event is cancelled by the Organiser, you are entitled to a full refund of the Ticket face value. Refunds will be processed within 10 business days after the cancellation is confirmed by the Organiser. You will be notified by email.

5.4 Processing

Refund requests must be submitted through your Hexlura account. Hexlura will process approved refunds within 30 days after approval is confirmed by the Organiser.

5.5 No Hexlura Liability for Refund Defaults

Hexlura shall not be liable to any Buyer for refunds where the Organiser fails to honour its refund policy or defaults on payment. Your recourse in such circumstances is strictly against the Organiser directly.

6. Event Organisers

6.1 Organiser Obligations

By listing an Event on the Platform, Organisers agree to:

• Provide accurate and complete Event information, including the date, time, venue, age restrictions and Ticket details.

• Hold all necessary licences, permits and approvals required for the Event.

• Honour all valid Tickets purchased through the Platform.

• Notify Ticket holders promptly of any changes, postponements or cancellations.

• Process refunds in accordance with their stated refund policy.

• Comply with all applicable laws, including the Consumer Rights Act 2015.

6.2 Payouts

Payouts are initiated two business days after the Event end date through Stripe Connect to the Organiser's connected bank account. Booking Fees are charged to ticket buyers in addition to the ticket price and are not deducted from Organiser proceeds. Organisers receive 100% of the ticket face value, less any discounts the Organiser has applied. Hexlura reserves the right to withhold or delay Payouts where fraud is suspected, regulatory investigations are ongoing, or customer disputes remain outstanding.

6.3 Delisting and Withholding Rights

Hexlura reserves the right to remove any Event listing, cancel Ticket sales or withhold Payouts at its absolute discretion where it considers an Event or Organiser to be in breach of these Terms, suspicious, or in violation of applicable law.

6.4 Attendee Data Protection and Organiser Liability

6.4.1 Purpose Limitation

Through the Platform, Organisers receive personal data relating to Buyers and attendees, including names, email addresses and phone numbers ("Attendee Data"), solely for the purpose of organising, managing and delivering the specific Event booked.

6.4.2 Compliance with Data Protection Law

Organisers must process Attendee Data strictly in accordance with the UK GDPR and the Data Protection Act 2018. Organisers must maintain and clearly display their own legally compliant privacy policy on their Event listings, explaining how they handle Attendee Data.

6.4.3 Prohibited Data Practices

Organisers must not:

• Sell, rent, license, disclose or share Attendee Data with any third party, including Event sponsors, mortgage firms, insurance companies, exhibitors or commercial partners, unless the attendee has given separate, explicit and freely given opt-in consent directly to that specific third party.

• Use Attendee Data to market any other Event, product or service without the attendee's separate and explicit consent.

• Retain Attendee Data for longer than is reasonably necessary after the Event has taken place.

• Transfer Attendee Data outside the UK or the European Economic Area without appropriate safeguards required by law.

6.4.4 Material Breach and Account Action

Any breach of clause 6.4 constitutes a material breach of these Terms. Hexlura may immediately suspend or terminate the Organiser's account, remove or delist Events, withhold Payouts, and block access to further Attendee Data.

6.4.5 Full Indemnification for Claims, Investigations and Fines

The Organiser shall fully indemnify, defend and hold harmless Hexlura Ltd, its directors and employees from and against all claims, damages, liabilities, losses, legal costs, regulatory investigations and regulatory fines arising directly or indirectly from the Organiser's misuse, unauthorised sharing, commercialisation or negligent handling of Attendee Data. If Hexlura Ltd is fined by the Information Commissioner's Office or any other regulatory authority due to the Organiser's breach of data protection law, the Organiser shall compensate Hexlura Ltd for the full amount of the fine and all associated legal expenses.

6.4.6 Regulatory Cooperation

Hexlura may report suspected unlawful processing of Attendee Data to the Information Commissioner's Office and may cooperate with any affected individual's complaint, claim or regulatory investigation.

