Last updated: 18 August 2026



Fabrik Limited (NZBN: 9429034100783) (“Fabrik”, “we”, “us” or “our”) is committed to protecting your privacy and handling your personal information responsibly.



This Privacy Policy explains how we collect, hold, use, disclose and protect personal information when you interact with us, including when you visit our websites, purchase or register for tickets, enter competitions, sign up for event or marketing updates, attend our events, interact with our social media channels, or otherwise engage with our services.



This Privacy Policy applies to our websites, event websites, ticketing pages, registration forms, competitions, marketing campaigns, digital platforms and other services operated or controlled by Fabrik (collectively, the “Services”).



This Privacy Policy applies to personal information we collect about you both directly (from you) and indirectly (from a source other than you). Where we collect personal information about you indirectly, we handle it in accordance with Information Privacy Principle 3A (IPP3A) of the Privacy Act 2020.



We handle personal information in accordance with the Privacy Act 2020 (New Zealand), including the Information Privacy Principles, and other applicable New Zealand laws, including the Unsolicited Electronic Messages Act 2007 where applicable.



1. Personal information we collect

“Personal information” means information about an identifiable individual. Depending on how you interact with us, we may collect information including:

• your name;
• email address;
• telephone or mobile number;
• date of birth or age where required for an event, competition or other legitimate purpose;
• billing and transaction information;
• ticket purchase and registration information;
• event attendance information;
• information provided when entering a competition or promotion;
• marketing preferences and communication preferences;
• information about the events, artists, products or services you have shown an interest in;
• information you provide when contacting us;
• accessibility or other information you voluntarily provide where reasonably necessary to facilitate your attendance or participation in an event;
• photographs, video recordings and other content in which you may appear;
• information relating to your interactions with our websites, advertisements, emails, SMS messages and social media;
• device, browser, IP address and other technical information;
• information collected through cookies, pixels, tags, SDKs and similar technologies; and
• any other information you voluntarily provide to us.



We recognise that some types of personal information may be particularly sensitive, including information relating to health, accessibility or other personal circumstances. We will only collect such information where it is reasonably necessary for a lawful purpose and will take appropriate steps to protect it.



2. How we collect personal information

We generally collect personal information directly from you. This may occur when you:

• purchase or register for tickets;
• register for an event or event presale;
• sign up to an event mailing list;
• sign up to receive SMS, email or other marketing communications;
• enter a competition, giveaway or promotion;
• complete a form or survey;
• contact us by email, telephone, social media or other means;
• visit or interact with our websites;
• attend one of our events;
• participate in an event activation or promotion;
• interact with our advertisements or marketing campaigns; or
• otherwise provide information to us.

We may also collect personal information about you from third parties where permitted by law. These third parties may include:

• ticketing platforms and ticketing agencies;
• event registration and marketing platforms;
• payment providers;
• event venues;
• event promoters and co-promoters;
• artists and artist representatives;
• sponsors and commercial partners;
• marketing and advertising agencies;
• social media and digital advertising platforms;
• competition partners;
• service providers supporting our events; and
• other organisations where you have authorised the collection or disclosure of your information; or
• where collection is otherwise permitted by law.

Where we collect personal information about you from another person or organisation, we will take reasonable steps, as required by the Privacy Act 2020, to make you aware that we have collected the information, the purposes for which it has been collected, the intended recipients of the information, our identity and contact details, and your rights to access and request correction of the information.



Where you provide us with personal information about any other individual, you must first make that individual aware of:

• the fact that the information has been or will be collected by us;
• the purposes of collection;
• the intended recipients of the information;
• our name and address as the agency collecting and holding the information; and
• their right to access, and to request correction of, that information.

You must also provide us with evidence that you have done so on request. Where applicable, we will also identify any law authorising or requiring the collection.



We will provide this information as soon as reasonably practicable after collection unless an exception under the Privacy Act applies or you have already been made aware of the relevant matters.



The fact that another organisation holds personal information about you does not, by itself, authorise us to collect or use that information. Where we receive personal information from another organisation, our collection and subsequent use of that information must have a lawful basis under the Privacy Act.



3. Why we collect and use personal information

We collect and use personal information for purposes that are reasonably necessary for our business and the delivery of our Services.



