Terms & Conditions

1. Introduction

These Terms of Service (“Terms”) govern your use of Hexlura, an online event ticketing platform operated by Hexlura Ltd, a company registered in England and Wales (Company No. 17102803). By accessing or using hexlura.com, you agree to be bound by these Terms. If you do not agree with any part of these Terms, you must not use our platform.

These Terms constitute a binding legal agreement between you (“User”) and Hexlura Ltd (“Hexlura”, “we”, “us”, “our”). We may update these Terms at any time by posting the revised version on our website. Your continued use of the platform following any changes constitutes your acceptance of the updated Terms.

2. Definitions

"Platform"

means the website hexlura.com and any associated mobile applications

"User"

means any individual who accesses or uses the Platform, including Buyers, Organisers and Administrators

"Buyer"

means a User who purchases tickets through the Platform

"Organiser"

means a User who creates and sells tickets for events through the Platform

"Event"

means any event listed on the Platform for which tickets are available

"Ticket"

means a digital token purchased via the Platform granting entry to an Event

"Booking Fee"

means the service charge applied to each ticket purchase by Hexlura

"Payout"

means the transfer of ticket sale proceeds to an Organiser following an Event

"Content"

means all text, images, data and other materials appearing on the Platform

3. User Accounts

3.1 To access certain features of the Platform, you must register for an account. You must:

• Be at least 18 years of age

• Provide accurate, complete and current information

• Maintain the security of your password and account

• Notify us immediately of any unauthorised use of your account

• Accept responsibility for all activities that occur under your account

3.2 Hexlura reserves the right to suspend or terminate any account at its sole discretion, including where:

• These Terms have been violated

• Fraudulent or misleading activity is suspected

• An account has been inactive for 6 or more consecutive months

• We are required to do so by law or regulation

4. Ticket Purchases

4.1 All ticket purchases are subject to availability at the time of purchase.

4.2 A booking fee is applied to each ticket purchase. The applicable fee is shown clearly before you complete your purchase. Current fee details are available on our website.

4.3 Hexlura acts as the agent of the Organiser only. The contract for the supply of the event is between you and the Organiser. Hexlura is not a party to that contract and accepts no liability for the quality, safety, legality or any other aspect of any Event.

4.4 Upon successful payment, you will receive a booking confirmation and e-tickets to your registered email address. It is your responsibility to ensure your email address is correct.

4.5 Tickets are personal to the named holder and may not be resold or transferred except where the Organiser expressly permits this.

5. Refunds and Cancellations

5.1 Refund eligibility is determined by the Organiser's refund policy, which is displayed on the Event listing prior to purchase. It is your responsibility to review this policy before completing your purchase.

5.2 Booking fees are non-refundable under all circumstances, including where an Event is cancelled or postponed.

5.3 If an Event is cancelled by the Organiser:

• You are entitled to a full refund of the ticket face value

• Refunds will be processed within 10 business days of cancellation being confirmed

• You will be notified by email

5.4 Refund requests must be submitted through your Hexlura account. Hexlura will process approved refunds within 30 days of approval being confirmed by the Organiser.

5.5 Hexlura shall not be liable to any Buyer for any refunds where the Organiser fails to honour their refund policy. Your recourse in such circumstances is against the Organiser directly.

6. Event Organisers

6.1 By listing an Event on the Platform, Organisers agree to:

• Provide accurate and complete event information including date, time, venue, age restrictions and ticket details

• Hold all necessary licences, permits and approvals required for the Event

• Honour all valid tickets purchased through the Platform

• Notify ticket holders promptly of any changes, postponements or cancellations

• Process refunds in accordance with their stated refund policy

• Comply with all applicable laws including the Consumer Rights Act 2015

6.2 Payouts to Organisers are processed as follows:

• Payouts are initiated 2 business days after the Event end date

• Payouts are made via Stripe Connect to the Organiser's connected bank account

• Hexlura deducts its booking fees prior to payout

• Hexlura reserves the right to withhold or delay payouts where fraud is suspected or disputes are outstanding

6.3 Hexlura reserves the right to remove any Event listing, cancel ticket sales or withhold payouts at its absolute discretion where it deems an Event to be in breach of these Terms or applicable law.

