Data and privacy

KAIF EMPIRE S.R.L. · updated 11.09.2026

What we record, why, and who receives it. The data controller for the platform is KAIF EMPIRE S.R.L.; the organiser of a party is a separate controller for their own guests.

1. Who is responsible

We are responsible for the platform: KAIF EMPIRE S.R.L., details at the bottom of the page.

We pass the guest's name and email to the organiser of the party the ticket is for — otherwise they cannot run the door list or answer the guest. From that point the organiser handles this data themselves and answers for it themselves, including their own mailings.

2. What we collect

From a guest: the name entered at checkout, the email address, what was bought and when, the amount and currency, and whether the ticket was scanned at the door. We never see the card number: Stripe takes it.

From an organiser: name, brand name, email, storefront address, and the identifier of their Stripe account. Identity documents go to Stripe and never reach us.

Technical: anonymous counters of views and clicks per party — daily numbers only. When someone subscribes for new dates we store a fingerprint of the network address (not the address itself) to hold back spam.

3. Legal basis

• Performing the contract — issuing the ticket, sending it, letting the guest in.
• Legitimate interest — protection against password guessing and spam, sales counters for the organiser, handling chargebacks.
• Legal obligation — keeping sales records for accounting and tax.
• Consent — only for emails about new dates; every one carries an unsubscribe link.

4. Who receives it

• Stripe — taking payments, verifying the organiser, refunds.
• Cloudflare — the site and the database.
• Resend — sending ticket emails; for our domain it runs in the European region.
• The organiser — names and emails of the guests of their party.

We do not sell data and do not pass it to advertising networks. There are no advertising or analytics trackers on the platform's pages.

5. Where data travels

Stripe and Cloudflare are international services and may process data outside the European Economic Area under the standard contractual clauses approved by the European Commission.

6. How long we keep it

An order and its ticket are kept while the party is being accounted for, and after that for as long as the law requires accounting records to be kept. Anonymous counters stay — no person can be found through them. An organiser's account is kept while it is in use, and closed on request.

7. Cookies

Only the ones the service cannot work without. There are no advertising cookies, which is why there is no consent banner.

• sid — the dashboard session, 30 days.
• rcode — who brought the guest through a link, 30 days.
• otlang — the chosen language, one year.

8. Your rights

You may ask for a copy of your data, correct it, delete it, restrict processing, take it in a machine-readable form, or object to processing. Write to info@kaifclub.com — we answer within a month.

If the answer does not satisfy you, you may complain to a supervisory authority: in Romania that is ANSPDCP (dataprotection.ro), or to the authority of your own country.

Data already held by an organiser is theirs to handle: address requests about their mailings to them.

9. Children

The platform is not meant for children: the parties sold through it normally carry an age limit, and tickets are bought by adults.

Details