These purposes may include:

• selling and administering tickets;
• processing payments and transactions;
• managing event registrations and attendance;
• communicating with you about an event, ticket or transaction;
• providing customer support;
• administering competitions, giveaways and promotions;
• providing information about events, artists, festivals and other products or services;
• sending marketing communications where permitted by law and in accordance with your preferences;
• managing presale and event sign-up campaigns;
• understanding audience interests and engagement;
• improving our events, products, Services and websites;
• measuring the effectiveness of our marketing and advertising;
• measuring and attributing ticket sales, registrations and other conversions to marketing campaigns;
• creating, matching and analysing advertising audiences where permitted by law;
• administering surveys and research;
• managing event security, safety and accessibility;
• preventing and detecting fraud, unlawful activity or misuse of our Services;
• protecting our rights, property and the safety of our customers, staff and event attendees;
• complying with legal and regulatory obligations; and
• any other purpose that you would reasonably expect or that is otherwise permitted by law.

We will not use personal information for a purpose that is materially different from the purpose for which it was collected unless that use is permitted by the Privacy Act or other applicable law.



4. Providing personal information

Unless we tell you otherwise, providing personal information to us is generally voluntary. However, certain information may be required for us to provide particular Services.

For example, if you do not provide required contact, payment or registration information, we may be unable to:

• process a ticket purchase;
• provide presale access;
• register you for an event;
• administer a competition or promotion;
• respond to a request;
• provide accessibility arrangements; or
• provide another requested service.

Where providing information is required or authorised by law, we will provide information about that requirement where required, including the relevant law and, where applicable, whether supplying the information is voluntary or mandatory and the consequences of not providing it.



5. Marketing communications

We may use personal information to send you information about events, artists, festivals, ticket releases, presales, promotions, competitions, products, services and other communications that may be relevant to you.



Where required by law, we will only send commercial electronic messages where we have a lawful basis to do so under applicable privacy and electronic messaging laws.

Commercial electronic messages sent by or on behalf of Fabrik will comply with the Unsolicited Electronic Messages Act 2007, including requirements relating to sender identification and functional unsubscribe facilities.



You can unsubscribe from marketing communications at any time by:

• using the unsubscribe function included in an email;
• following the unsubscribe instructions included in an SMS or other electronic message; or

• contacting us using the details provided in this Privacy Policy.

We will process unsubscribe requests within the timeframe required by applicable law.

Unsubscribing from marketing communications will not prevent us from sending you non-marketing communications that are reasonably necessary, such as information relating to:

• a ticket purchase;
• an event you are attending;
• a payment or booking;
• a cancellation or postponement;
• a venue or date change;
• an event safety or security matter; or

• another transaction or service you have requested.

Where you have signed up specifically to receive information about an event, we may send communications reasonably connected with that event, including presale, onsale, ticket availability and operational event updates, subject to applicable law and your communication preferences.



6. Event-specific marketing and sign-ups

When you register interest in a particular event, artist or campaign, we may use the information you provide to communicate with you about that event, artist or campaign.



For example, if you provide your email address or mobile number through an event presale or sign-up form, we may use that information to send you:

• presale information;
• onsale information;
• event announcements;
• ticket availability updates;
• lineup or artist announcements;
• event information; and

• other communications reasonably connected with the event or campaign.



These communications may be sent by Fabrik or by service providers acting on our behalf.

Where an event partner, artist, sponsor, promoter or other third party will receive your personal information for its own marketing purposes, rather than simply acting on our behalf, we will identify that arrangement at the point of collection where required and obtain any consent or other lawful authority required by law.



Where we intend to use information collected through an event-specific registration for broader marketing unrelated to the purpose for which you signed up, we will do so only where permitted under applicable privacy and electronic messaging laws.



7. Sharing personal information

We may disclose personal information to organisations and individuals where reasonably necessary to provide our Services, operate our business, administer our events or where otherwise permitted or required by law.

