Privacy Policy
Effective date: [Month DD, YYYY]
Company: [Company/DBA Legal Name] ("we," "us," "our")
Contact: [email] • [phone] • [postal address]
1) What we collect
Identifiers: name, email, phone, address, social handles.
Event/booking info: headcount, location, dates, dietary needs/allergies, rental needs, photos of kitchen/venue (uploaded by you).
Payment data: processed by our PCI-compliant processor; we store only limited tokens/last 4 digits.
Usage data: IP, device, pages viewed, referrers, cookies, analytics.
2) How we use data
Provide quotes, proposals, invoices, and service updates.
Plan menus, staffing, rentals, logistics, and safety (including allergy precautions).
Prevent fraud, enforce terms, and comply with laws.
Improve our site and marketing (aggregated analytics, ad attribution).
3) Legal bases (EEA/UK)
Contract performance, legitimate interests (ops, security, analytics), consent (where required), and legal obligations.
4) Sharing
Vendors/Processors: payment, scheduling/CRM, email/SMS, analytics, ad platforms, background check/insurance when needed.
Event partners (as needed): rental houses, venues, yacht brokers, staffing.
Legal/compliance: to protect rights/safety or as required by law.
We don't sell personal information.
5) Cookies/Tracking
We use necessary, functional, and analytics/ad cookies. Manage preferences via our cookie banner and your browser settings.
6) Data retention
Keep records only as long as needed for services, legal/accounting, and dispute resolution, then delete/anonymize.
7) Security
Reasonable administrative, technical, and physical safeguards. No method is 100% secure.
8) Your rights
EEA/UK: access, correct, delete, restrict, portability, object, withdraw consent.
California: right to know/delete/correct and opt-out of "sharing" for cross-context advertising; no discrimination.
Submit requests at [privacy email or webform]. We may verify identity.
9) Children
Our services are not directed to children under 16. We do not knowingly collect their data.
10) International transfers
Where data moves outside your region, we use appropriate safeguards (e.g., SCCs).
11) Changes
We'll post updates here with a new effective date. Material changes may be notified by email or banner.
12) Contact
[Privacy Contact Name/Dept], [email], [address].