6.4 Attendee Data Protection

6.4.1 Through the Platform, Organisers receive personal data of Buyers and attendees, including names, email addresses and phone numbers ("Attendee Data"), solely for the purposes of organising, managing and delivering the specific Event booked.

6.4.2 Organisers must process Attendee Data in accordance with the UK GDPR and the Data Protection Act 2018, and must not:

• Sell, rent, licence or otherwise share Attendee Data with any third party

• Use Attendee Data to market any other event, product or service without the attendee’s separate, explicit consent

• Retain Attendee Data for longer than is reasonably necessary after the Event has taken place

• Transfer Attendee Data outside the UK or EEA without adequate safeguards as required by law

6.4.3 Any breach of this clause 6.4 is a material breach of these Terms. Hexlura may immediately suspend or terminate the Organiser's account, remove or delist their Events, and withhold access to further Attendee Data.

6.4.4 The Organiser shall indemnify Hexlura in full against all losses, claims, damages, regulatory fines and legal costs arising from the Organiser's misuse of Attendee Data or breach of applicable data protection law.

6.4.5 Hexlura may report suspected unlawful processing of Attendee Data to the Information Commissioner's Office and will cooperate with any affected individual's complaint or claim.
6.4.6 If Hexlura Ltd is fined by the ICO or any other regulatory authority due to the Organiser's breach of data protection laws, the Organiser is legally bound to compensate Hexlura Ltd for the full amount of such fines and all associated legal expenses.

7. Prohibited Conduct

Users must not:

• Use the Platform for any unlawful purpose or in breach of any applicable regulation

• Resell tickets at above face value (ticket touting)

• Create fraudulent, misleading or duplicate Event listings

• Misrepresent their identity or affiliation

• Use automated tools, bots or scraping software on the Platform

• Attempt to circumvent any security measure or access control

• Interfere with the proper functioning of the Platform

• Upload or transmit any malicious code, virus or harmful software

• Harass, abuse or threaten other users or Hexlura staff

8. Intellectual Property

8.1 All intellectual property rights in the Platform, including its design, software, text, graphics and trademarks, are owned by or licensed to Hexlura Ltd.

8.2 You may not reproduce, distribute, modify or create derivative works from any Platform content without our prior written consent.

8.3 By uploading content to the Platform (such as Event images or descriptions), you grant Hexlura a non-exclusive, royalty-free licence to use, display and distribute that content in connection with the Platform.

9. Limitation of Liability

9.1 Hexlura provides the Platform on an “as is” basis. We make no warranties, express or implied, regarding the availability, accuracy or fitness for purpose of the Platform.

9.2 To the fullest extent permitted by law, Hexlura shall not be liable for:

• Any indirect, consequential or special losses

• Loss of revenue, profits or data

• Any losses arising from Events listed on the Platform

• Any acts or omissions of Organisers or third parties

9.3 Our total aggregate liability to you shall not exceed the amount you paid in booking fees in the 12 months preceding the relevant claim.

9.4 Nothing in these Terms limits our liability for death or personal injury caused by negligence, fraud or fraudulent misrepresentation, or any other liability that cannot be excluded by law.

9.5 Third-Party and Organiser Misuse: Hexlura Ltd acts solely as a technological platform and booking agent. We have no control over, and accept absolutely no liability for, how Event Organisers or their third-party sponsors use, store, or process Attendee Data once it is transferred to them. Any legal claims, disputes, or complaints regarding data privacy violations, spamming, or unauthorised marketing by an Organiser or their partners must be brought directly against the Organiser.
9.6 Security and Cyber Attacks: Under no circumstances shall Hexlura Ltd be liable for any loss, unauthorized disclosure, or damage resulting from cyber-attacks, security breaches, or force majeure events beyond our reasonable control.

10. Force Majeure

Hexlura shall not be liable for any failure to perform its obligations where such failure results from circumstances beyond our reasonable control, including but not limited to acts of God, pandemic, government restrictions, power failure, internet outages or industrial disputes.

11. Governing Law

These Terms are governed by the laws of England and Wales. Any disputes arising under or in connection with these Terms shall be subject to the exclusive jurisdiction of the courts of England and Wales.

