Privacy Policy

Last updated: 31 July 2026

This policy explains what Gluten Free Caterers (the "Directory") collects, why, and who it is shared with. The Directory is operated by CKKC Associates LLC ("we", "us"). Contact us any time at [email protected].

1. What we collect

If you just browse. Standard request data (IP address, browser type, pages viewed) and analytics events. See section 4 on cookies.

If you create an account. Your name, email address, and a securely hashed password. We never store your password itself. We record whether your email has been verified.

If you claim a listing. The account details above, plus the claim you submit and our decision on it.

If you submit an enquiry to a business. Your name, email, phone number if given, and your message.

If you buy a Featured Listing. Your name, email, billing details, and the fact and amount of the purchase. We never see or store your full card number — payment details go directly to our payment processor.

If you leave a review. Your review text, rating, and the account it came from.

Listing content itself. Business listings are compiled from public sources, including Google Places data, and from information submitted by owners who claim them.

2. Why we use it

• To run your account, verify your email, and let you claim and edit a listing
• To deliver an enquiry to the business you chose to contact
• To take payment for and deliver a Featured Listing, and to handle refunds
• To send transactional email (verification, receipts, notices about your listing or placement)
• To keep the Directory accurate, safe, and free of abuse
• To understand, in aggregate, how the Directory is used

We do not use your personal information to build advertising profiles, and we do not sell it.

3. Who we share it with

The business you contact. This is the point of the Directory: when you submit an enquiry, your name, contact details and message are sent to that business so they can reply. They become an independent controller of that information and handle it under their own policy. We are not responsible for what they do with it.

Service providers who process data on our behalf, under contract:

We also disclose information where required by law, to enforce our Terms, or to protect the rights and safety of users.

4. Cookies and analytics

We use Google Analytics 4. Analytics and advertising storage are denied by default under Google Consent Mode, so no analytics cookies are set until consent is granted where consent is required.

Strictly necessary cookies — the ones that keep you signed in — are always used, because the site cannot function without them.

You can block or delete cookies in your browser; parts of the Directory that depend on being signed in will stop working.

5. How long we keep it

• Account data — while your account exists, and for a short period after closure to meet legal and accounting obligations
• Enquiries — retained so the business can act on them and so we can resolve disputes
• Payment records — as long as tax and accounting law requires, typically seven years
• Analytics — in aggregate, per Google Analytics retention settings

6. Your rights

Depending on where you live you may have the right to access, correct, delete, or export your personal information, to object to or restrict certain processing, and to withdraw consent.

If you are in California (CCPA/CPRA): you may request disclosure of the categories and specific pieces of personal information we have collected, request deletion, and request correction. We do not sell or share personal information for cross-context behavioural advertising. We will not discriminate against you for exercising these rights.

If you are in the UK, EU, or EEA (UK GDPR / GDPR): our lawful bases are performance of a contract (running your account and delivering a Featured Listing), legitimate interests (keeping the Directory accurate and secure), consent (analytics cookies, marketing email), and legal obligation (tax and accounting records). You may lodge a complaint with your supervisory authority.

To exercise any of these, email [email protected]. We may need to verify your identity first, and we will respond within the period the applicable law requires.

7. Security

We use encryption in transit, hashed passwords, scoped access tokens, and per-tenant data isolation. No system is perfectly secure, but we take reasonable and appropriate measures and review them as the platform changes.

8. International transfers

We are based in the United States and our providers may process data there and elsewhere. Where personal information is transferred out of the UK/EEA, we rely on appropriate safeguards such as Standard Contractual Clauses.

9. Children

The Directory is a business service and is not directed at children under 13, and we do not knowingly collect their personal information. If you believe a child has provided information, contact us and we will delete it.

10. Changes

We may update this policy. Material changes will be reflected in the "last updated" date above, and where required we will notify you.

11. Contact

[email protected]

CKKC Associates LLC
2108 N St, Ste N, Sacramento, CA 95816, United States