Who we are

Redwood Symphony is a registered IRC § 501(c)(3) tax exempt organization located in Redwood City, California. Our website address is: https://redwoodsymphony.org/.

What personal data we collect and why we collect it

Comments

Generally we do not allow users to comment on content on our site. However, when visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Subscription forms

We provide the ability for you to subscribe to our mailing list on our website, through forms that are present on several of our pages. If you choose to subscribe through this form, we will send the email address that you provide to Constant Contact (our email list provider) for the purposes of subscribing you to our mailing list. Additionally, your email address, indication of consent, browser IP address, and user agent are recorded and stored on the website’s database as a record of your consent. You may easily unsubscribe from our mailing list via the link at the bottom of every message sent via Constant Contact.

This site uses reCAPTCHA v3 (provided and operated by Google) to verify subscription form submissions and prevent spam sign-ups. Your use of reCAPTCHA v3 is subject to the Google Privacy Policy and Terms of Use.

Cookies

If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

Embedded content from other websites

Articles on this site may include embedded content obtained from third-party websites and sources (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

Redwood Symphony does not control what data or information these websites may collect about you, or their use of cookies, embedded additional third-party tracking tools, or monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website. Redwood Symphony will disclose the identity of such third-party sites for embedded content where reasonably feasible.

Analytics

Redwood Symphony may use Google Analytics in order to better understand our audience’s engagement and usage of our website, and so that we can make improvements to better serve website users. Google Analytics may collect personal data including but not limited to your IP address, browser agent, user agent, and pages visited on the website. Google’s privacy policies may be found at https://www.google.com/policies/privacy/?hl=en_US.

Security Logs

The IP address of visitors, user ID of logged in users, and username of login attempts are conditionally logged to check for malicious activity and to protect the site from specific kinds of attacks. Examples of conditions when logging occurs include login attempts, log out requests, requests for suspicious URLs, changes to site content, and password updates. This information is retained for at least 60 days.

Financial information

Redwood Symphony does not generally directly receive or process personal financial information (such
as credit card numbers) of visitors to our site. Merchandise or Ticket purchases are handled through
secure third-party service providers such as Square.com, PayPal.com, cafepress.com, apple.com,
amazon.com and BrownPaperTickets.com. Similarly, Redwood Symphony does not retain such financial
information apart from the records provided by such third-party service providers, which can be used to confirm purchaser names, addresses, contact information, and transaction information, but do not
contain credit card account information.

Who we share your data with

This site is scanned for potential malware and vulnerabilities by Sucuri’s SiteCheck. We do not send personal information to Sucuri; however, Sucuri could find personal information posted publicly (such as in comments) during their scan. For more details, please see Sucuri’s privacy policy.

How long we retain your data

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

Security logs are retained for at least 60 days.

What rights you have over your data

If you have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you, except for data we keep for administrative, legal, or security purposes.

Where we send your data

Visitor comments may be checked through an automated spam detection service.

This site is part of a network of sites that protect against distributed brute force attacks. To enable this protection, the IP address of visitors attempting to log into the site is shared with a service provided by ithemes.com. For privacy policy details, please see the iThemes Privacy Policy.

Additional information

How we protect your data

The security of your personal information is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.