Privacy Policy

1. Introduction

This Privacy Policy explains how Cater Directly ("we", "our", or "us") collects, uses, discloses, and safeguards personal information when you use our event marketplace, including our website and related services (the "Service"). By using the Service, you agree to this Privacy Policy and our Terms of Use.

2. Information we collect

2.1 Information you provide to us

• Account details (name, email, phone number, password).
• Event details (date, location, headcount, preferences, budget).
• Communications (messages, proposals, reviews, support requests).
• Payment information processed by our payment partners (we do not store full card details).

2.2 Information we receive from vendors and partners

• Proposal details, availability, pricing, and service fulfillment updates.
• Dispute and chargeback information where applicable.

2.3 Information collected automatically

• Device and usage data such as IP address, browser type, pages viewed, and timestamps.
• Diagnostic and performance data to improve reliability and security.

2.4 Cookies and similar technologies

We use cookies and similar technologies to keep you signed in, remember preferences, analyze traffic, and measure the effectiveness of our marketing. You can control cookies through your browser settings.

3. How we use information

• Operate and provide the Service, including facilitating proposals, bookings, and payments.
• Personalize the experience, such as showing relevant vendors and recommendations.
• Communicate with you about your account, proposals, bookings, and support.
• Monitor, maintain, and improve the Service, including troubleshooting and analytics.
• Prevent fraud, enforce policies, and comply with legal obligations.
• With your consent, send marketing communications you can opt out of at any time.

4. Legal bases (GDPR)

Where the GDPR applies, we process personal data under these legal bases: (a) performance of a contract, (b) legitimate interests (e.g., to secure and improve the Service), (c) consent (e.g., marketing), and (d) compliance with legal obligations.

5. How we share information

• Vendors: We share relevant event and contact details with vendors you interact with or request proposals from.
• Service providers: Cloud hosting, analytics, payment processing, communications, and customer support tools.
• Legal and compliance: To comply with law, enforce our agreements, or protect rights, safety, and security.
• Business transfers: In connection with a merger, acquisition, financing, or sale of assets.

6. Analytics, cookies, and ads

We may use analytics to understand usage and improve the Service. We may also use cookies for essential functions and to measure marketing. You can manage cookies in your browser settings. Marketing emails include an unsubscribe option.

7. Data retention

We retain personal information for as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods depend on the type of data and our legal requirements.

8. Your privacy rights

Depending on your location, you may have rights to access, correct, delete, or port your data; restrict or object to certain processing; and withdraw consent where processing is based on consent. You may also have the right to lodge a complaint with your local data protection authority.

California residents may have rights under the CCPA/CPRA, including the right to know, delete, correct, and opt out of certain data sharing. We do not knowingly sell personal information as defined by the CCPA/CPRA.

To exercise your rights, contact us at info@caterdirectly.com.

9. Children’s privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us so we can take appropriate action.

10. Security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. International data transfers

If you access the Service from outside the United States, your information may be transferred to and processed in the United States and other countries, which may have different data protection laws than your country of residence.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Your continued use of the Service after changes become effective signifies your acceptance of the updated policy.

13. Contact

If you have questions about this Privacy Policy or our privacy practices, contact us at info@caterdirectly.com.

14. California Privacy Notice

Under California law, you may request details about categories of personal information collected, sources, business purpose, categories of third parties with whom information is shared, and specific pieces of personal information we hold about you. To make a request, email info@caterdirectly.com. We will verify your request consistent with applicable law.