Skip to Global Menu Skip to Page Content Skip to Footer

Privacy Policy

The Great American Songbook Foundation (hereafter referred to as the "Foundation", "we", "our" or "us") is devoted to protecting your personal information.  This policy outlines how the Foundation will use the information you provide to us as well as how it is protected.  We make every effort to balance our desires as a business to better serve you with your expectations of personal privacy.


The Foundation is an independent, registered 501(c)(3) nonprofit organization, EIN 26-0620716, with a voluntary Board of Directors.  We were established in May 2007 to inspire and educate by celebrating the Great American Songbook.  Our offices are located at 1 Carter Green, Carmel, IN 46032, and our collections are located at 375 Ridge Point Drive, Carmel, IN 46032.


This policy intends to cover certain situations in which you might engage with us, but there may be other times, such as a special event or program, which are not fully covered by this Policy.  In those circumstances, we will provide additional information in writing as to the treatment of that personal information.  For the purposes of this policy, the term "personal information" can and will refer to one or more of any of the following items:  name, address, phone number, date of birth, e-mail address, credit card/bank account information, device IP address, or any additional "special category data" such as health and dietary requirements.


Information Collected

The Foundation collects specific required personal information from you in order to process complete orders or contributions.  We also request additional information in order to best serve you in your online experience and in person experience, making it personal to your preferences.  For example, in your account, you can indicate your e-mail interests which we use to keep you informed as to collections updates.


This information is optional and may be omitted if you do not choose to enter it.  The Foundation uses your purchase history as well as the information you provide to promote our activities, and you have the right to opt in or opt out of these communications at any time.  Through the process of purchasing tickets or making a contribution, you will be asked for your full payment and billing information.  This includes credit card number, expiration date, and CVV as well as your contact information.  This payment information is encrypted in our database (see Data Security And Retention section below).


We also collect information on how our website is being used, such as which pages are visited more frequently (see Cookies section below).  By submitting your details, you enable us to provide you with the goods, services, information, activities or online content you select and any related services the Foundation may provide.


We do not usually collect "special category data" from you unless there is a clear reason for doing so, such as to ensure that we provide appropriate facilities or support, to enable you to enjoy everything we offer.  Examples of special category data we may hold could include things such as health information that comes as a result of knowing your accessibility or other requirements when in engaging with our events, activities and programs, or your gender from your title or name, or your dietary requirements for any hospitality or catered events in which you partake with us.


Children Under 18 Years of Age

The Foundation does not knowingly gather information from children under the age of 13 years old through its website.  Any child under the age of 18 years old must be under the direct supervision and guidance of a parent or guardian in order to use the website or disclose information to the Foundation.


It is the belief of the Foundation that the online activities of children should be monitored by their parent or guardian.  There are parental control tools available from many software manufacturers and online services.  These tools can help to ensure a safe and secure online environment within which the children can work as well as to ensure that they do not disclose personal information without the consent of their parent or guardian.


If the parent or guardian of a child under the age of 13 years old has reason to believe that their child has provided the Foundation with any such information, that parent or guardian should contact us if they desire to have that information deleted from our database.  If the Foundation acquires knowledge from any verifiable source that it has information about a child under the age of 13 in retrievable form in our files, we will delete that information from our existing files.


Data Security And Retention

In order to process a complete order or contribution, The Foundation collects your full credit card number, expiration date and CVV (Card Verification Value).  The Foundation uses SSL technology in processing online transactions.  While your credit card number and expiration date are encrypted and stored in our database, the CVV is never stored.  In addition, the credit card number is masked in our system according to industry standards (1234-56XX-XXXX-7890).  Staff member access to view the complete credit card numbers is limited to certain people in our Finance and IT departments who may need it to troubleshoot specific transactions.  These staff members see the standard masked information as well.  Patron Service Representatives and other personnel cannot access this data.


The Foundation stores your information in cloud-based systems with the aim of digital security.  The Foundation is PCI compliant and its compliance status is scanned and reassessed in conjunction with that of the Center.  The Center does vulnerability scans once a month with a full compliance reassessment once a year.  All of this personal information is stored under physical, electronic and procedural controls using the industry standards as established by the credit card industry.  The Center also regularly purges old and outdated credit card information from the database.  All of these security measures have been put in place to protect against the loss, misuse and alteration of your account information.


We collect and maintain the information you provide to us during your use of the website or attendance at events.  In order for the Foundation to be able to evaluate the efficacy of its marketing and fundraising strategies, all personal information, excepting payment methods as mentioned above, are retained indefinitely.  Citizens and Residents of the UK and EU have additional rights (see Your Rights section below).



We utilize different tracking technologies, including Cookies and other similarly functioning code, to analyze and monitor how the Website and its services are used in order to provide you superior customer service, as well as to maintain and improve the Website services, including for marketing purposes.  The Foundation honors Do Not Track (DNT) signals, and we do not track or plant Cookies when a DNT browser mechanism is in place.  Most web browsers allow some control of most cookies through the browser settings.  To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit Cookies And You.


