Privacy Policy
1. Introduction
At Sancho the Play (“we,” “our,” or “us”), accessible via sanchotheplay.com, we deeply value and respect your privacy. We are committed to safeguarding personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). This Privacy Policy outlines how we collect, use, disclose, and protect your personal data, and reflects our dedication to transparency and the responsible handling of personal information.
2. Scope of This Policy and Our Role as Data Controller
This Privacy Policy applies to all users and visitors of sanchotheplay.com. It governs the collection and processing of personal data through our website and any related online services. For the purposes of GDPR and other applicable privacy laws, we are the “data controller” of your personal data. If you have any questions or concerns, you can contact us at [email protected].
3. Categories of Data We Process
We may collect and process the following categories of personal data:
– Usage Data: Includes information such as your browser type and version, IP address, pages visited, time and date of visit, session duration, referring websites, and interaction data on sanchotheplay.com.
– Account Data: Information provided when creating or managing an account, such as your full name, billing and shipping address, email address, and phone number.
– Profile Data: Information about your preferences, interests, purchase history, behavior while using our website, and account settings.
– Communication Data: Includes records of correspondence with our support or contact teams, including inquiries, complaints, and contact form submissions.
– Technical Data: Information regarding the device used to access sanchotheplay.com, operating system, internet connection, browser configuration, and diagnostic or crash data.
– Transaction Data: Details of transactions conducted through our website, including payment methods, order details, billing information, and delivery tracking.
– Preference Data: Includes marketing preferences, communication consents, subscription choices, and expressed interest in particular shows, products, or news.
4. Legal Bases for Processing Personal Data
We rely on the following legal bases under the GDPR for processing your personal data:
– Legitimate Interests: To analyze usage patterns, improve user experience, market our events and services, and ensure network and information security.
– Contractual Necessity: To fulfill your requests, process ticket purchases, manage accounts, and deliver services as agreed.
– Consent: For marketing communications, non-essential cookies, and newsletter subscriptions where required by law.
– Legal Obligation: Where the processing is necessary to comply with legal obligations, such as fraud prevention or tax laws.
5. Your Rights
Subject to applicable laws, you have the right to:
– Access: Request a copy of the personal data we hold about you.
– Rectification: Request correction of inaccurate or incomplete personal data.
– Erasure: Request the deletion of your personal data under certain conditions.
– Restriction: Request the limitation of data processing in specific circumstances.
– Portability: Request your personal data in a structured, commonly used, and machine-readable format to transfer to another data controller.
You may exercise these rights by contacting us at [email protected]. We take privacy requests seriously and will respond in accordance with applicable regulations.
6. Security Measures
We implement appropriate technical and organizational measures to secure your personal data from unauthorized access, alteration, disclosure, or destruction. These measures include:
– Data encryption during transfer and storage
– Secure access protocols
– Periodic security audits
– Restricted access controls for authorized personnel
– Regular staff training on data protection best practices
– Daily data backups stored in secure environments
7. International Data Transfers
Your personal data may be transferred to and processed in jurisdictions outside of your country of residence, including regions that may not provide equivalent data protection laws. Where such transfers occur, we rely on standard contractual clauses or other approved mechanisms under GDPR to ensure an adequate level of protection.
8. Data Retention
We retain personal data only as long as necessary to fulfill the purposes for which it was collected, to comply with legal obligations, or to resolve disputes. Specific retention periods include:
– Usage Data: Retained for up to 12 months for analytics
– Account and Profile Data: Retained as long as the user account remains active
– Transaction and Communication Data: Retained for up to 7 years for legal and accounting purposes
– Marketing and Preference Data: Retained until consent is withdrawn or until no longer relevant
9. Cookie Policy
sanchotheplay.com uses cookies and similar tracking technologies to enhance your browsing experience and provide insights into website performance. The types of cookies used include:
– Essential Cookies: Enable core functionality such as page navigation and secure user authentication.
– Functional Cookies: Remember user preferences and choices to improve user experience.
– Analytics Cookies: Collect anonymous usage data to help us understand how visitors interact with the site.
– Performance Cookies: Measure the efficiency of various site features and pages.
10. Cookie Management and Compliance with GDPR & CCPA
Users can manage their cookie preferences at any time by adjusting browser settings or opting out of specific categories on our cookie notice banner. For GDPR compliance, we request your explicit consent for non-essential cookies. Under the CCPA, California residents may opt out of the “sale” of personal data by contacting us or using provided controls. You may also block or delete cookies via your web browser’s settings.
11. Special Protections for Children Under 13
sanchotheplay.com is not intended for use by individuals under the age of 13. We do not knowingly collect or solicit personal data from children under 13. If we become aware that we have unintentionally collected data from a child, we will promptly delete such data. Parents and guardians with concerns can contact us at [email protected].
12. Policy Updates
We may update this Privacy Policy from time to time to reflect legal, technical, or business changes. Substantial changes will be communicated through our website or direct notification where appropriate. Continued use of sanchotheplay.com following updates indicates your consent to the revised policy.
13. Contact
If you have any questions about this Privacy Policy, your personal data, or wish to exercise your data rights, please contact us at:
Email: [email protected]
We are committed to ensuring compliance with all applicable privacy laws and protecting your data rights. Please reach out with any concerns or requests related to privacy or data protection.