GDPR & data retention
Under the GDPR you shouldn't keep attendee data longer than you need it. Cleartix handles much of this for you and gives you tools for the rest.
Automatic purging
Cleartix automatically purges personal data once it passes its retention period, so old data doesn't linger. This covers, for example:
- Ticket data
- Check-in logs
- Waitlist entries
- Data from cancelled events
You don't have to remember to clean up — it happens on schedule.
Handling data requests (DSARs)
When someone exercises their data rights, you can respond from Cleartix. For a given email address you can:
- Export the personal data tied to it.
- Correct it where it's wrong.
- Delete it on request.
That covers the most common data subject access requests without manual digging through orders.
Your role
As the organiser, you are the data controller for your attendees' personal data — Cleartix processes it on your behalf. Set your policy and contact details under Legal & privacy.
Note: Deleting personal data on request is permanent and can't be undone. Confirm the requester's identity first, and remember that any CSV you exported earlier lives outside Cleartix — delete those copies too.
Last updated: June 5, 2026