- Visit our website
at sdgloria.org , or any website of ours that links to this privacy notice
- Engage with us in other related ways, including any sales, marketing, or events
names
phone numbers
email addresses
mailing addresses
contact or authentication data
- Log and Usage Data. Log and usage data is service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services and which we record in log files. Depending on how you interact with us, this log data may include your IP address, device information, browser type, and settings and information about your activity in the Services (such as the date/time stamps associated with your usage, pages and files viewed, searches, and other actions you take such as which features you use), device event information (such as system activity, error reports (sometimes called
“crash dumps” ), and hardware settings).
- Device Data. We collect device data such as information about your computer, phone, tablet, or other device you use to access the Services. Depending on the device used, this device data may include information such as your IP address (or proxy server), device and application identification numbers, location, browser type, hardware model, Internet service provider and/or mobile carrier, operating system, and system configuration information.
- Location Data. We collect location data such as information about your device’s location, which can be either precise or imprecise. How much information we collect depends on the type and settings of the device you use to access the Services. For example, we may use GPS and other technologies to collect geolocation data that tells us your current location (based on your IP address). You can opt out of allowing us to collect this information either by refusing access to the information or by disabling your Location setting on your device. However, if you choose to opt out, you may not be able to use certain aspects of the Services.
- To deliver and facilitate delivery of services to the user. We may process your information to provide you with the requested service.
- To respond to user inquiries/offer support to users. We may process your information to respond to your inquiries and solve any potential issues you might have with the requested service.
- To send administrative information to you. We may process your information to send you details about our products and services, changes to our terms and policies, and other similar information.
- To request feedback. We may process your information when necessary to request feedback and to contact you about your use of our Services.
- To send you marketing and promotional communications. We may process the personal information you send to us for our marketing purposes, if this is in accordance with your marketing preferences. You can opt out of our marketing emails at any time. For more information, see
“ WHAT ARE YOUR PRIVACY RIGHTS? “ below.
- To deliver targeted advertising to you. We may process your information to develop and display
personalized content and advertising tailored to your interests, location, and more.
- To post testimonials. We post testimonials on our Services that may contain personal information.
- To evaluate and improve our Services, products, marketing, and your experience. We may process your information when we believe it is necessary to identify usage trends, determine the effectiveness of our promotional campaigns, and to evaluate and improve our Services, products, marketing, and your experience.
- To identify usage trends. We may process information about how you use our Services to better understand how they are being used so we can improve them.
- To comply with our legal obligations. We may process your information to comply with our legal obligations, respond to legal requests, and exercise, establish, or defend our legal rights.
- Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
- When we use Google Maps Platform APIs. We may share your information with certain Google Maps Platform APIs (e.g.
, Google Maps API, Places API).
| Category | Examples | Collected |
A. Identifiers |
Contact details, such as real name, alias, postal address, telephone or mobile contact number, unique personal identifier, online identifier, Internet Protocol address, email address, and account name |
B. Personal information as defined in the California Customer Records statute |
Name, contact information, education, employment, employment history, and financial information |
Gender, age, date of birth, race and ethnicity, national origin, marital status, and other demographic data |
||
Transaction information, purchase history, financial details, and payment information |
||
Fingerprints and voiceprints |
||
Browsing history, search history, online |
||
Device location |
||
Images and audio, video or call recordings created in connection with our business activities |
||
Business contact details in order to provide you our Services at a business level or job title, work history, and professional qualifications if you apply for a job with us |
||
Student records and directory information |
||
Inferences drawn from any of the collected personal information listed above to create a profile or summary about, for example, an individual’s preferences and characteristics |
||
- Receiving help through our customer support channels;
- Participation in customer surveys or contests; and
- Facilitation in the delivery of our Services and to respond to your inquiries.
