Privacy Policy
1. Introduction
At My Theatre and Film, accessible via mytheatreandfilm.com, we are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy outlines how we collect, use, disclose, and protect your information in accordance with applicable privacy laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). We uphold the principles of data minimization, purpose limitation, and transparency. Your trust is important to us, and we are dedicated to processing your personal data responsibly and in line with your rights.
2. Scope of the Policy and Role of the Data Controller
This Privacy Policy applies to all personal data collected through your interactions with our website, services, and communications, including when you access or use any features of mytheatreandfilm.com. My Theatre and Film acts as the Data Controller, determining the purposes and means of processing personal data. For any inquiries related to this Privacy Policy or your personal data, you may contact us at [email protected].
3. Categories of Data We Process
We may collect and process the following categories of information:
– Usage Data: Includes information about your interactions with our website, such as browser type, Internet Protocol (IP) address, session duration, pages viewed, referring URLs, and system diagnostics.
– Account Data: Includes personal identifiers provided when creating an account, such as full name, postal address, email address, and telephone number.
– Profile Data: Encompasses preferences, interests, purchase history, content interactions, and behavior indicators that help personalize your experience on mytheatreandfilm.com.
– Communication Data: Includes records of correspondence, support inquiries, and communication history when you contact our team or interact with feedback or survey requests.
– Technical Data: Information about your devices, such as operating system, hardware details, browser configuration, screen resolution, and other system settings.
– Transaction Data: Includes payment information (processed securely via third-party providers), purchase details, billing records, and delivery information.
– Preference Data: Covers your marketing preferences, opt-in or opt-out status for email communications, and areas of interest relating to products and services.
4. Legal Bases for Processing
We process personal data under the following lawful bases:
– Consent: Where you have granted permission, particularly for marketing communications or non-essential data collection (e.g., through cookies).
– Contractual Necessity: When data processing is necessary to fulfill a contract or perform pre-contractual measures at your request.
– Legitimate Interest: For purposes such as fraud prevention, network security, and enhancing our services, provided such interests are not overridden by your fundamental rights and freedoms.
– Legal Obligation: When we have a legal duty to retain or disclose personal data under applicable regulations or law enforcement requests.
5. Your Rights
As a data subject, you have the following rights under GDPR, and where applicable, under CCPA:
– Right of Access: You may request access to your personal data we hold.
– Right to Rectification: You can request correction of inaccurate or incomplete data.
– Right to Erasure (Right to be Forgotten): You may request deletion of your personal data under certain conditions.
– Right to Restriction of Processing: You may request limited processing of your data in specific circumstances.
– Right to Data Portability: You can request a copy of your personal data in a structured, machine-readable format.
– Right to Object: You have the right to object to processing based on legitimate interests or direct marketing.
– Right to Opt-Out (CCPA): California residents may request that we do not “sell” or “share” their personal data as defined by CCPA.
To exercise any of these rights, please contact us at [email protected]. We may request verification of identity for security purposes.
6. Security Measures
We implement appropriate technical and organizational measures designed to safeguard your personal data against unauthorized access, use, alteration, or disclosure. These measures include:
– Secure Sockets Layer (SSL)/Transport Layer Security (TLS) encryption for data in transit.
– Role-based access control limiting employee data access on a need-to-know basis.
– Regular security audits and system backups.
– Ongoing staff training in data protection and security protocols.
Despite our efforts, no method of electronic transmission or storage is entirely secure. Users are advised to take precautions when sharing personal data online.
7. International Transfers
Personal data may be transferred outside your jurisdiction, including to countries that may not offer the same level of data protection. Where such transfers occur, we rely on legally recognized mechanisms such as:
– European Commission Standard Contractual Clauses.
– Adequacy decisions where applicable.
– Binding corporate rules or other appropriate safeguards.
We ensure that all recipients of your data uphold a comparable standard of data protection as required under GDPR and CCPA.
8. Data Retention
We retain personal data only as long as necessary for the purposes outlined in this policy or as required by applicable legal obligations. Specific retention periods include:
– Account Data: Retained for the life of the account and up to 12 months thereafter.
– Transaction Data: Retained for a minimum of 7 years for financial compliance.
– Communication Data: Retained for up to 24 months following final correspondence.
– Cookie Data: Retained in accordance with the expiration settings of the cookie (detailed below).
When data is no longer needed, it is securely deleted or anonymized in accordance with best practices.
9. Cookie Policy
Mytheatreandfilm.com uses cookies and similar tracking technologies to enhance the user experience, analyze site traffic, and assist in marketing efforts. Cookies used on our site include:
– Essential Cookies: Required for core website functionality (e.g., login, security).
– Functional Cookies: Remember user preferences and maintain continuity.
– Analytics Cookies: Gather data on how users interact with our website (e.g., Google Analytics).
– Performance Cookies: Monitor system performance and error tracking to improve usability.
10. Cookie Management and Compliance
Upon your first visit to mytheatreandfilm.com, we present a cookie consent banner in compliance with GDPR and CCPA. You may manage or withdraw your consent at any time by adjusting your browser settings or selecting preferences in our cookie management tool. Blocking certain cookies may impact your website experience.
For California users, we honor browser-based “Do Not Track” signals where technically feasible, and we provide links to opt out of behavioral tracking under CCPA guidelines.
11. Children’s Privacy
Our services are not directed to individuals under the age of 13, and we do not knowingly collect personal data from children. If we become aware that a child under 13 has provided us with personal information, we will take immediate steps to delete such information. If you believe a child has inadvertently shared data with us, please contact us at [email protected].
12. Updates to This Privacy Policy
We may revise this Privacy Policy from time to time in response to legal or operational changes. Changes will be posted on this page, and where appropriate, we may notify users via prominent website notices or email. We encourage you to review this Privacy Policy periodically to remain informed about how your data is protected.
13. Contact Information
If you have any concerns, inquiries, or requests relating to this Privacy Policy or the handling of your personal data, please contact us at:
Email: [email protected]
My Theatre and Film is committed to full compliance with all applicable data privacy laws and best practices. We welcome your questions and are here to support your data rights.