These may include:

• ticketing companies and ticketing platforms;

• event venues and venue operators;
• payment providers;
• technology and software providers;
• email and SMS service providers;
• marketing and advertising providers;
• digital advertising and analytics providers;
• event production and operational suppliers;
• security and medical providers;
• artists, artist representatives and management teams;
• event promoters and co-promoters;
• sponsors and commercial partners;
• competition and promotional partners;
• professional advisers, including legal, accounting and insurance advisers;
• insurers;
• contractors and service providers;
• government agencies, regulators, emergency services or law enforcement authorities where required or permitted by law; and
• other parties where you have authorised us to disclose your information or disclosure is otherwise permitted by law.

We do not sell your personal information.



Where we engage a service provider to process personal information solely on our behalf, we take reasonable steps to ensure that the provider appropriately protects the information.



Where personal information is disclosed to sponsors, commercial partners, artists, promoters or other third parties for their own marketing purposes, we will only do so where permitted by applicable law and, where required, with appropriate consent or other lawful authority.



Nothing in this Privacy Policy authorises Fabrik or any third party to use or disclose personal information in a manner that would otherwise breach the Privacy Act 2020.



8. Ticketing and third-party platforms

Our events may use third-party ticketing, registration, payment, marketing and technology platforms.

When you purchase a ticket, register for an event or interact directly with a third-party platform, that platform may collect and process your personal information under its own privacy policy.



We encourage you to review the privacy policy and collection notices of the relevant third-party provider.

Depending on the circumstances, Fabrik and the third-party platform may separately collect or hold personal information about you.



Where we engage a third party to process personal information on our behalf, we take reasonable steps to ensure that the information is handled appropriately and in accordance with applicable privacy obligations.



9. Overseas processing and disclosure

Some of our technology providers, ticketing platforms, marketing providers and other service providers may store or process personal information outside New Zealand.

Where an overseas provider acts solely as our agent to store or process information on our behalf and does not use or disclose that information for its own purposes, the arrangement may be treated differently under the Privacy Act from a disclosure of personal information to an overseas recipient.



We may also disclose personal information to organisations or individuals located outside New Zealand.

Where Information Privacy Principle 12 applies to an overseas disclosure, we will take reasonable steps to ensure that the disclosure is permitted under the Privacy Act 2020.



Depending on the circumstances, this may include satisfying ourselves that the overseas recipient:

• is subject to the Privacy Act 2020;
• is subject to privacy laws that provide overall comparable safeguards;
• participates in an applicable prescribed binding scheme;
• is located in a prescribed country; or
• is contractually or otherwise required to protect the information in a way that provides overall comparable safeguards to those required under New Zealand law.

Where the Privacy Act permits an overseas disclosure on the basis of your authorisation and the overseas recipient may not be required to protect the information in a way that provides comparable safeguards to New Zealand law, we will expressly inform you of that fact before seeking your authorisation.



10. Cookies, pixels and tracking technologies

Our websites and digital Services may use cookies, pixels, tags, SDKs, server-side tracking technologies and similar technologies.



These technologies may collect information such as:

• IP address;
• browser and device information;
• pages viewed;
• links clicked;
• event or campaign interactions;
• advertising interactions;
• approximate location information;
• referral information;
• transaction or conversion events; and

• information about how you use our websites and Services.

We may use this information to:

• operate and secure our websites;
• remember preferences;
• understand website usage;
• improve our Services;
• measure advertising performance;
• attribute ticket purchases, registrations or other conversions to advertising campaigns;
• understand campaign effectiveness;
• create, match or analyse advertising audiences;
• limit, personalise or provide relevant advertising; and
• analyse audience behaviour.

We may use third-party advertising, analytics and technology providers to assist with these activities.

Depending on the technologies used, information may be transmitted to advertising or analytics providers. Those providers may process the information on our behalf or, where permitted by law, combine it with other information they hold in accordance with their own privacy policies.



Our use of advertising and tracking technologies does not authorise us or a third party to collect, use or disclose personal information in a way that would otherwise breach applicable privacy law.

You may be able to control or disable certain cookies through your browser or device settings. Some website functionality may not operate correctly if certain cookies are disabled.



Where additional consent or notification is required for particular tracking technologies, we will provide this at the relevant point of collection or use.



11. Photography, video and event recordings

Our events may be photographed, filmed or otherwise recorded for purposes including:

• event documentation;
• security and safety;
• marketing and promotional material;
• social media;
• advertising;
• media coverage;
• future event promotion; and

• archival purposes.

