Privacy Policy

1. Introduction

CLT Food Truck Events ("Company," "we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our website at cltfoodtruckevents.com and related services (collectively, the "Platform"). This policy is designed to comply with the North Carolina Identity Theft Protection Act (N.C.G.S. § 75-60 et seq.) and other applicable state and federal privacy laws.

By using the Platform, you consent to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Platform.

2. Information We Collect

Information You Provide Directly: When you create an account, complete your profile, or use our services, we collect information you voluntarily provide, including: first and last name, email address, mobile phone number, business name, business address, business type (food truck, caterer, or venue), cuisine type, business description, logo and photo uploads, Certificate of Insurance (COI) documents, and payment information (processed securely through Stripe).

Information Collected Automatically: When you access the Platform, we automatically collect certain information, including: IP address, browser type and version, operating system, referring URLs, pages viewed on the Platform, date and time of visits, device identifiers, and general geographic location data derived from your IP address.

Analytics Data: We use Google Analytics 4 (GA4) to collect anonymized usage data including page views, session duration, user flow, and device information. Google Analytics uses cookies and similar technologies. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

Location Data: We collect business address information that you provide and may use geocoding services (Google Maps API) to convert addresses into geographic coordinates for map display purposes. We do not track your real-time location.

3. How We Use Your Information

We use the information we collect for the following purposes: to create and manage your account; to facilitate bookings, invitations, and communications between food trucks, caterers, and venues; to process payments through our third-party payment processor (Stripe); to send transactional notifications via email and SMS, including booking confirmations, approvals, denials, cancellations, payment receipts, and venue invitations; to display your business profile and information on our public directory pages; to operate, maintain, and improve the Platform; to detect, prevent, and address fraud, abuse, or technical issues; to comply with legal obligations under North Carolina and federal law; to enforce our Terms of Service; and to communicate with you about platform updates and service-related announcements.

4. How We Share Your Information

Public Profile Information: When you create a business profile on the Platform, certain information is displayed publicly, including your business name, cuisine type, business description, logo, photos, address (for venues), and verified badge status. This information is visible to all visitors of the Platform and may be indexed by search engines.

Other Users: When you engage in bookings or communications through the Platform, relevant information (such as your business name, contact information, and booking details) is shared with the other party to the transaction.

Third-Party Service Providers: We share your information with third-party service providers who assist us in operating the Platform, including:

Supabase — Database hosting, user authentication, and file storage. Data is stored on servers within the United States.

Stripe, Inc. — Payment processing. Stripe collects and processes payment card data in accordance with PCI DSS standards. We do not store complete credit card numbers on our servers. Stripe's privacy policy is available at stripe.com/privacy.

Resend — Transactional email delivery for booking notifications and account communications.

Twilio, Inc. — SMS/text message delivery for booking notifications and account communications. Twilio's privacy policy is available at twilio.com/legal/privacy.

Google — Analytics (Google Analytics 4), maps and geocoding (Google Maps API), and search indexing (Google Search Console).

Vercel — Website hosting and deployment.

HubSpot — Customer relationship management (CRM). When you create an account, your contact information and business type are transmitted to our HubSpot CRM for lead management and communication purposes.

Legal Requirements: We may disclose your information if required to do so by law or in the good faith belief that such disclosure is necessary to: comply with a legal obligation, court order, or legal process; protect and defend our rights or property; prevent or investigate possible wrongdoing in connection with the Platform; protect the personal safety of users of the Platform or the public; or protect against legal liability.

Business Transfers: In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on the Platform of any change in ownership or uses of your personal information.

We do not sell, rent, or trade your personal information to third parties for their direct marketing purposes.

5. Data Storage & Security

We implement reasonable administrative, technical, and physical security measures designed to protect your personal information from unauthorized access, use, alteration, and destruction, in accordance with the North Carolina Identity Theft Protection Act. These measures include SSL/TLS encryption for data in transit, encrypted database storage, row-level security policies on database tables, secure authentication through Supabase Auth, and PCI-compliant payment processing through Stripe.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. If you request account deletion, we will delete or anonymize your personal information within 30 days, except as required to comply with legal obligations, resolve disputes, or enforce our agreements. Booking records and payment transaction data may be retained for a minimum of 3 years for tax, legal, and accounting purposes as required by North Carolina and federal law.

7. Your Rights & Choices

Access & Update: You may access and update your personal information at any time through your account dashboard and edit profile page.

Account Deletion: You may request deletion of your account and associated personal information by contacting us at support@cltfoodtruckevents.com. We will process your request within 30 days, subject to any legal retention requirements.

Communications: Email and SMS notifications related to bookings, payments, and account activity are transactional in nature and are a required part of the Platform's service. You may stop receiving these communications by deactivating your account. You may reply STOP to any SMS message to cease text notifications, though this may affect your ability to receive important booking updates.

Cookies: Most web browsers are set to accept cookies by default. You can configure your browser to refuse all cookies or to indicate when a cookie is being sent. However, some features of the Platform may not function properly without cookies.

8. Security Breach Notification

In compliance with the North Carolina Identity Theft Protection Act (N.C.G.S. § 75-65), in the event of a security breach involving your personal information, we will provide notification to affected individuals without unreasonable delay, consistent with the legitimate needs of law enforcement. Notification will be provided by email, written notice, or substitute notice as permitted by law. We will also notify the North Carolina Attorney General's Office if the breach affects more than 1,000 persons.

9. Children's Privacy

The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18, we will take steps to delete such information promptly. If you believe we have inadvertently collected information from a child under 18, please contact us at support@cltfoodtruckevents.com.

10. Third-Party Links

The Platform may contain links to third-party websites, services, or resources. We are not responsible for the privacy practices or content of these third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.

11. Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activity tracked. The Platform does not currently respond to DNT signals, as there is no uniform standard for interpreting these signals. We will update this policy if a standard is established.

12. North Carolina Specific Rights

Under North Carolina law, you have the right to request information about whether we have disclosed your personal information to third parties for direct marketing purposes. As stated above, we do not sell or share your personal information with third parties for their direct marketing purposes. North Carolina residents may also request access to their personal information held by us and request correction of any inaccuracies. To exercise these rights, contact us at support@cltfoodtruckevents.com.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you by email. Your continued use of the Platform after any changes to this Privacy Policy constitutes your acceptance of the revised policy. We encourage you to review this Privacy Policy periodically.

14. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

CLT Food Truck Events
Charlotte, North Carolina
Email: support@cltfoodtruckevents.com

For complaints regarding our data practices, you may also contact the North Carolina Attorney General's Consumer Protection Division at ncdoj.gov or call (877) 566-7226.