Privacy Policy & Notice at Collection
Effective Date: January 1, 2026
Last Updated: July 13, 2026
Overview
Hearst Castle is committed to protecting your privacy and handling your Personal Information with transparency and care.
This Privacy Policy explains:
- What information do we collect
- How and why we use it
- Who we share it with
- Your rights and choices
This policy applies to all users of the Hearst Castle website and related services.
Owner and Data Controller
Information Security & Privacy Office
California Department of Parks and Recreation
1516 9th Street, Third Floor
Sacramento, CA 95814
Email: [email protected]
Phone: (916) 503-0924
Notice at Collection (California Residents)
We collect Personal Information to operate and improve Hearst Castle services.
Categories of Personal Information Collected
Depending on how you interact with the site, we may collect:
- Identifiers: Name, email address, phone number, mailing address
- Internet Activity: IP address, browser type, pages visited, session duration
- Geolocation (approximate): Based on IP address
- Communications: Messages submitted through forms or email
Sources of Information
- Directly from you (forms, inquiries)
- Automatically through website usage (cookies, analytics tools)
Purpose of Collection
- Respond to inquiries
- Improve website performance and usability
- Meet legal and regulatory obligations
We do not use your information for purposes that are materially different from those disclosed without your consent.
How We Use Personal Information
Your information is used to:
- Manage enrollment and eligibility
- Communicate important updates
- Improve user experience and site functionality
- Ensure compliance with California law and program requirements
Sharing of Personal Information
We may share information with:
- Service providers (hosting, analytics, communications)
- Government agencies, when required by law
We do not sell your Personal Information.
We do not share Personal Information for cross-context behavioral advertising.
Cookies and Tracking Technologies
This website uses cookies and similar technologies to:
- Maintain site functionality
- Understand user behavior
- Improve performance
These tools may collect Usage Data such as IP address, browser type, and navigation behavior.
You can control cookies through your browser settings. To learn more, Users may consult the Cookie Policy.
Data Retention
We retain Personal Information:
- As long as is necessary to fulfill the purpose it was collected for
- As required by law or regulatory obligations
Once retention is no longer required, data is securely deleted.
Data Security
We implement administrative, technical, and physical safeguards to protect your information against:
- Unauthorized access
- Disclosure
- Alteration
- Destruction
No system is completely secure, but reasonable protections are in place.
Your Privacy Rights (United States)
You have the right to:
- Access your Personal Information
- Request correction of inaccurate data
- Request the deletion of your data
- Obtain a copy of your data
- Opt out of certain data uses where applicable
California-Specific Rights (CPRA)
California residents also have the right to:
- Know what Personal Information is collected and how it is used
- Request deletion of Personal Information
- Request correction of inaccurate data
- Limit use of Sensitive Personal Information
- Opt out of sharing (not applicable, as Hearst does not share for advertising)
- Be free from discrimination for exercising privacy rights
How to Exercise Your Rights
Submit requests via:
Email: [email protected]
Phone: (916) 503-0924
Requests will be verified before processing and handled within legally required timeframes.
Legal Basis for Processing
We process Personal Information based on:
- Consent
- Legal obligations
- Public interest responsibilities
- Contractual necessity (e.g., course participation)
Data Transfers
Data may be processed in locations outside your state or country when necessary for service delivery, with appropriate safeguards in place.
System Logs and Maintenance
For operational purposes, systems may automatically collect:
- IP addresses
- Device data
- Log files
This supports performance monitoring and security.
Legal Disclosure
Personal Information may be disclosed:
- To comply with legal obligations
- In response to lawful requests from authorities
- To protect rights, safety, or property
Changes to This Policy
This policy may be updated periodically.
Updates will be posted on this page with a revised effective date.
Definitions
Personal Information: Data that identifies or can be linked to an individual
Sensitive Personal Information: Information requiring higher protection under law
Usage Data: Automatically collected data about how the site is used
Contact
For any privacy-related questions or requests:
Email: [email protected]
Phone: (916) 503-0924