7. Prohibited Conduct

Users must not:

• Use the Platform for any unlawful purpose or in breach of any applicable law or regulation.

• Resell Tickets above face value, including through ticket touting.

• Create fraudulent, misleading or duplicate Event listings.

• Misrepresent their identity or affiliation.

• Use automated tools, bots or scraping software on the Platform.

• Attempt to circumvent any security measure or access control.

• Interfere with the proper functioning of the Platform.

• Upload or transmit malicious code, a virus or harmful software.

• Harass, abuse or threaten other Users or Hexlura staff.

8. Intellectual Property

8.1 Ownership

All intellectual property rights in the Platform, including its design, software, text, graphics and trademarks, are owned by or licensed to Hexlura Ltd.

8.2 Restrictions

You may not reproduce, distribute, modify or create derivative works from any Platform Content without our prior written consent.

8.3 User-Generated Content

By uploading Content to the Platform, including Event images or descriptions, you grant Hexlura a non-exclusive, royalty-free and perpetual licence to use, display and distribute that Content in connection with operating and marketing the Platform.

9. Limitation of Liability

9.1 "As Is" and "As Available" Basis

Hexlura provides the Platform on an "as is" and "as available" basis. We make no warranties, express or implied, regarding the availability, accuracy, completeness or fitness for purpose of the Platform.

9.2 Excluded Losses

To the fullest extent permitted by law, Hexlura Ltd shall not be liable for any indirect, consequential, special or exemplary damages; loss of revenue, profits, business opportunities, goodwill or data; losses arising from Events listed on the Platform; or acts or omissions of Organisers or third parties.

9.3 Liability Cap

Our total aggregate liability to you for any claim arising out of or in connection with these Terms or use of the Platform shall not exceed the amount you paid in Booking Fees to Hexlura during the 12 months preceding the relevant claim.

9.4 Liabilities That Cannot Be Excluded

Nothing in these Terms limits or excludes our liability for death or personal injury caused by negligence, fraud or fraudulent misrepresentation, or any other liability that cannot be limited or excluded by law.

9.5 Third-Party and Organiser Misuse

Hexlura Ltd acts solely as a technological platform and booking agent. We have no control over, and accept no liability for, how Event Organisers or their third-party sponsors use, store or process Attendee Data after it is transferred to them. Any legal claims, disputes or complaints concerning data privacy violations, spamming or unauthorised marketing by an Organiser or its partners must be brought directly against the Organiser. To the fullest extent permitted by law, Hexlura Ltd shall not be liable for regulatory fines or damages resulting from an Organiser's breach of UK GDPR.

9.6 Security and Cyber Attacks

While we employ industry-standard security measures, including SSL/TLS encryption and secure databases, Hexlura Ltd does not warrant or guarantee that the Platform is completely secure against unauthorised access, hacking or data breaches. To the fullest extent permitted by law, Hexlura Ltd shall not be liable for loss, unauthorised disclosure or damage resulting from cyber-attacks, security breaches or force majeure events beyond our reasonable control.

10. Force Majeure

Hexlura shall not be liable for any failure to perform its obligations where that failure results from circumstances beyond our reasonable control, including acts of God, pandemics, government restrictions, power failures, internet outages or industrial disputes.

11. Governing Law and Jurisdiction

These Terms are governed by and construed in accordance with the laws of England and Wales. Any dispute arising under or in connection with these Terms shall be subject to the exclusive jurisdiction of the courts of England and Wales.

12. Contact

For queries regarding these Terms, contact us at support@hexlura.com.

PART 2: PRIVACY POLICY

How we collect, use and protect your personal data

13. Who We Are

Hexlura Ltd (Company No. 17102803), registered in England and Wales, is the data controller for personal data collected through hexlura.com. We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

For data protection queries, contact us at support@hexlura.com.

We act as:

• Data Controller: for personal data you provide when creating an account or purchasing Tickets.

• Data Processor: where we process personal data on behalf of Organisers, such as attendee lists.

14. Information We Collect

14.1 Account Information

• Full name, email address and phone number.