- Category A –
1 year
- Category B –
1 year
- Category
H – 1 year
- Right to know whether or not we are processing your personal data
- Right to access your personal data
- Right to correct inaccuracies in your personal data
- Right to request the deletion of your personal data
- Right to obtain a copy of the personal data you previously shared with us
- Right to non-discrimination for exercising your rights
- Right to opt out of the processing of your personal data if it is used for targeted advertising
(or sharing as defined under California’s privacy law) , the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects ( “profiling” )
- Right to obtain a list of the categories of third parties to which we have disclosed personal data (as permitted by applicable law, including
California’s and Delaware’s privacy law)
- Right to obtain a list of specific third parties to which we have disclosed personal data (as permitted by applicable law, including Oregon’s privacy law)
- Right to limit use and disclosure of sensitive personal data (as permitted by applicable law, including California’s privacy law)
- Right to opt out of the collection of sensitive data and personal data collected through the operation of a voice or facial recognition feature (as permitted by applicable law, including Florida’s privacy law)
Last updated September 16, 2026
This Privacy Policy explains how Soli Deo Gloria of the Bay Area (“Soli Deo Gloria,” “SDG,” “we,” “us,” or “our”) collects, uses, discloses, and protects information when you visit sdgloria.org, contact us, purchase tickets, make a donation, participate in the choir, or use another service that links to this policy.
Information we collect
Information you provide
Depending on how you interact with SDG, we may collect:
- your name, email address, telephone number, mailing address, and communication preferences;
- information submitted through our contact, sign-out, and other website forms, including your message, interests, referral source, voice part, and requested dates;
- ticket, donation, transaction, billing, and fulfillment information provided through our fundraising and ticketing providers;
- for singers and other members, roster and participation information such as contact details, official and program-specific voice parts, active or retired status, program history, rehearsal and performance attendance, advance sign-outs, seating assignments, member photographs, and photograph-publication preferences; and
- information you otherwise provide by email, telephone, mail, at an event, or in person.
We do not intentionally request full payment-card numbers through SDG’s WordPress forms. Payment credentials are collected and processed by the payment provider you use.
Information collected automatically
When you use the website, our hosting, content-delivery, security, analytics, consent, and embedded-service providers may process technical information such as your IP address, browser and device type, operating system, approximate location derived from IP address, referring URL, pages viewed, dates and times, cookie or similar identifiers, consent choices, and security or diagnostic events.
How we use information
We use information to:
- respond to inquiries and provide requested information;
- administer mailing lists and send concert, audition, rehearsal, membership, ticket, donation, and service communications;
- sell and fulfill single-concert and season tickets, process donations, issue receipts, and maintain transaction records;
- operate the choir, including rosters, programs, rehearsal aids, seating charts, attendance, sign-outs, member communications, and photograph permissions;
- operate, secure, troubleshoot, and improve the website and related services;
- measure the effectiveness of outreach and advertising when you have provided the applicable consent; and
- comply with legal, accounting, tax, safety, and fraud-prevention obligations and protect our rights and those of others.
Givebutter, tickets, donations, and contact records
SDG uses Givebutter for fundraising, donations, ticket sales, campaign pages, receipts, purchaser and donor records, and related fulfillment. Givebutter and its payment processors collect the information needed to complete a transaction, which may include your name, email address, telephone number, billing or mailing address, ticket selections, donation details, and payment information. SDG receives campaign, contact, transaction, ticket, address, and fulfillment information from Givebutter, but does not receive your complete payment-card number.
When you submit SDG’s public contact form, the information you provide may also be used to create or update a contact in SDG’s Givebutter account so we can respond to your request and, when requested, send relevant concert or singer information. This contact workflow is separate from payment processing.
SDG may also offer ticket or payment options provided by EventGroove and PayPal. Information entered on those services is governed by their policies as well as this description of SDG’s use of resulting transaction and fulfillment records.
Cookies, consent, analytics, and the Meta Pixel
We use cookies and similar technologies for essential website functions, preferences, security, statistics, and—only when permitted by your consent choice—marketing measurement. Our consent interface is provided through Complianz. You can accept, deny, or change nonessential-cookie choices using the Privacy choices or Manage consent control available on the website. Withdrawing consent does not affect processing that occurred before withdrawal.
