BEVERLY HILLS • SINCE 1964
SupportTheatre 40

WEBSITE POLICY

Privacy Policy

Effective August 22, 2026

This Policy applies to theatre40.org, including Theatre 40 accounts, forms, donations, subscriptions, and other website transactions.

1. Scope of this Policy

This Privacy Policy explains how Theatre 40, Inc. (“Theatre 40,” “we,” “us,” or “our”) collects, uses, discloses, and protects information when you visit theatre40.org, create an account, contact us, join our email list, make a donation, purchase a subscription or other item, or otherwise interact with the website.

This Policy applies only to theatre40.org and the services operated through that website. It does not govern third-party websites or services that have their own privacy policies, including Eventbrite and social media platforms.

2. Information We Collect

Information you provide directly

  • Contact and communications information, such as your name, email address, telephone number, postal address, and the contents of messages or forms you submit.
  • Account information, such as your username, password credentials in protected form, account preferences, order history, and account activity.
  • Donation, subscription, and transaction information, such as billing contact information, contribution or purchase amount, selected membership or subscription level, and transaction records.
  • Email-marketing information, such as your email address, subscription status, preferences, and interaction with Theatre 40 emails.
  • Information submitted when you request support, exercise a privacy choice, or otherwise communicate with Theatre 40.

Payment information

Donations, subscriptions, and applicable website purchases are processed through WooCommerce and Elavon Converge. Payment-card information is transmitted to the payment processor for authorization and settlement. Theatre 40 does not intentionally retain your complete payment-card number or security code on its website. Elavon processes payment information according to its own privacy and security practices.

Information collected automatically

  • Internet and device information, including IP address, browser type, operating system, device type, approximate location derived from IP address, referring pages, and timestamps.
  • Website-usage information, including pages viewed, links selected, navigation paths, clicks, scrolling, and interactions with website features.
  • Cookie and similar-technology identifiers used to maintain sessions, remember preferences, measure website performance, prevent abuse, and understand site usage.
  • Security and fraud-prevention information, including browser and device signals used by Cloudflare Turnstile and form information or metadata evaluated by ActiveLayer to identify automated or abusive submissions.

 

 

3. How We Use Information

We may use personal information to:

  • Operate, maintain, secure, troubleshoot, and improve the website.
  • Create and administer customer accounts.
  • Process donations, subscriptions, orders, acknowledgments, receipts, refunds, and related communications.
  • Respond to questions, requests, and other communications.
  • Send newsletters and promotional communications when you have requested or agreed to receive them.
  • Understand website traffic, audience behavior, and the effectiveness of content and features.
  • Detect spam, fraud, abuse, security incidents, and technical problems.
  • Maintain appropriate financial, tax, operational, and legal records.
  • Comply with applicable law, enforce our agreements, and protect Theatre 40, our patrons, and others.

4. Cookies, Analytics, and Similar Technologies

Essential website technologies

WordPress, WooCommerce, account features, and security services may use cookies or similar technologies that are necessary for functions such as sign-in, shopping-cart continuity, form submission, security, and preference storage. Disabling these technologies may prevent parts of the website from working properly.

Google Analytics

We use Google Analytics to understand how visitors find and use the website. Google Analytics may collect information such as pages visited, device and browser information, approximate location, referral source, and interactions with website content. Google processes this information under its own privacy practices. You may use Google’s Analytics Opt-out Browser Add-on or browser controls to limit analytics collection.

Microsoft Clarity

We use Microsoft Clarity to understand how visitors interact with the website through behavioral metrics, heatmaps, and session replay. Clarity may record clicks, scrolling, navigation, device information, and visual representations of website interactions. We use this information for site optimization, usability analysis, troubleshooting, and security. Microsoft processes information according to the Microsoft Privacy Statement.

Cloudflare Turnstile and ActiveLayer

We use Cloudflare Turnstile and ActiveLayer to help distinguish legitimate visitors and form submissions from automated traffic, spam, and abuse. These services may process IP addresses, browser or device information, form content, sender contact fields, user-agent information, timestamps, risk signals, and detection results as needed to provide their security services.

Social media feeds

Pages that display embedded social media feeds or content may allow the applicable social platform to collect information about your device, browser, IP address, cookies, and interaction with the embedded content. This can occur even if you do not select the content and may be affected by whether you are signed in to the social platform.

Your cookie choices

Most browsers allow you to block or delete cookies and control certain tracking technologies. You may also use privacy extensions or the opt-out tools offered by individual providers. Blocking cookies may affect account, cart, form, and other website functions.

