Privacy Policy

This Privacy Policy explains how Riverside Performing Arts (“we,” “us”) collects, uses, discloses, and retains personal information submitted through demo.wondernookstudios.com and the services offered on it (the “Site”).

We support the Riverside Area School District music program, but we are a separate organization from the District. This Policy governs only the information we collect through the Site. Records the District holds — grades, schedules, health records maintained by school nurses, and other education records — are governed by the District’s own policies and by the Family Educational Rights and Privacy Act, not by this Policy.

1.Information We Collect

We collect the following categories of information, in each case only where you provide it or where it is generated by your use of the Site.

(a) Purchase and account information

Name, email address, telephone number, and billing address; the contents of your order; and, if you create an account, your sign-in credentials. If you sign in with Google, we receive your name, email address, and, where applicable, the school domain associated with your Google account. We do not receive your Google password.

(b) Payment information

Card and bank payments are processed by Stripe, Inc. Card numbers and bank account numbers are transmitted directly to Stripe and are never stored on our systems. We retain the amount, date, status, payment method type, and Stripe’s transaction identifiers for each order.

(c) Student and program information

For ensemble enrollment, trips, fundraising, and student-linked purchases, we collect a student’s name, District-issued student identification number, grade, homeroom, school email address, ensemble assignment, date of birth, and parent or guardian names and email addresses. Roster information is provided to us by the District or by the student’s family.

(d) Health and emergency information

Where a student participates in a trip or activity requiring a medical form, the parent or guardian completing that form provides:

• allergies, medical conditions, dietary needs, and behavioral notes;
• medications taken routinely, and any additional medications to be carried or administered;
• emergency contact names, relationships, and telephone numbers;
• health insurance carrier, member identification number, and group number;
• photographs or scans of the front and back of an insurance card, and any physician’s note provided;
• consent to treatment, photo release elections, and an electronic signature, typed name, and date.

This is sensitive information. Section 5 describes who may access it.

(e) Forms, signatures, and uploads

Permission slips and medical forms record your electronic signature, the typed name you enter, the date of signing, and — as evidence that the form was signed — the Internet Protocol address and browser identification string of the device used to submit it. Files you attach at checkout or on a form (for example, a scanned document or a photograph) are stored in non-public storage.

(f) Technical information

We use cookies that are strictly necessary to keep you signed in and to maintain your cart. We record IP addresses for a short period to enforce rate limits and to operate the anti-automation check on our public forms. We use an error-monitoring service to record technical diagnostics when something on the Site fails; it is configured not to collect personal information by default. We do not use advertising cookies, and we do not operate third-party behavioral analytics on the Site — the usage measurement described in (g) below is our own, and stays on our systems.

(g) How the Site and app are used

We keep a simple record of how the Site and our mobile app are used — for example that a page or screen was opened, that something was added to a cart, or that a ticket was added to a phone’s wallet — so that we can tell which features are worth keeping and where people are running into trouble. These records are stored on our own systems and are not shared with anyone.

They are deliberately not tied to you. Each record carries a random identifier generated by your browser or by your copy of the app, never your account, your name or your email address, and there is no way for us to work backwards from one of these records to a person. That identifier resets if you clear your browser data or delete the app. We do not store IP addresses, free text you have typed, or ticket codes alongside these records, and we delete them after 400 days.

(h) Digital ticket (wallet pass) use

If you add a ticket to Apple Wallet or Google Wallet, we record that a pass for that ticket was downloaded, added to a wallet, or removed from it, together with the date and time. We keep this only to understand how many people use digital tickets rather than printed ones, and to detect when passes are failing to install. We do not record who you are alongside these entries beyond the ticket itself, we do not store any device identifier with them, and we cannot see your location, your other passes, or anything else in your wallet. Apple and Google separately provide us a device identifier so that an updated ticket can be sent to your phone; that is used only to deliver pass updates. Removing the pass from your wallet ends this.

