Privacy Policy

Dear Visitor!

Welcome to our website at https://staging.rctheatreco.com. This site is operated either by or for and on behalf of The Royal Canadian Theatre Company. On this site and in these documents The Royal Canadian Theatre Company may be referred to as “us”, “we”, “our” and “RCTC”.

You can find more information about us on the “About Us” page. You will find current contact information on the “Contact Us” page.

You can find a general introduction to our our polices at the “About our Policies” page. Other policies and Terms & Conditions are linked in the footer of our pages.


This page explains our policy regarding your privacy.

 

What personal data we collect and why we collect it

When you sign up, complete forms, leave comments or otherwise message us we will collect and store the data you submit to us in the respective forms including such personal information as your Name, eMail address and other contact information you may submit to us. In addition we may automatically collect such information as IP Address, Browser Signature or other technical data in order to protect us from spam and other illegal activities. This information is retained on our server and may be backed-up off-site as part of our procedures. Data is deleted when you request it, when it is no longer needed for the transaction or when we stop operating our server or site. Some data may be retained for legal reasons such as tax or accounting as well a proof of purchase or proof of consent where applicable.
Unless you submit information to the site we do not collect personal information except as may be detailed in our “Cookie Policy”.
Whilst we have disabled the service, a string created from your email address which is anonymous (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment if you uploaded one or one is found at your Gravatar account.

 

Media

IF we offer the option to upload files you accept that those files become and remain publicly accessible. IF you do upload files you warrant to us that you either own the right to publicly display such media or that you have verified the media to be in the public domain or licensed under creative commons. Where you are the owner you expressly grant to us a non-exclusive perpetual license under creative commons (either CC-by or CC-by-sa) in order to permit us to display your uploaded content. We suggest that you avoid uploading images with embedded location data embedded (e.g. EXIF GPS). This information may be added automatically by your camera or mobile phone and visitors to the this site can download any image and extract any location data from such images.

Analytics data

Many sites use Google Analytics as part of their site (often in conjunctions with Google add-words) to track the behavior of visitors and analyze semi-private data. There is a similar service connected to advertising through BING (i.e. Microsoft). Since we do NOT use any advertising or pay-per-click services we also do not use any of the above or similar services. However, analytics can assist us in knowing where visitors come form, how long they stay, what browser they use, failure to find pages they want to see and other statistics. Hence we like to use such information in order to make our web site more useful and convenient. For this purpose our service providers operate their own analytics server. The software, called Matomo (previously Piwik), is Free and Open Source Software (FOSS) and has been reviewed for security. Data about the visit (NOT the visitor) is collected by our service provider ONLY for our own use and NOT forwarded or sold to any other parties. Nor is the data used by our service provider for any other purposes. We believe this to be a safe compromise between our need to keep improving our site and the respect of the visitor’s privacy. Please note that your IP address (which “could” be used to identify a user via their ISP – unless you use a VPN) is temporarily stored at the server of our service provider. ALL stored IP addresses are made anonymous within 24 -48 hours of collection by an automated process after the general region of the visit has been estimated using automated tools. Thus the system is in compliance with Canadian, US and EU data privacy regulations.

How long we retain your data

To use certain functions on our site you need to register as user. For registered users we store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username due to technical requirements). Website administrators can also see and edit that information. Only registered users may leave comments. If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue. However, when you delete your account your comments will be retained without personal information unless you entered any such information within the body of the comment. It is against our community rules to enter personal identifiable information in comments or other public display forms. Therefore, removal of such information must be done on a manual basis and will require payment of a service charge.

What rights you have over your data

If you have an account on this site, or have left comments, you can review your personal data at any time. You can also erase any personal data we hold about you by deleting your account. This does not include any data we are obliged to keep for administrative, legal or security purposes as described herein.

Where we store your data

Your data is stored on rented server(s) located in the USA, Canada or other suitable location. Data security is maintained by our hosting provider and/or our consulting engineers. European site visitors are advised that any data they may submit is stored as described. Where a registered user does not agree with these provisions they are instructed to immediately remove their account as the sole and finite remedy.

How we protect your data

We make every effort to provide secure data connection via SSL protocol secured with a publicly available SSL certificate from Let’s Encrypt. This certificate ensures that we are in control of our domain and the underlying server(s) and ensures that you are actually connected to our site. However, it is the obligation of the visitor to ensure that their browser is actually connecting via “https” protocol (Green Lock Icon or similar in most browsers). Access to the ‘back-end’ of our servers is secured by additional SSL certificates and strictly limited to authorized and competent staff and/or service providers.

What data breach procedures we have in place

We and/or our service providers monitor and maintain our server software to accepted industry standards and conduct regular security updates. Were applicable, we and/or our service providers may also use automated tools and manual audits to check for certain vulnerabilities. We and/or our service providers subscribe to security updates and/or warnings of the respective software vendors and/or  communities where available. In the unlikely event of a breach we will notify all subscribed users by eMail once the extent of any such breach has been determined and properly mitigated.

What third parties we receive data from

Our web site may use data provided by third parties and they may be able to track your interaction with our site. This may take place in case like viewing maps from google or openstreetmaps or viewing videos on youtube or vimeo and similar data. At this time we do not place advertising from any third party service on our site and we do not have any (paid) affiliate links embedded. IF we should ever include links which earn a commission or other income these will be clearly and openly disclosed.

Links to 3rd party websites

We may offer links to other websites for the convenience of the visitor and easy of access to refereed information. These links are usually easy to identify. Whilst we make every effort to curate meaningful links and maintain these up-to-date, we advise all visitors that these webpages are maintained by 3rd parties and we can not be held accountable for the functionality of those links and/or the content of these linked sites.

What to do if you have questions or concerns

If you have concerns or questions regarding privacy you are always welcome to contact us using our “Contact Us” page.

There are also many good resources you may find on the internet – “click for a search”.

(NB: A link to “Google” for such a search would by itself compromise your privacy because they keep track of what you search for… Hence the link above takes you to a more “neutral” search engine…)