Privacy notice
What we collect, why, and who to ask.
We collect the details you give us when you order, donate or write to us: your name, email, and for lunch orders your child's name and class. We use them to fulfil the order, send your receipt and, for tickets, to admit you at the door.
Card details go straight from the checkout page to our payment provider, Authorize.Net, and never reach the SPTA's own systems. Nothing is sold or shared for marketing. For lunch orders and items delivered to a class we hold your child's first name, class, what you chose and any allergy note you give us; class lists with that information are printed for the volunteers on the day and destroyed afterwards. If you tell us about dietary needs or allergies we use them only for that event or lunch and remove them thirty days after it.
Records of payments are kept for the treasurer's accounts for seven years. The details on failed or abandoned checkouts are removed after thirty days, and from backup copies within a further twelve months. Our website is run for us by dotbm and hosted in Finland; backup copies are also held in the United States; payments go through Authorize.Net and email through Resend, both in the United States. We only use providers that protect your information to a standard comparable to Bermuda's.
Our privacy officer is named at the foot of every page. Write to them to see, correct or delete what we hold about you; we answer within forty-five days.
