Privacy policy

Privacy Policy

Elton John · Planet 101 Ltd Last updated: 23rd September 2026 · Version 1.0

1. Who is responsible for your data

Planet 101 Ltd, of Castle House, Castle Street, Guildford GU1 3UW, United Kingdom, is responsible for the processing of your personal data in connection with the website at https://mexico.eltonjohn.com/ and the services offered through it.

We have designated a person responsible for handling questions and requests about personal data. You can reach them at [email protected].

2. Data we collect

If you decide to use the service it is necessary for us to collect and process certain personal information ("Data"), including:

  • Name, address
  • Email addresses, mobile phone numbers
  • IP addresses, device/browser details, operating system
  • Activities on the site, including interactions with tickets, passes and competitions
  • Purchase history and transaction data
  • Location details from which you access the service should it be requested
  • Confirmation that you are aged 18 or over, which you give by ticking a box when you create an account

We collect only the Data we need for the purposes set out in section 3. Where a field is optional, we will tell you so at the point of collection.

You are responsible for ensuring that all personal information provided to us is accurate and up to date.

The Site and Service may display links to certain third party websites. We encourage you to read the individual privacy policies of those third party websites before providing any of your personal information to them.

3. How we use your data

The Data will be stored along with any additional information you provide and will be used to, these are required to give you the Service and to meet our obligations:

  • Create and manage your account
  • Verify your mobile telephone number
  • Issue and deliver your digital pass
  • Give you access to tickets and ticket competitions, where these are offered
  • Record your attendance at an event, where you have told us you are attending
  • Confirm that you meet the minimum age for the Service
  • Protect the Service and its users against fraud and misuse
  • Respond to your enquiries
  • Comply with our legal, accounting and tax obligations

Where the law requires us to identify a legal basis: these purposes rest on the performance of our contract with you, on our legal obligations, and on our legitimate interest in protecting the Service

3a. Additional purposes, which you may refuse

These are not necessary to provide the Service:

  • Analysing your activity on the site to personalise your experience and show you more relevant content
  • Grouping fans with similar interests into audience segments
  • Deciding which content and notifications you receive, including notifications delivered through your digital pass

Personalisation and Segmentation

We use your activity on the site, including the pages you visit, content you engage with, and your interactions with tickets, passes and features, to understand your interests and group fans with similar interactions into audience segments.

We use these insights to:

  • Show you more relevant information related to the event you are attending
  • Personalise your experience based on what you have previously engaged with
  • Optimise how we present information to fans with similar interests
  • Decide which fans receive which push notifications via the digital wallet pass, including push notifications containing content supplied by an artist or label (see below)

This processing takes place entirely within the Platform. We do not share your fan ID, account details, or any data that could identify you with any third party marketing or advertising provider. We do not use this data to retarget you with advertising on other websites or platforms.

Artists and labels may see aggregated, non-identifying insights about fan segments (for example, "12% of fans in this segment engaged with merchandise pages") to help shape the content they provide. They cannot identify you individually from this data, and do not have access to your fan ID, account details, or personal activity data.

The legal basis for this processing is our legitimate interest in providing a relevant and effective Service. You have the right to object to this processing at any time by contacting us at [email protected]

See section 4 for how to refuse.

How the age confirmation works

When you create an account you confirm that you are 18 or over, and you cannot complete registration without doing so. We keep a record of that confirmation. Ticking that box is a statement of fact about your age, not consent to processing.

4. How to limit the use of your data

You can refuse the additional purposes in section 3, at any time and free of charge, by:

We will action your request within 15 business days and confirm when we have done so.

You can also stop notifications at any time by removing your pass from your wallet, or in your phone's notification settings.

5. Who We Share Your Data With

Payment Service Providers

  • Purpose of sharing data: to process your payments
  • Categories of data shared: name, email address, payment card details

SMS and Emal Providers

  • Purpose of sharing data: to verify your mobile number and send emails relating to the service
  • Categories of data shared: first name, mobile number, email address

Event and Ticketing Providers

  • Purpose of sharing data: to ensure you are able to access the event
  • Categories of data shared: name, email address, mobile number

Digital Wallet Providers

  • Purpose of sharing data: to allow you to download a digital pass and receive notifications
  • Categories of data shared: name and email address

Shipping Providers

  • Purpose of sharing data: to facilitate the delivery of products you order
  • Categories of data shared: name, email address, address

Artist and label marketing

If you opt in when you sign up, we pass your name and email address to eltonjohn.com ltd so they can send you the communications you asked for. That organisation is a separate controller and handles your data under its own privacy notice, which is linked next to the opt-in box. You can stop these at any time by contacting them or us.

All third parties are required to handle your data securely and in accordance with applicable data protection law. You can request an up-to-date list of the entities with which we have shared your data by contacting us.

We may also disclose your data where required by law, court order, or to protect the rights and safety of Planet, our users or others.

Push Notifications via the Digital Wallet Pass

If you download or install the digital wallet pass, you may receive push notifications relevant to you, including content provided by an artist or label. Delivery of push notifications is managed through your device's wallet application and is subject to separate terms of use (from Apple Wallet or Google Wallet). Notifications are controlled by you at the device level: we cannot enable or disable push notifications to your device directly, and we cannot see whether you have muted or disabled notifications for your pass.

You can manage or stop push notifications at any time through your wallet app's notification settings, or by removing the pass from your wallet.

6. Transfers of your data

Planet 101 Ltd is established in the United Kingdom, and your data is processed in the United Kingdom and the European Economic Area. Where we transfer your data to another country, we require the recipient to protect it to the standard set out in this notice.