• Date of birth and gender, where provided optionally.

• Profile photograph, where uploaded.

14.2 Address Information

• Home address and postcode, where optionally provided for location-based recommendations.

14.3 Payment Information

• All payment data is processed securely by Stripe. Hexlura does not store card details.

14.4 Booking Information

• Events booked, Tickets purchased and booking references.

• Attendance history.

14.5 Technical Data

• IP address, browser type and device information.

• Pages visited, search queries and session data collected through cookies.

14.6 Communications

• Support messages, feedback and correspondence with our team.

15. How We Use Your Information

We use your personal data to:

• Create and manage your account.

• Process Ticket purchases and send booking confirmations.

• Deliver e-tickets and Event reminders.

• Process refunds and resolve disputes.

• Share relevant attendee information with Event Organisers.

• Send transactional emails, including booking confirmations and password resets.

• Personalise Event recommendations based on your location and interests.

• Improve the Platform through analytics and usage data.

• Prevent fraud, abuse and unauthorised access.

• Comply with our legal and regulatory obligations.

16. Legal Basis for Processing

We process your personal data under the following legal bases defined by UK GDPR:

• Performance of a contract: to process Ticket purchases and deliver our services.

• Legal obligation: to comply with financial, tax and regulatory requirements.

• Legitimate interests: to improve the Platform, prevent fraud and communicate with Users.

• Consent: for marketing communications. You may withdraw consent at any time.

17. Data Sharing

We share your personal data with the following third parties only where necessary:

• Stripe: secure payment processing and fraud prevention.

• Resend: transactional email delivery, including booking confirmations and password resets.

• Event Organisers: your name, email address and phone number are shared with the Organiser of an Event you have booked, solely for Event administration purposes.

• Supabase: our database and authentication infrastructure provider.

• Legal authorities: where we are required by law to disclose information.

We do not sell, rent or share your personal data with third parties for marketing purposes.

18. Data Retention

We retain your personal data for the following periods:

• Account data: for the duration of your account and up to seven years after closure.

• Booking and transaction records: seven years, as required by UK financial regulations.

• Marketing preferences: until you withdraw consent.

• Technical and usage data: up to 24 months.

You may request deletion of your account and associated data at any time. Certain data may be retained after deletion where necessary for legal compliance.

19. Your Rights Under UK GDPR

You have the following rights in relation to your personal data:

• Right of access: to request a copy of the data we hold about you.

• Right to rectification: to correct inaccurate or incomplete data.

• Right to erasure: to request deletion of your data, also known as the right to be forgotten.

• Right to restrict processing: to limit how we use your data in certain circumstances.

• Right to data portability: to receive your data in a structured, machine-readable format.

• Right to object: to object to processing based on legitimate interests or for direct marketing.

• Right to withdraw consent: at any time, where processing is based on consent.

To exercise these rights, contact us at support@hexlura.com. We will respond within 30 days. If you are dissatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office at ico.org.uk.

20. Security

We implement the following measures to protect your personal data:

• SSL/TLS encryption for data transmitted to and from the Platform.

• Secure password hashing using industry-standard algorithms.

• Payment data processing by Stripe under PCI DSS Level 1 compliance.

• Regular security reviews and access controls.

• Role-based access restrictions for staff.

Despite these measures, no internet transmission is completely secure. We cannot guarantee the absolute security of data transmitted to the Platform. To the fullest extent permitted by law, Hexlura Ltd shall not be liable for loss, unauthorised disclosure or damage resulting from cyber-attacks, security breaches or force majeure events beyond our reasonable control.

21. International Transfers

Your personal data is stored and processed within the United Kingdom and the European Economic Area (EEA). Where data is transferred outside the EEA, including through our service providers, we ensure that appropriate safeguards are in place in accordance with UK GDPR requirements.

22. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered Users of material changes by email. The date of the most recent revision appears at the top of this document. Continued use of the Platform after changes constitutes acceptance of the updated policy.