 

 

5. How We Disclose Information

We may disclose personal information in the following circumstances:

  • Service providers. We use vendors to provide hosting, content delivery, security, analytics, payment processing, email delivery, spam prevention, website administration, backups, and related operational services. These providers include Cloudways, Cloudflare, Google, Microsoft, ActiveLayer, Constant Contact, Elavon, and providers supporting WordPress and WooCommerce.
  • At your direction. We may disclose information when you request a service, direct us to do so, or consent to the disclosure.
  • Legal and safety purposes. We may disclose information when reasonably necessary to comply with law, legal process, or governmental requests; enforce agreements; investigate fraud or security incidents; or protect the rights, property, or safety of Theatre 40, our visitors, patrons, or others.
  • Organizational transactions. If Theatre 40 undergoes a reorganization, transfer of assets, or similar organizational change, relevant information may be transferred as part of that transaction, subject to applicable law.

No sale of personal information

Theatre 40 does not sell personal information for money. We do not use personal information to provide cross-context behavioral advertising. Analytics providers, social media platforms, and embedded services may independently collect and process information as described in their own privacy policies.

6. Eventbrite Ticket Purchases and Third-Party Links

All performance ticket sales are completed through Eventbrite. When you select an Eventbrite ticket link, you leave theatre40.org and interact directly with Eventbrite. Eventbrite—not Theatre 40’s website—collects and processes the information you provide during the ticket transaction under Eventbrite’s Privacy Policy and applicable organizer settings.

The website may also link to social networks, partner organizations, media coverage, or other third-party websites. Theatre 40 is not responsible for the privacy, security, content, or practices of those third parties. Review the applicable third-party policy before submitting information.

7. Email Communications

If you join Theatre 40’s email list, Constant Contact may process your email address, subscription status, preferences, and email engagement information to deliver and measure communications. You may unsubscribe at any time by using the unsubscribe link in an email or by contacting hello@theatre40.org. Transactional or service-related messages may still be sent when necessary to administer an account, donation, subscription, or order.

 

 

8. Data Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Policy, including to provide services, maintain accounts, complete transactions, comply with tax and accounting obligations, resolve disputes, prevent fraud, enforce agreements, and meet legal requirements.

Retention periods vary by information type and context. When information is no longer reasonably required, we may delete it, anonymize it, or securely retain it until deletion is feasible. Third-party providers may apply their own retention schedules.

9. Data Security

Theatre 40 uses reasonable administrative, technical, and organizational safeguards designed to protect personal information. These measures include access controls, secure connections, website security services, managed hosting, and payment processing through specialized providers. No internet transmission or storage system can be guaranteed completely secure, and Theatre 40 cannot guarantee absolute security.

10. Your Choices and Requests

Depending on the circumstances and applicable law, you may request access to personal information associated with you, ask us to correct inaccurate information, request deletion, unsubscribe from marketing communications, or ask questions about our privacy practices.

Submit a request to hello@theatre40.org with “Privacy Request” in the subject line. To protect your information, we may need to verify your identity or request details sufficient to locate the relevant records. We may retain information when required or permitted for transactions, legal compliance, security, fraud prevention, or other legitimate purposes.

California residents

The California Consumer Privacy Act generally does not apply to nonprofit organizations such as Theatre 40. Nevertheless, Theatre 40 will consider and respond to reasonable, verified privacy requests consistent with applicable law and our operational and legal obligations. We will not discriminate against you for making a privacy request.

 

 

11. Children’s Privacy

The website is intended for a general audience and is not directed to children under 13. Theatre 40 does not knowingly collect personal information online from children under 13. If you believe a child under 13 has provided personal information through the website, contact hello@theatre40.org so we can review and, when appropriate, delete it.

12. International Visitors

Theatre 40 is based in California, United States. If you access the website from another country, your information may be transferred to, stored in, or processed in the United States and other locations where our service providers operate. Those locations may have privacy laws different from those in your jurisdiction.

13. Changes to this Policy

We may update this Privacy Policy to reflect changes in the website, our practices, service providers, or legal requirements. The revised Policy will be posted on theatre40.org with an updated effective or “last updated” date. Material changes may also be communicated by an additional notice when appropriate.

14. Contact Us

Questions or requests concerning this Privacy Policy or Theatre 40’s privacy practices may be directed to:

Theatre 40, Inc.
P.O. Box 5401
Beverly Hills, CA 90209
Email: hello@theatre40.org