Privacy Policy
Introduction
Valtara respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, store and share information when you access our website, create an account, use our products, scan QR or NFC experiences, buy tickets, attend events or interact with our services.
Information We Collect
Information you provide
When you create an account, make a purchase, register for an event, use tickets, configure a product, join community features or communicate with us, we may collect your name, email address, password, postal address, phone number, billing details, order information, ticket information, profile information, interests, role or account type, links, social media profiles, descriptions, skills and uploaded images or other content.
Information collected automatically
When you use the platform, we may automatically collect technical and usage data, including IP address, browser type, operating system, device identifiers, session data, page views, clicks, interactions with the site, scans, ticket validations, logs and other diagnostic data.
Payment information
Payments are processed through Stripe or other payment providers that may be made available. Valtara does not store full credit or debit card details. Payment providers may process payment information according to their own privacy and security policies.
How We Use Information
We use personal information to provide and operate the platform, create and manage accounts, process orders, handle payments, manage tickets, validate event access, deliver digital and physical experiences, personalize user profiles, maintain cart and session functionality, respond to support requests, send service communications, improve products, analyze platform usage, monitor security, detect fraud or misuse, comply with legal obligations and support collaborations or business operations where necessary. The legal bases for processing may include contract performance, legal obligations, legitimate interest and user consent where required.
Public Profiles and Community Features
Some Valtara products and platform features allow users to create public or semi-public profiles. Depending on the product or configuration, this may include name, description, links, social media profiles, images, skills, creative work and other information chosen by the user. Users are responsible for the information they choose to make visible. Public profile information may be accessed by other users or by people scanning associated QR or NFC experiences. Users can connect as friends. Users who turn on “Show my friends the events I am going to” allow their friends — and only them — to see, on an event page, that they have a ticket for that event. This option is off by default and can be turned off at any time in the profile settings.
Scans, QR Codes and NFC Interactions
Valtara products may include QR codes, NFC chips and other interactive technologies. When a user scans or interacts with these experiences while logged in, Valtara may record the scan or interaction, the associated product or ticket, time of interaction, account information and related technical data. These records help provide platform functionality, ticket validation, product experiences, analytics, security and future feature development.
Cookies, Sessions and Heatmaps
We use cookies and similar technologies in four categories. Necessary cookies are always on, because the site doesn't work without them. The others (statistics, shares and affiliates, external content) are only used if you accept them in the cookie banner, and you can change your choice at any time in “Cookie preferences”. Rejecting doesn't stop you from using the site: we just stop counting detailed statistics, crediting your visit to whoever shared the link with you and loading external content automatically. With statistics accepted, the heatmap records the position of clicks and mouse movements, the page and the device type, without IP and without linking it to your account. We keep a record of each cookie choice (date, accepted categories and account, if you're signed in) as proof of consent. Your choice is valid for 6 months; after that we ask again.
| Cookie | Category | Duration | Purpose |
|---|---|---|---|
| connect.sid | Necessary | 24 hours | Keeps you signed in. |
| cart_session_id | Necessary | 30 days | Keeps the cart for visitors who aren't signed in. |
| vlt_lang | Necessary | 1 year | Remembers your chosen language. |
| vlt_coupon_prefill | Necessary | 30 days | Pre-fills the coupon from a coupon link you opened. |
| vlt_consent | Necessary | 6 months | Stores your cookie choice. |
| _GRECAPTCHA (Google) | Necessary | 6 months | Spam protection on sign-up (reCAPTCHA). |
| vlt_vid | Statistics / Shares and affiliates | 1 year | Random identifier to count unique article visitors and unique opens of shared music links. |
| vlt_article_touch | Statistics | 30 days | Last article read, so we know which articles lead to purchases. |
| vlt_attribution, vlt_referral_code | Shares and affiliates | 30 days | Affiliate or campaign (UTM) link you arrived from, to credit the commission. |
| vlt_share | Shares and affiliates | 30 days | Who shared the link with you, to give them points if you buy or sign up. |
| Spotify, YouTube | External content | Set by the provider | Cookies from embedded players, under Spotify's and Google's policies. |
How We Share Information
We may share information with service providers and partners strictly when necessary to operate the platform and services. This may include hosting providers, payment processors such as Stripe, email providers, analytics tools, delivery or logistics partners, security tools, customer support services, ticketing operations and trusted business partners involved in collaborations. We do not sell personal information. We may also disclose information when required by law, to protect our rights, prevent fraud, enforce our terms or with user consent.
Marketing Communications
Valtara may send marketing communications about products, events, drops, community updates or collaborations when permitted by law or when the user has subscribed or otherwise provided consent. Users can unsubscribe from promotional communications through the available unsubscribe mechanisms or by contacting geral@thevaltara.com. Even after opting out of marketing, users may still receive service-related communications about orders, accounts, tickets, security or legal matters.
Data Retention and Account Deletion
We keep personal information while the user account remains active or for as long as necessary to provide services, comply with legal obligations, resolve disputes, prevent fraud and maintain business records. Users may request account deletion through account settings where available or by contacting geral@thevaltara.com. Some information may need to be retained when required by law, for accounting, security, fraud prevention or legitimate business purposes.
Data Security
We apply reasonable technical and organizational measures to protect personal information from loss, misuse, unauthorized access, disclosure, alteration and destruction. User passwords are encrypted and data is protected through appropriate database and platform security measures. However, no online system is completely secure, and users should also protect their account credentials.
Your Privacy Rights
Under applicable data protection laws, users may have the right to access, correct, delete, restrict or object to the processing of their personal information, request data portability and withdraw consent where processing is based on consent. To exercise these rights, users may contact geral@thevaltara.com. We may need to verify identity before responding to certain requests.
Children Privacy
The platform is not intended for children under 16 without appropriate consent from a parent or legal guardian. We do not knowingly collect personal information from children in violation of applicable law. If we become aware that such data has been collected, we will take steps to delete it where appropriate.
International Data Transfers
Some service providers, including payment, analytics, hosting or technical infrastructure providers, may process data outside Portugal or the European Economic Area. Where this happens, appropriate safeguards are used when required by applicable data protection law.
Changes to This Policy
We may update this Privacy Policy from time to time. Material changes may be communicated through the website, a notice on the platform or direct notification where appropriate. Continued use of the platform after changes means the updated policy applies.
Contact
For questions, requests or privacy-related matters: Email: geral@thevaltara.com Phone: +351 968 082 129