12. Contact

For any queries regarding these Terms, contact us at support@hexlura.com

Privacy Policy

How we collect, use and protect your personal data

13. Who We Are

Hexlura Ltd (Company No. 17102803), registered in England and Wales, is the data controller for personal data collected through hexlura.com. We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

For data protection queries, contact us at: support@hexlura.com

We act as:

• Data Controller: for personal data you provide when creating an account or purchasing tickets

• Data Processor: where we process personal data on behalf of Organisers (such as attendee lists)

14. Information We Collect

We collect the following personal data:

Account Information

• Full name, email address, phone number

• Date of birth, gender (optional)

• Profile photograph (if uploaded)

Address Information

• Home address and postcode (optional, used for location-based recommendations)

Payment Information

• All payment data is processed securely by Stripe — Hexlura does not store card details

Booking Information

• Events booked, tickets purchased, booking references

• Attendance history

Technical Data

• IP address, browser type, device information

• Pages visited, search queries, session data (collected via cookies)

Communications

• Support messages, feedback and correspondence with our team

15. How We Use Your Information

We use your personal data to:

• Create and manage your account

• Process ticket purchases and send booking confirmations

• Deliver e-tickets and event reminders

• Process refunds and resolve disputes

• Share relevant attendee information with Event Organisers

• Send transactional emails (booking confirmations, password resets)

• Personalise event recommendations based on your location and interests

• Improve the Platform through analytics and usage data

• Prevent fraud, abuse and unauthorised access

• Comply with our legal and regulatory obligations

16. Legal Basis for Processing

We process your personal data under the following legal bases as defined under UK GDPR:

• Performance of a contract: to process ticket purchases and deliver our services

• Legal obligation: to comply with financial, tax and regulatory requirements

• Legitimate interests: to improve the Platform, prevent fraud and communicate with users

• Consent: for marketing communications (you may withdraw consent at any time)

17. Data Sharing

We share your personal data with the following third parties only where necessary:

• Stripe: secure payment processing and fraud prevention

• Resend: transactional email delivery (booking confirmations, password resets)

• Event Organisers: your name, email and phone number are shared with the Organiser of events you have booked, solely for event administration purposes

• Supabase: our database and authentication infrastructure provider

• Legal authorities: where we are required by law to disclose information

We do not sell, rent or share your personal data with third parties for marketing purposes.

18. Data Retention

We retain your personal data for the following periods:

• Account data: for the duration of your account and up to 7 years after closure

• Booking and transaction records: 7 years, as required by UK financial regulations

• Marketing preferences: until you withdraw consent

• Technical/usage data: up to 24 months

You may request deletion of your account and associated data at any time. Please note that certain data may be retained for legal compliance purposes even after deletion.

19. Your Rights Under UK GDPR

You have the following rights in relation to your personal data:

• Right of access: to request a copy of the data we hold about you

• Right to rectification: to correct any inaccurate or incomplete data

• Right to erasure: to request deletion of your data ("right to be forgotten")

• Right to restrict processing: to limit how we use your data in certain circumstances

• Right to data portability: to receive your data in a structured, machine-readable format

• Right to object: to object to processing based on legitimate interests or for direct marketing

• Right to withdraw consent: at any time, where processing is based on consent

To exercise any of these rights, contact us at support@hexlura.com. We will respond within 30 days. If you are dissatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

20. Security

We implement the following security measures to protect your personal data:

• SSL/TLS encryption on all data transmitted to and from the Platform

• Secure password hashing using industry-standard algorithms

• Payment data processed by Stripe under PCI DSS Level 1 compliance

• Regular security reviews and access controls

• Role-based access restrictions for staff

Despite these measures, no internet transmission is completely secure. We cannot guarantee the absolute security of data transmitted to our Platform.
Under no circumstances shall Hexlura Ltd be liable for any loss, unauthorized disclosure, or damage resulting from cyber-attacks, security breaches, or force majeure events beyond our reasonable control.

21. International Transfers

Your personal data is stored and processed within the UK and European Economic Area (EEA). Where any data is transferred outside the EEA (for example via our service providers), we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

22. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. The date of the most recent revision appears at the top of this page. Continued use of the Platform after changes constitutes acceptance of the updated policy.