Search

Privacy Policy

Our website address is: https://musicinportland.org

Portland Choir & Orchestra is an Oregon Nonprofit Corporation registered under IRS Section 501(c)(3) since 2005.  Our Federal tax-ID is 26-4239123.  Visit About Us to learn more.

Comments

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Contact form

If you fill out and submit our Contact form, an email is generated and sent to the team responsible for monitoring such requests.  We do not retain this information except in the email, and the email will be distributed and used only to respond to your request.

Email

Email lists are available for subscription on the website.  These lists are maintained by Constant Contact, and when you add yourself to a list, you agree to Constant Contact privacy policy.  All emails distributed through Constant Contact have a safe unsubscribe option at the bottom of the message.  If you find you have unsubscribed by mistake, you can re-subscribe at the bottom of this page or by completing the Newsletter form.

Cookies

If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Checkout

When you checkout after adding items to your cart, the cart is transferred to our payment processor, Stripe, which collects further information, including credit / debit card, Apple Pay, or Google Pay credentials, from you in order to complete payment.  At your request, Stripe will retain your payment method or not, subject to Stripe’s privacy policy.  Information sufficient to complete a transaction is never returned to WooCommerce, HubSpot, PCO, nor any partners thereof.  Stripe does return a token to WooCommerce which identifies your saved payment method in order for Stripe to reuse it in a future transaction.  This token contains the last 4 digits of your account number only in order for you to identify the payment method.  This token is saved by WooCommerce in your profile on this website.

Subscription

If you subscribe to a recurring donation, only the Stripe token described above is retained by WooCommerce in order to complete subsequent transactions.  PCO will never see nor retain a complete account number nor data authorizing said payment method such as expiration date or CVC.  This token is described in detail in the WooCommerce documentation.

Other

When you enter any data into this website, Google reCaptcha analyzes this and other metadata confirm you are not a bot.  This metadata includes, but is not limited to:
  • Your IP address
  • Resources loaded, including styles or images
  • Your Google account information
  • Your behavior, like scrolling on a page, moving the mouse, clicking on links, time spent completing forms, and typing patterns
  • Your browser history
  • CSS information
  • Your browser plug-ins 
  • Cookies
This and other data is subject to Google’s reCaptcha terms. and privacy policy.

Your personal data is stored in our WordPress site database, and our HubSpot CRM.  HubSpot is directly connected to the website and non-financial data is automatically transferred between them from purchases and other website interaction.  In order to conduct financial transactions, some of your personal data is shared with Stripe, our financial transaction processor.

When you complete a financial transaction on this website, your email will be used to notify you of additional opportunities as they arise through Constant Contact.  All messages distributed by Constant Contact contain a safe unsubscribe option at the bottom of the message.

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username).

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

If you login to your account on this site, you may inspect and edit your personal profile data.  If an email address stored in a saved profile is entered through a guest checkout process, the guest must login in order to use that email, and thus modify the associated profile.

If you do not create an account on this site and you conduct financial transactions herein, the profile associated with your email address may be overwritten by other similar transactions.

We may communicate with you using email and either HubSpot or Constant Contact.  These services provide an opt out choice in every email.  Other social media outlets such as FaceBook and Twitter are opt in, meaning you choose to follow or unfollow us via the platform user interface.  Personal data is not shared between these social media outlets, our website, nor our CRM.

Visitor comments may be checked through an automated spam detection service.

Your non-financial personal data is stored on our WordPress site, and in our Hubspot CRM, as such subject to Hubspot’s privacy policy.  We may manually transfer contact data between HubSpot and Constant Contact in order to communicate with your email.

Financial transactions are conducted by Stripe, to whom we send your cart, which in turn contains a sufficient portion of your profile to complete the transaction.  Any payment data (such as a credit card account number) retained on your behalf by Stripe is never returned to PCO and is subject to Stripe’s privacy policy.

Your profile stored within our WordPress site includes name, email addresses, phone numbers, shipping and billing addresses, along with any content that you may contribute.  Website administrators can also see and edit that information, however no one can see your password as only an encrypted hash is stored, never the clear text password.

How we protect your data

Your data is managed by WordPress and several plugins, including but not limited to WooCommerce, HubSpot, Stripe, and iThemes.  In order to safely keep all of these products updated, PCO maintains a sandbox where we can test the website against updated software before it is deployed to the production site.

SPAM mitigation

All places on this website where data is accepted from users are protected by Google reCaptcha against SPAM and other unauthorized exploitation of services offered by this website.  When you enter and submit information on any form on this website, you agree to the Google’s terms associated with their reCaptcha service.

What data breach procedures we have in place

Our WordPress site is monitored by the iThemes Security Pro plugin, which monitors the site for break-ins and breaches, and reports them to us.

This Policy

The privacy policy of Portland Choir & Orchestra is subject to change at any time and is published only in this format on this website.  Any copies of this policy are valid only at the moment the copy is created.