If you are in the United Kingdom or the EEA: transfers outside the UK/EEA rely on adequacy regulations where these apply, and otherwise on the UK International Data Transfer Addendum or the European Commission's Standard Contractual Clauses, with a transfer risk assessment.

If you are in Brazil: the ANPD has not issued an adequacy decision for the United Kingdom. We transfer your data outside Brazil on the basis that it is necessary to perform our contract with you (Article 33, IV of the LGPD), and, where a Brazilian provider transfers your data to us, under the standard contractual clauses in Annex II to Resolution CD/ANPD nº 19/2024.

7. Your rights

The rights available to you depend on where you are when you use the Service.

A. If you are in Mexico

You have the right to Access your personal data, to request its Rectification where it is inaccurate or incomplete, to request its Cancellation where you consider it is not being properly processed, and to Object to its use for particular purposes. These are your ARCO rights.

You may also withdraw any consent you have given, at any time and free of charge.

B. If you are in the United Kingdom, the EEA or Switzerland

Under the UK GDPR and GDPR you have the rights of access, rectification, erasure, restriction of processing, objection, and data portability; the right to withdraw consent where we rely on it; and the right to complain to the Information Commissioner's Office or your local supervisory authority.

C. If you are in Brazil

Under the LGPD you have the right to obtain confirmation that we process your data; access to it; correction of it; anonymisation, blocking or deletion of data that is unnecessary, excessive or unlawfully processed; portability; deletion of data processed on your consent; information about the entities we have shared it with; information about the consequences of refusing consent; and revocation of consent at any time.

You also have the right under Article 20 to request review of decisions taken solely by automated processing that affect your interests, including which content and notifications you receive. A person will review the decision and we will explain the criteria used, subject to our commercial secrets.

For the purposes of Article 41, our designated person acts as our Encarregado pelo Tratamento de Dados Pessoais the channel between Planet, data subjects and the ANPD. You may also petition the ANPD at https://www.gov.br/anpd.

D. If you are in California

Under the CCPA as amended by the CPRA you have the right to know what we collect and why, to delete it, to correct it, to limit our use of sensitive personal information, and not to be discriminated against for exercising these rights. We do not sell your personal information or share it for cross-context behavioural advertising.

E. If you are somewhere else

Other countries have their own data protection laws and you may have similar rights. If you ask us to exercise a right that does not formally apply where you are, we will honour it wherever we reasonably can.

8. How to exercise your rights

Write to [email protected] telling us your name, an address or email where we can reply, and what you would like us to do. We may need to verify your identity first, and we may ask for more detail if the request is unclear. You will not be charged.

If you are in Mexico: we will tell you our decision within 20 business days, and where we grant the request we will give it effect within the following 15 business days.

If you are in the UK, the EEA or Switzerland: within one month, extendable by two further months for complex requests, in which case we will tell you within the first month.

If you are in Brazil: confirmation that we process your data, and simplified access to it, immediately; a complete declaration within 15 days.

If you are in California: within 45 days, extendable by a further 45 on notice to you.

If you are unhappy with how we have handled your data, contact us first at hello@planet.fans, You may also bring the matter before the data protection authority where you live.

9. Children and young people

The Service is for people aged 18 and over. We ask you to confirm this when you create an account and you cannot register without doing so.

We do not knowingly collect personal data from anyone below that age, and we delete it where we find we have.

If you are in Brazil and we do process data belonging to a child (under 12) or an adolescent (12 to 17), we do so only where it is in their best interests, in line with Article 14 of the LGPD, and we collect only what is strictly necessary.

If you think someone below the minimum age has given us their data, contact [email protected] and we will delete it.

10. Cookies

We use cookies to enhance your experience and collect usage statistics. Cookies help us:

  • Recognise your device and save your preferences
  • Enable you to log in without re-entering your credentials
  • Measure how you use the Service to improve performance

Strictly necessary cookies are required for the Site to function and are always active. All other cookies — including analytics and personalisation cookies — are set only if you consent, through the cookie banner shown when you first visit the Site.

You can also manage cookies through your browser settings, though disabling cookies may affect your ability to use certain features of the Service:

11. Data Retention

We keep your personal data only for as long as necessary for the purposes described in this Policy, and then delete or anonymise it. In practice, this means:

  • Account data (name, email address, mobile number) - for as long as your account is open, and for 12 months after you close it.
  • Transaction and payment history - for 5 years from the date of the transaction.
  • Ticket, pass and attendance records - for 24 months after the event.
  • Access logs (IP address and timestamps) - for 6 months, as required by Article 15 of the Brazilian Marco Civil da Internet (Law nº 12.965/2014), and for up to 12 months where needed for security and fraud prevention.
  • Segmentation and personalisation data - for 18 months from your last interaction with the Service.
  • Marketing and age consent records - for as long as your consent is in place, and for 3 years afterwards as evidence that consent was given.

We may retain data for longer where required by law, or to establish, exercise or defend legal claims.

12. Data Security

We use technical and organisational measures to protect your Data, including encryption in transit, access controls and regular review of our security practices. We ensure that any third parties receiving your Data maintain similar standards.

If a security incident occurs that is likely to result in a risk to your rights, we will notify the relevant supervisory authority and, where required, you, in accordance with applicable law.

13. Changes to the Privacy Policy

We may change this Privacy Policy from time to time. Any changes will be effective from the date they are posted on the Site, and the version number and date at the top of this Policy will be updated. Where changes are significant, we will tell you directly. We encourage you to review this Privacy Policy regularly to stay informed about how we handle your Data.

If you have any questions about our privacy practices or would like to exercise your rights, please contact us at [email protected]