MYSHOW Privacy Policy

1. This Policy applies to personal data processed through the MYSHOW website, mobile application and related ticketing and event services. 2. The data controller responsible for your personal data is BIG SOUND STUDIO Co., Ltd. (the “Company”). 3. This Policy should be read together with our Terms & Conditions. In the event of any conflict between the two documents in respect of data protection matters, this Policy shall prevail.

We may collect the following categories of personal data: 1. Account data: name, email address, phone number and password, provided when you register or log in, including via third-party social login providers (such as Google, Facebook or Apple). 2. Contact and support data: information you submit through our contact form, including your name, email address, phone number and the content of your message. 3. Transaction data: order history, ticket purchases and related booking details. Payment card details are processed directly by our third-party payment service providers (PSPs); the Company does not collect or store complete payment card numbers. 4. Location data: with your consent, approximate or precise device location, used to show nearby events. 5. Device and usage data: device identifiers, push notification tokens, IP address, app version, operating system, and interaction data collected automatically through analytics tools. 6. Communications: records of correspondence between you and the Company, including customer support requests.

We use your personal data to: 1. Create and manage your account and authenticate you; 2. Process ticket purchases, orders and payments, and deliver electronic or physical tickets; 3. Communicate with you about your orders, events, and customer support requests; 4. Send push notifications and service-related messages, and, where you have consented, marketing communications; 5. Show relevant nearby events based on your location, where enabled; 6. Monitor, analyse and improve the performance, security and usability of the Services; 7. Detect, investigate and prevent fraud, abuse and violations of our Terms & Conditions; 8. Comply with applicable legal, tax and regulatory obligations.

Where the GDPR or an equivalent data protection law applies, we rely on the following legal bases: 1. Performance of a contract, to provide the Services you request (e.g. processing an order); 2. Your consent, for location data, push notifications and marketing communications, which you may withdraw at any time; 3. Legitimate interests, for fraud prevention, service improvement and analytics, balanced against your rights and interests; 4. Legal obligation, where processing is required to comply with applicable law.

1. Payments are processed by independent third-party payment service providers (PSPs), which are subject to their own privacy policies and security standards (including PCI-DSS where applicable). 2. The Company does not store complete credit or debit card numbers, CVV codes or other sensitive payment credentials. 3. We may receive limited transaction data from our PSPs (such as payment status, amount and a masked card reference) necessary to confirm and manage your order.

1. With your consent, the app may access your device's approximate or precise location to help you discover nearby events. 2. You may disable location access at any time through your device settings. Disabling location access may limit certain features of the Services.

1. With your consent, we send push notifications relating to your orders, tickets, event updates and, where applicable, promotional offers. 2. You may disable push notifications at any time through your device settings or, where available, within the app.

We may share personal data with the following categories of recipients, solely to the extent necessary to provide the Services: 1. Event organisers, for the purpose of admission verification and event management; 2. Payment service providers, for the purpose of processing transactions; 3. Cloud infrastructure and analytics providers, including Firebase and other Google services, for hosting, push notifications, crash reporting and usage analytics; 4. Social login providers (such as Google, Facebook or Apple), where you choose to register or log in using such services; 5. Professional advisors, regulators or authorities, where required by law or to protect our legal rights. We do not sell your personal data to third parties.

Your personal data may be transferred to, and processed in, countries other than your country of residence, including countries that may not offer the same level of data protection. Where such transfers occur, we take appropriate measures, such as standard contractual clauses or equivalent safeguards, to ensure your personal data remains protected in accordance with applicable law.

We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, including to comply with legal, accounting or reporting obligations. When personal data is no longer required, we securely delete or anonymise it.

We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure or destruction. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Subject to applicable law (including, where applicable, the GDPR), you may have the right to: 1. Access the personal data we hold about you; 2. Request correction of inaccurate or incomplete data; 3. Request erasure of your personal data; 4. Restrict or object to certain processing activities; 5. Request portability of your data in a structured, commonly used format; 6. Withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal; 7. Lodge a complaint with your local data protection authority. To exercise these rights, please contact us using the details in Article 15.

The Services are not directed at children below the age of legal capacity in their jurisdiction. We do not knowingly collect personal data from children without the consent of a parent or legal guardian. If we become aware that we have collected personal data from a child without appropriate consent, we will take steps to delete such data.

We may update this Policy from time to time to reflect changes in our practices or for legal, operational or regulatory reasons. The updated Policy will be posted on this page with a revised “Last updated” date. Your continued use of the Services after such changes constitutes acceptance of the updated Policy.

If you have any questions, concerns or requests regarding this Policy or the processing of your personal data, please contact us at contact@myshow-live.com.