Cookies are used to gain an understanding of user activity on the Website.  Cookies allow the Foundation to look at aggregate patterns like the most searched programs and events on the Website, and we use this information to both improve the website as well as to improve the program options we provide to you.  We also use Cookies to gather certain pieces of information about users, such as browser type and version, server, time and date of visit, IP address, geographic location and time zone, and that allows us to be able to do things like maintain your status as being logged into your account through multiple visits to the Website.


The majority of Cookies we utilize are placed on the Website via an integrated Google Tag Manager.  These Cookies allow us to display the Foundation’s promotional material to you on other website you visit across the Internet.  The Foundation may also share this information about your behavior on the Website, but only this information and nothing more, in order to show you targeted advertisements and other content that has been catered to your preferences.  The data collected through Google Analytics is shared with Google and its affiliated entities.  For more information, please see Google’s Privacy Policy.


You also have the ability to opt-out of having your information used by Google Analytics.  For instructions to change those settings on your browser, visit Google Analytics Opt-Out.  Because Cookies allow you to take the fullest advantage of the Foundation’s Website, we recommend that you leave them turned on.  For instance, if you opt out of Cookies, you may find that completing your purchase is difficult as you try to add multiple events to the shopping cart once you have signed in as your status of being signed in may not be maintained through multiple page views.


Social Media

You can edit or remove the permissions you have granted us to use information from your connected social media accounts by using the application privacy settings on your social media account.  For instructions on how to change or remove access from your Facebook account, visit Facebook App Visibility and Privacy.



This Policy applies to all data we collect from across the Foundation and the Foundation’s campuses, including our Website.  If a link on this Website takes you to the website of a third party, you should refer to the privacy policy relating to that website to understand how your personal information is managed by that third party or how they use cookies.  We cannot accept responsibility or liability for the privacy practices of such third party websites and your use of such websites is at your own risk.  For the purposes of this Policy, our Website is located at and its subdomains, and a third part website is defined as any such website not contained under that domain.


How Your Information Is Used

We will use your information to provide you with services about which you have inquired, as well as, with your permission, in marketing about offers and products.  Wherever we collect information for marketing purposes, we will inform you and provide you with the opportunity to choose not to receive these marketing pieces.


Use of your information will typically fall into, though is not limited to, one of the categories below.

  • Internal administration of your account content by staff to align data with our business practices.
  • Register you and provide you access to the Website.
  • Respond to inquiries or requests you direct to us.
  • Fulfill your requests for tickets, e-mail content, online content or products we sell.
  • Fulfill your contributions and communicate with you relating to your contributions.
  • Send you communications and updates about our Website or events.
  • Send you communications requesting feedback about our Website or events.
  • Analyze, benchmark and conduct research on user data and user interactions with the Website and our venues.


The Foundation does not sell personal information.  The Foundation never shares donor lists.


Third Party Relationships

The Foundation utilizes the Box Office at the Center for the Performing Arts (hereafter referred to as the "Center") to process orders.  The Foundation also utilizes the Development staff of the Center to process donations.  The Center will receive your customer and order details as part of those processes, including your contact information.  The Foundation shares access with the Center to the same database for processing and storing information.  The Foundation is not responsible for actions taken by the Center, but their policies align directly with the Foundation’s own policies, and the Foundation operates under the auspices of the Center.  For details on the policies of the Center, please view the Center’s Privacy Policy.


The Foundation also partners with Acceptd, Inc. to process applications and payment to The Songbook Academy®, its yearly national summer music intensive.  The Foundation is not responsible for actions taken by Acceptd.  For more information on their specific policies, please contact Acceptd directly.


The Foundation will partner with Formstack for question responses as well.  The data obtained from these responses is treated with the same data integrity as the rest of the data obtained directly from the Foundation’s website.  The Foundation is not responsible for actions taken by Formstack.  For more information on their specific policies, please contact Formstack directly.


The Foundation partners with GiveSmart US, Inc. to sometimes assist in the communication relating to and the processing of contributions.  In order to accomplish that, there is regular, secure transfer of personal information to our account with GiveSmart.  GiveSmart stores the personal information collected from and identifying you strictly for the purposes of the Center’s business activities.  For other details as to such things as aggregated or de-identified data, see GiveSmart’s Privacy Policy.


The Foundation reserves the right to trade lists with other organizations giving our partner organizations and ourselves a one-time opportunity to cross promote specific events.  These trades are done with complete confidentiality with no personal data revealed to either organization.


Inappropriate Website Content

If you post, send or share any content that we deem to be inappropriate, offensive or in breach of any laws, we reserve the right to remove such content without notice to you.  We may also use your personal information to inform relevant third parties such as your internet provider or law enforcement agencies.  For full details, see our Terms of Use.