2.How We Use Information

We use personal information only for the following purposes:

• to process and fulfill orders, donations, and fees, and to issue tickets, receipts, and refunds;
• to administer ensemble enrollment, trips, permission slips, rooming and transportation lists, and fundraising credits;
• to make health and emergency information available to the staff and chaperones responsible for a student during an activity, and to medical personnel in an emergency;
• to send transactional messages, including order confirmations, event reminders, and form requests;
• to send program announcements and newsletters, where you have opted in;
• to keep a digital ticket in your wallet up to date, and to measure how widely digital tickets are used;
• to maintain the security and integrity of the Site, including fraud prevention and abuse mitigation; and
• to keep financial and organizational records as required for accounting, audit, and tax purposes.

3.Email and Text Messages

Transactional messages relating to an order, a form, or a trip are sent as part of the service and are not marketing. Program announcements and newsletters are sent only to those who have opted in, and every such message contains an unsubscribe link. Where we send text messages, we do so only to a number for which opt-in has been recorded; message and data rates may apply, and you may stop them at any time by replying STOP.

4.Disclosure of Information

We do not sell personal information, and we do not share it for advertising purposes.

We disclose personal information only as follows:

• To service providers that operate the Site on our behalf and may process information only on our instructions: Stripe (payments), Supabase and Vercel (hosting, database, and file storage), Amazon Web Services (email delivery), Twilio (text messages, where enabled), Cloudflare (anti-automation checks), Sentry (error monitoring), Google (sign-in, spreadsheet integration for trip payment records, and Google Wallet passes), and Apple (Apple Wallet passes).
• To the Riverside Area School District, its employees, and authorized volunteer chaperones, to the extent necessary to supervise students during an activity.
• To medical personnel, in the event of a medical emergency involving a student.
• Where required by law, including in response to a subpoena, court order, or other lawful request, or where necessary to protect the rights or safety of any person.

Donor names may be published in concert programs or on donor recognition pages only where the donor has elected to be recognized. Donations may be made anonymously.

5.Who Can See Student and Health Information

Access to student and health information is restricted to the administrators and staff who require it for the activity in question, and, for volunteer chaperones, is limited to the students in their care and to the period of the activity. Insurance card images, physician’s notes, and signed forms are held in non-public storage and are retrieved only through time-limited links issued to authorized users. Parents and guardians may view the forms and records associated with their own student through the parent portal.

6.Retention

We retain personal information for as long as necessary for the purpose for which it was collected, and then for the periods described below.

• Order and financial records are retained for at least seven years, as required for accounting, audit, and tax purposes.
• Medical forms and permission slips are retained for the school year to which they relate and for a reasonable period afterward, and are then deleted.
• Roster information is retained for the school year to which it relates and archived at the end of that year.
• Files uploaded during a checkout that is never completed are deleted automatically within a short period.
• Incomplete orders are cancelled automatically after 24 hours.

7.Your Choices and Rights

You may, at any time:

• request a copy of the personal information we hold about you or your student;
• request that we correct information that is inaccurate;
• request that we delete your information, subject to the limitation below;
• withdraw consent to program announcements or text messages; and
• ask us how a particular piece of information is used.

Where we are required to retain financial records, a deletion request is honored by removing your name, contact details, and other identifying information from those records while retaining the transaction amounts and dates in de-identified form. We will tell you if this limitation applies to your request. To make a request, write to demo@wondernookstudios.com.

8.Students and Children

The Site is intended to be used by adults. Medical forms, permission slips, and purchases relating to a student must be completed by that student’s parent or legal guardian. Students may sign in to the student portal using a school-issued Google account to view their own ensemble information, fundraising credit, and forms. We do not knowingly collect personal information directly from a child under 13 other than information a parent, guardian, or the District provides to us for program administration.

9.Security

Information is transmitted over encrypted connections and stored in access-controlled systems. Administrative accounts require additional verification at sign-in. Files containing sensitive information are kept in non-public storage. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you as required by applicable law.

10.Changes to This Policy

We may update this Policy. The date at the top of this page reflects the most recent revision. Where a change materially affects how we use information already collected, we will provide notice through the Site or by email before the change takes effect.

11.Contact

Questions, requests, and complaints regarding this Policy may be directed to demo@wondernookstudios.com or to Riverside Performing Arts, PO Box 100, Riverside PA 19000.