Last updated: 22 August 2025
1. Who We Are
River City Community Orchestra (“RCCO,” “we,” “us,” “our”) is a California nonprofit public-benefit corporation run entirely by volunteers and recognized as tax-exempt under Section 501(c)(3) of the Internal Revenue Code. We present free concerts, share news with supporters, and accept online donations processed exclusively through Zeffy (zeffy.com). (support.zeffy.com)
2. Scope of this Notice
This notice applies to information we collect offline (e-mail, phone, paper forms) and online at rccorchestra.org. It does not cover Zeffy; please review Zeffy’s own privacy policy for that service. (support.zeffy.com)
For clarity: RCCO never receives or stores payment card details; Zeffy alone processes those on its PCI-DSS-compliant platform.
3. Information We Collect & Why
| Category | Examples | Purpose |
|---|---|---|
| Identifiers | Name, e-mail, phone | Reply to inquiries, send concert news |
| Musician profile data | Instrument, role, résumé, photo | Publish ensemble roster (with consent) |
| Donor records | Amount, date, campaign; for offline donations we may also record donor name and payment method if provided | Acknowledge gifts; IRS reporting |
| Technical data | IP address, cookie ID | Basic site analytics; error logs in aggregated form only, not used to profile individuals |
| Communication preferences | Newsletter opt-in, unsubscribe requests | Respect your choices about contact |
4. How We Share (or Don’t Share) Data
No sale or rental. We never sell, rent, or trade personal information.
No direct-marketing disclosure. RCCO has no employees and engages in no third-party direct marketing, so California’s “Shine-the-Light” law does not apply.
Service providers. Trusted vendors (e.g., our website host, e-mail platform) may access data only to perform contracted services and must keep it confidential.
Legal compliance. We may disclose data if required by law, such as IRS filings, subpoenas, or valid court orders.
5. Your Choices
Access / Deletion. E-mail rivercitycommunityorchestra@gmail.com or write to the postal address below to request a copy of, correction to, or deletion of your information. Providing two simple contact methods satisfies CalOPPA transparency expectations.
Unsubscribe. Click “unsubscribe” at the bottom of any newsletter or contact us by e-mail.
California rights. Although RCCO is a small nonprofit not subject to the California Consumer Privacy Act (CCPA/CPRA), we voluntarily honor reasonable requests to access, correct, or delete your personal information.
6. Cookies & Online Tracking
We use only first-party cookies for basic site analytics. If we use Google Analytics or similar, we configure it to report anonymized, aggregate statistics. We do not track users across third-party sites, and we currently do not take action on browser “Do Not Track” or Global Privacy Control (GPC) signals, though you may still use the site if you transmit such signals. CalOPPA requires that we tell you this.
7. Data Security
We protect personal data with industry-standard technical and organizational safeguards (HTTPS, limited-access accounts, regular backups). However, no method of transmission over the internet or method of electronic storage is 100% secure; we cannot guarantee absolute security. If we ever suffer a breach affecting 500 or more California residents, we will notify affected individuals and the Attorney General, per Civil Code § 1798.82.
8. Data Retention
Musicians & Volunteers: kept while you are active and for up to three years after departure.
Donor & Finance Records: retained seven years to satisfy IRS documentation rules. Please note: donor names above reporting thresholds may appear in public IRS Form 990 filings.
Mailing-list subscribers: until you unsubscribe or after two years of inactivity, whichever comes first.
After these periods we delete or anonymize the data so that it cannot be reconstructed or linked back to individuals.
9. Children’s Privacy
Our site is not directed to children under 13, and we do not knowingly collect information from them. Parents may request deletion of any data collected inadvertently, consistent with COPPA.
California has considered additional children’s privacy rules, but these are currently on hold pending court review.
10. Donor & Musician Privacy Commitments
We subscribe to the Association of Fundraising Professionals Donor Bill of Rights, ensuring gifts are handled with confidentiality and respect.
No musician profile is posted without that musician’s express written consent; profiles may be edited or removed on request. Consent is implied when musicians voluntarily submit their information on the website, but this does not extend to personally identifiable information, which is always protected.
11. Changes to This Policy
We will post any material changes here and update the “Last updated” date. Continued use of the site after a change signals acceptance of the revised notice.
12. External Links
Our website may link to external sites not operated by RCCO. We are not responsible for the privacy practices of those external sites.
13. Contact Us
Privacy Officer (volunteer)
River City Community Orchestra
P.O. Box 1234, Somewhere, CA 96000
rivercitycommunityorchestra@gmail.com | PO Box
You may use e-mail or postal mail for any privacy request.
14. Embedded content from other websites
Suggested text: Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.