This may include crowd shots and general audience footage.

By attending an event, you may appear incidentally in photographs, video or other recordings.

Where appropriate, signage or other notices may be used at event venues to inform attendees that photography, filming or recording is taking place.



If you have a particular concern about being photographed or recorded, please contact us or speak with event staff where reasonably practicable.



12. Competitions and promotions

If you enter a competition, giveaway or promotion operated by us, we may collect information such as your name, contact details, age and other information reasonably required to administer the promotion.

Competition information may also be shared with competition partners where reasonably necessary to administer the competition or provide a prize, subject to applicable law and the relevant competition terms and conditions.



Where a competition partner will receive your information for its own marketing purposes, this will be disclosed where required and any necessary consent will be obtained.

Any additional use of your information for marketing will be subject to applicable privacy and electronic messaging requirements.



13. Accuracy of personal information

We take reasonable steps to ensure that personal information we use or disclose is accurate, up to date, complete, relevant and not misleading, having regard to the purpose for which the information is proposed to be used or disclosed.



You can contact us if you believe that personal information we hold about you is inaccurate, incomplete or out of date.



14. Access to your personal information

You generally have the right to request access to personal information we hold about you. You can make an access request by contacting our Privacy Officer using the details below. We will respond to requests in accordance with the Privacy Act 2020.



In some circumstances, we may be unable to provide access or may need to withhold some information where an exception under the Privacy Act applies.



We may take reasonable steps to verify your identity before providing access to personal information.



15. Correction of your personal information

If you believe personal information we hold about you is incorrect, incomplete or misleading, you may request that we correct it.



We will consider and respond to your request in accordance with the Privacy Act 2020.

Where we do not make a requested correction, you may have the right to ask us to attach a statement of the correction sought to the information.



16. Privacy complaints

If you have a concern or complaint about how we have handled your personal information, please contact our Privacy Officer.



We will investigate your complaint and aim to resolve it within a reasonable timeframe.

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of New Zealand.



17. Data retention

We will not retain personal information for longer than is required for the purposes for which the information may lawfully be used, unless a longer period is required or permitted by law.

The period for which we retain information will depend on factors including:

• the type of information;
• the purpose for which it was collected;

• our legal and regulatory obligations;
• our legitimate business requirements; and

• whether the information is required for the establishment, exercise or defence of legal claims.

When personal information is no longer required, we will take reasonable steps to securely delete, destroy or de-identify it, or otherwise ensure that it is no longer readily accessible where appropriate.



18. Security

We take reasonable steps to protect personal information from loss, unauthorised access, disclosure, alteration, modification or misuse.



Depending on the circumstances, these measures may include:

• access controls;
• password protection and authentication measures;
• encryption;
• secure systems;
• restrictions on staff and contractor access;
• staff training; and
• other appropriate technical and organisational safeguards.

Where a service provider holds or processes personal information on our behalf, we take reasonable steps appropriate to the circumstances to ensure that the provider protects that information.

However, no method of electronic storage or transmission is completely secure. We cannot guarantee that personal information will never be subject to a security incident.



19. Privacy Breaches

If we become aware of a privacy breach involving personal information, we will assess and respond to the incident in accordance with our obligations under the Privacy Act 2020.

Where a privacy breach has caused or is likely to cause serious harm to affected individuals, we will notify the Office of the Privacy Commissioner and affected individuals as required by law, subject to any applicable statutory exceptions.



We will also take reasonable steps to contain, investigate and remediate privacy breaches and reduce the risk of similar incidents occurring in the future.



20. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our Services, business practices, technology or applicable laws.



The most current version will be published on our website and will apply from the date stated at the top of the policy.



Where required by law, we will provide additional notification or seek consent before applying a change to personal information already collected.



21. Contact us

If you have any questions about this Privacy Policy, wish to access or correct your personal information, or wish to make a privacy complaint, please contact:



Fabrik

Attn: Privacy Officer

NZBN: 9429034100783

Business address: 300 Childers Road, Gisborne, 4010 , New Zealand

Email: info@fabriknz.com



This Privacy Policy should be read together with any applicable ticketing terms, competition terms, event terms, collection notices and other notices provided at the point personal information is collected.