Privacy Policy Carlo Acutis

Castletown Media

Privacy Policy

Last Updated: March 1, 2025

Welcome to Castletown Media (“we,” “us,” or “our”). We are committed to protecting your personal information and respecting your privacy. This Privacy Policy explains how we collect, use, store, disclose, and protect your personal data when you access our websites, sign up for our email list, purchase tickets or other products via our website (including embedded services like an iframe from third-party providers), or otherwise interact with our services (collectively, the “Services”).

By accessing or using the Services, you agree to the collection and use of your information in accordance with this Privacy Policy. If you do not agree, please do not use the Services.

1. Contact Information

If you have any questions about this Privacy Policy, our data-handling practices, or to exercise any of your privacy rights, please contact us at:

Castletown Media
P.O. Box 55451, Seattle, WA 98155
Email: contact@castletownmedia.com

2. Scope & Overview

Right to Share With Partners. We may share personal data with select partners, affiliates, or service providers for legitimate business, marketing, or operational purposes, subject to the restrictions outlined in this Policy.
Children’s Data. We do not knowingly collect personal information from children under 13 without verifiable parental consent (see Section 10 below).
Opt-Out Rights. You can unsubscribe from marketing communications at any time.
State & Federal Law Compliance. We have made good-faith efforts to align this Policy with major U.S. privacy laws, including but not limited to the California Consumer Privacy Act (as amended by CPRA), the Colorado Privacy Act, the Connecticut Data Privacy Act, and the Virginia Consumer Data Protection Act, as well as with the federal Children’s Online Privacy Protection Act (“COPPA”).
International Considerations. Although we primarily operate in the U.S., if you reside outside the U.S. (e.g., in the EU), you may have additional rights under laws like the GDPR.

3. Information We Collect

We collect information that identifies, relates to, describes, or could reasonably be linked to you (“Personal Data”). The categories we collect may include:

Profile or Contact Data
- Examples: Name, email address, phone number, and mailing address.
- Purpose: Account creation, email newsletters, responding to inquiries, or sending updates about upcoming films and promotional offers.
Payment & Transaction Data
- Examples: Payment card information (e.g., credit card number), billing address, and transaction details if you make a purchase through our site.
- Purpose: Processing transactions, fulfilling orders, and record-keeping (e.g., invoices).
Device/Internet Activity Data
- Examples: IP address, browser type, operating system, referral URLs, and pages viewed.
- Purpose: Security, analytics, debugging, and improving the user experience.
Cookie Data & Other Tracking Technologies
- Examples: Session identifiers, unique tokens, pixel tags, or other similar technologies that collect information about your browsing behavior.
- Purpose: Remember user preferences, analyze site traffic, and tailor marketing efforts.
Marketing & Analytics Data
- Examples: Email open/click rates, engagement metrics, hashed identifiers for ad retargeting.
- Purpose: Measuring effectiveness of campaigns, optimizing marketing strategies, and enhancing user engagement.
Voluntary Submissions
- Examples: Comments, survey responses, or other information you provide voluntarily when you interact with our Services.
- Purpose: To better understand user needs, gather feedback, or facilitate user-generated content features.

4. Sources of Personal Data

Directly From You: When you fill out forms, purchase tickets or merchandise, sign up for newsletters, or otherwise communicate with us.
Automatically: Through cookies, server logs, and analytics tools when you browse our website.
Third Parties: Service providers (e.g., payment processors, email marketing platforms), embedded ticketing providers (e.g., Fandango), analytics partners, or social media platforms (if you choose to link accounts).

5. How We Use Your Information

We use the collected information for various legitimate business purposes, including:

Providing and Improving Services
- Managing user accounts, facilitating orders, responding to inquiries, and personalizing user experiences.
- Identifying and fixing technical issues, testing, or analytics for site optimization.
Marketing & Communications
- Sending promotional emails, event reminders, or newsletters (if you have opted in).
- Offering targeted ads or other marketing communications based on your browsing or purchasing history.
Compliance & Security
- Detecting, preventing, or investigating potential fraud, unauthorized access, or illegal activities.
- Enforcing our Terms of Service and complying with applicable laws or legal obligations.
Business Transfers
- If we undergo a merger, acquisition, reorganization, or asset sale, your data may be transferred to the acquiring entity subject to the terms of this Privacy Policy.