On the production website, and only after you grant Marketing consent, we use the Meta Pixel supplied by Meta Platforms, Inc. The Pixel helps us understand whether outreach on Facebook or Instagram leads people to visit SDG pages and helps us measure and improve advertising. Meta may receive information such as the page or event visited, referring information, browser and device information, IP address, cookie or similar identifiers, and the time of the interaction. Meta may associate this information with other information it holds and processes it under the Meta Privacy Policy. Depending on applicable law, this use may be considered sharing for targeted advertising. We do not load the Pixel before Marketing consent, and we do not sell personal information for money.
The site may also use or link to Google services, including reCAPTCHA for form-abuse prevention, YouTube for recordings, Google Calendar links, and Google-based administrative integrations. Embedded or linked services may receive technical information when you interact with them and process it under their own privacy policies.
When we disclose information
We disclose information only as reasonably needed for the purposes described above, including to:
- Givebutter, PayPal, EventGroove, and their payment processors for campaigns, transactions, tickets, receipts, and fulfillment;
- Meta for consented Facebook and Instagram advertising measurement;
- website hosting, content-delivery, security, backup, email-delivery, form, consent-management, analytics, calendar, media, spreadsheet, CRM, and workflow-automation providers that support our operations;
- authorized SDG board members, staff, volunteers, and contractors who need the information to perform their duties;
- professional advisers, authorities, or other parties when reasonably necessary to comply with law, enforce agreements, prevent fraud or abuse, protect safety or rights, or respond to legal process; and
- a successor organization in connection with a merger, reorganization, or transfer of SDG operations, subject to appropriate protections.
We do not sell personal information for monetary consideration. As explained above, consented use of the Meta Pixel may be treated as “sharing” or targeted advertising under some state privacy laws.
Member and singer information
Member records support internal choir administration. Access to administrative tools is restricted by WordPress permissions, and member-facing operational pages may be protected by a shared member password or other access control. Members may optionally provide their height to help authorized seating-chart administrators prepare arrangements. Height is not shown in the member directory, attendance tools, or printed seating charts. Roster privacy preferences can suppress a member’s address and telephone number from generated member rosters. Photograph permissions record the broadest context in which SDG may publish a member’s image. These controls do not make files uploaded to the public WordPress Media Library inherently private, so administrators are instructed to upload only material appropriate for its intended access.
Retention
We retain information for as long as reasonably necessary for the purposes described in this policy. Retention varies by record: inquiry and mailing-list information is kept while needed to communicate with you; consent and suppression records may be retained to honor your choices; transaction, donation, ticket, tax, and accounting records may be retained for legally required periods; and membership, program, attendance, sign-out, seating, and historical participation records may be retained as part of SDG’s operational and organizational history. Security logs and backups are retained according to provider and backup schedules. When information is no longer needed, we may delete, anonymize, or securely archive it, subject to legal and operational requirements.
Security
We use reasonable administrative, technical, and organizational safeguards appropriate to a small nonprofit, including access controls, server and application security tools, encrypted HTTPS connections, backups, spam and abuse controls, and specialized payment providers. No Internet transmission or storage system can be guaranteed completely secure.
Your choices and privacy rights
You may unsubscribe from marketing email using the link in the message or contact us to update your communication preferences. You may change cookie and marketing consent using the website’s Privacy choices control. Depending on where you live and subject to applicable exceptions, you may have rights to request access to, correction of, deletion of, or a copy of personal information about you, and to opt out of certain targeted advertising or sharing.
To make a privacy request, use our contact form. We may need to verify your identity before completing a request. You may also use our Opt-out Preferences page. We will not discriminate against you for exercising an applicable privacy right.
Children
Our online services are not directed to children under 18. We do not knowingly collect personal information online from a child under 18 without appropriate parent or guardian consent. If you believe a child has provided personal information to us without that consent, please contact us so we can review and address it.
Third-party websites and services
Our website contains links to and embeds from third parties. Their privacy and security practices are governed by their own notices, and SDG is not responsible for those practices.
Changes to this policy
We may update this policy as our services or legal obligations change. We will update the date at the top and may provide an additional notice when a change is material.
Contact us
Questions or requests about this policy may be submitted through our contact page, by telephone at 510-522-1702, or by mail to:
Soli Deo Gloria of the Bay Area
220 Sansome St., Suite 900
San Francisco, CA 94104
United States