Photo Release

If you, or any member of your group, are photographed or filmed while participating in any of the Foundation’s activities by an authorized/staff photographer, the photo and/or video belongs to the photographer, and you release to the Foundation, its agents, and employees all rights to exhibit and market this work in print and electronic form publicly or privately, including social media websites.


Updating Personal Information

The Foundation will happily update or correct your information or remove you from our mailing lists upon request.  Change this information by updating your account online, e-mailing us at, by calling Renée La Schiazza at 317.844.5832 or by stopping at the Foundation in person.  We send out information about new and upcoming events, and you can control the e-mails through the unsubscribe process which can be found by clicking on the footer of one of these e-mails.  We only want to send you information that you want to receive.


Your Rights (UK And EU Citizens and Residents Only)

The rights in this section and this section only are legally guaranteed for users who are citizens of or currently residing in the United Kingdom (UK) or any European Union (EU) member country.  Citizens of and users in the Unit States of America (USA or US) are not guaranteed these rights, and any request by a US resident based upon the rights as described below may not be acted upon.


Your Rights:

  • The Right of Transparency (to be informed):
    • You have the right to be informed about the collection and use of your personal information. We have an obligation to be transparent and provide you with this information freely and that it is easily understood.  This Policy serves to provide details on collection and use of personal information.
  • The Right of Access (to your information):
    • You have a right to have access to the information we hold about you and to verify that we are using your personal information lawfully. If asked, we will provide confirmation of what personal information we hold, provide a copy of that information, and inform you of any other rights you may have.
  • The Right of Rectification:
    • You have the right to have any information held about you which is inaccurate to be rectified. If you believe that we have inaccurate information, for example a misspelled name, then please contact us and we will do our utmost to correct the information.
  • The Right to be Forgotten (right to erasure):
    • You have, subject to certain conditions being met, the right to be forgotten. Where we can, we will remove all your details from our systems subject to being able to do so reasonably, and where no other legal or legitimate reason exists to keep your personal data.  For example, if you owe money to us via an account, we would expect this to be cleared before we considered erasure of your details.
  • The Right to Restrict Processing (of your information):
    • In some cases, you may require us to hold your information but not process it; this may be relevant if you believe inaccuracies have not been corrected and further processing would cause issues for you as an individual.
  • The Right to Data Portability:
    • Personal information portability means that, on request, we will give you the information we hold about you in a form that can easily be used by other systems. This is most likely to be a spreadsheet file so that you may pass this information on to other organizations with which you would like to share the information.  It may not always be possible to give you everything in this format, but we will always seek to provide the best solutions which we can be reasonably expected to produce.
  • The Right to Object:
    • You have a right to object to how personal information about you is processed, in some instances. You may object to us processing your personal information for our legitimate interests, to stop directing marketing and processing your personal information for research or statistical purposes.
    • Unless we can demonstrate compelling reasons for continuing to process your personal information, which we will provide to you in the form of a written explanation, if relevant, when you object, then we will always endeavour to comply with your wishes.
  • The Right to Stop Automated Individual Decision Making (including profiling):
    • Should we wish to carry out any automated decision making or make aggregated data assumptions based on your personal information, such as a data heat map of program participants and the locations of their primary residence, then we will abide by the law and do this only where it is necessary to do so, or if we have your consent.
    • Any decisions made automatically about you will be made obvious to you, where they have a direct effect on you. You will always have the ability to contact us and query these activities and request that they stop or have human intervention.
    • We aim to be transparent and open about this type of information processing so that you can feel assured that your information is safe, kept confidential and always used lawfully and fairly.
  • The Right to Complain:
    • You have a right to complain to the regulator in the country in which you reside if you believe any misuse of your information has taken place. Please visit the European Data Protection Board website to locate the relevant contact information.

You have the right to request a full copy of the information we hold about you.  We may require additional verification depending upon the nature of your request.  In order to process this request, please submit a written request, preferably by e-mail.


For all questions and contact relating to your rights, please use the information located in the Contact section below.  Communications regarding your rights outside of the methods listed in the Contact section below may be considered invalid submissions and may not be acted upon.


Your Acceptance of the Terms as Stated

By using this website, you consent to the Privacy Policy and communication protocols as stated.  You agree that we can do as we state above with the information provided as outlined by this Privacy Policy.


We may change this Policy from time to time (for example, if the law changes), so please do check it regularly to keep up-to-date.  We will notify you about significant changes in the way we treat personal information by sending notices via our normal communication methods.  By continuing to engage with us through our services and our Website, you will be deemed to have accepted such changes.



For any questions or concerns about this Privacy Policy, please use the contact information below.



Phone: 317.844.2251


The Great American Songbook Foundation

Attn:  Renée La Schiazza, Data Protection

1 Carter Green

Carmel, IN 46032


Last updated on July 29, 2024.