6. Disclosure of Personal Data

We do not sell your personal data. However, we may share personal data under the following circumstances:

Service Providers
- Companies who assist with business operations (e.g., hosting, payment processing, email marketing, analytics). These providers only access your data to perform tasks on our behalf.
Partners & Affiliates
- We reserve the right to share personal data with select partners, affiliates, or co-producers for legitimate business or marketing activities. We require these entities to process your data in accordance with applicable privacy laws.
Legal Compliance
- If required by law or to respond to valid legal processes (subpoenas, court orders, etc.).
- To protect our rights, property, and safety or those of others.
Aggregated or De-Identified Data
- We may share aggregated data that does not identify you personally (e.g., user demographics, site usage stats) for analytics or marketing purposes.
Business Transactions
- Personal data may be disclosed as part of any merger, acquisition, sale of company assets, or transition of service to another provider.

7. Data Security & Retention

Security Measures
- We use industry-standard measures (e.g., SSL/TLS encryption, secure hosting environments) to protect data during transmission and storage.
- No transmission or electronic storage method is 100% secure; we cannot guarantee absolute security.
Data Retention
- We retain personal data for as long as needed to provide Services or as required by law.
- We may keep certain records to comply with legal, accounting, or operational requirements even after you have deactivated your account or requested deletion.

8. Your Rights & Choices

8.1. Opt-Out of Marketing

Email Communications: You can unsubscribe from promotional emails by clicking the “unsubscribe” link at the bottom of each email or by contacting us at contact@castletownmedia.com.

8.2. Cookies & Tracking Technologies

You can manage cookie preferences in your browser settings. Disabling certain cookies may limit some functionality on our website.
Some web browsers include “Do Not Track” signals; our website does not currently respond to these signals due to the lack of industry consensus.

8.3. State Privacy Rights (California, Colorado, Connecticut, Virginia, etc.)

Depending on your residency, you may have specific rights regarding your personal data, such as:

Access & Portability: The right to know or receive a copy of personal data we have about you.
Deletion: The right to request deletion of your personal data under certain circumstances.
Correction: The right to request corrections to inaccurate personal data.
Opt-Out of Sharing: The right to opt out of certain data-sharing practices (e.g., targeted advertising).
Appeals Process: If we decline your request, you may appeal or contact your state’s Attorney General (where applicable).

To exercise these rights, see Section 9 below.

8.4. International Visitors (EU/UK Residents)

If you access our Services from outside the U.S., local laws (e.g., GDPR) may grant additional data subject rights, such as the right to object to processing or request restriction of processing. See Section 9 for how to submit these requests.

9. Exercising Your Privacy Rights

You or an authorized agent may submit a request to us by:

Email: contact@castletownmedia.com with the subject line “Privacy Request.”
Please include enough information to verify your identity (e.g., name, email, relevant account details) and clearly state your request (e.g., “access my data,” “delete my data,” etc.).

Verification: We may request additional information to confirm your identity and ensure we disclose data to the correct individual. We aim to respond within any legally required timeframe. If we are unable to fulfill your request for legal or technical reasons, we will provide an explanation.

10. Personal Data of Children

We comply with the federal Children’s Online Privacy Protection Act (“COPPA”). We do not knowingly collect or solicit personal information online from children under 13 without verifiable parental consent. If you believe a child under 13 has provided personal data to us without parental consent, please contact us at contact@castletownmedia.com, and we will promptly delete the information.

11. Changes to This Privacy Policy

We may update this Policy at any time. If we make material changes, we will post the revised policy on our website and update the “Last Updated” date. Your continued use of our Services after any such update indicates your acknowledgment and (if applicable) acceptance of the revised terms.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at: Castletown Media P.O. Box 55451, Seattle, WA 98155 contact@castletownmedia.com We value your privacy and strive to ensure your experience with Castletown Media is safe, transparent, and respectful.