Privacy Policy

The data controller is NoReplay Ltd, Nairobi, Kenya.

Privacy requests can be sent to privacy@noreplay.vip.

NoReplay collects only the personal data needed to provide and protect the service, including:

• Email address for account access, receipts, service notices, and support.
• Phone number for ticket delivery, account recovery, payment flows, and event operations.
• Purchase history, including event orders, tickets, refunds, and resale activity.

We keep personal data only for as long as needed for the purpose collected or to meet legal obligations.

• Account contact data: retained while your account is active and for up to 3 years after closure.
• Purchase history and payment records: retained for 7 years for tax, accounting, dispute, and fraud-prevention obligations.
• Cookie-consent records: retained for 3 years from your latest preference update.
• Support and privacy-request records: retained for 3 years after the matter closes.

Under the Kenya Data Protection Act, you may request access to your personal data, correction of inaccurate data, deletion where legally available, restriction or objection to processing, and a portable copy of your data.

You can manage privacy requests, including deletion requests, through /me/privacy or by emailing privacy@noreplay.vip. We may verify your identity before acting on a request.

NoReplay's Office of the Data Protection Commissioner registration is pending. This is a placeholder until the registration number is issued and published.