Legal
Privacy Policy
Last updated: 4 November 2026
Introduction
ShopCastleRock ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website shopcastlerock.co.
Information We Collect
Information You Provide
We may collect information you voluntarily provide, including:
- Contact information (name, email address, phone number) when you submit our contact form
- If your business is on a paid plan: your name, email, phone number and role at the business, so you can sign in by emailed link and update the listing. New plans are closed for now.
- Business information if you submit a business listing
- If your business is on a paid plan: billing details, which Stripe holds and processes. We never see your full card number.
- Your name and email when you write a review (see Reviews, below)
Reviews
The review form asks for your name and email, with your rating, a title and your review.
- Why we ask: we read each review before it goes up. We use your email only to write back to you about your review.
- Where it goes: the site does not save it. It comes to our own inbox as one email, sent through Resend.
- How long we keep it: that email stays in our inbox until we delete it. Ask us and we will delete it.
- If our email service fails, the review is written to our hosting log at Vercel instead. Vercel deletes those logs on its own schedule.
- We never show your email. If we post your review, your name is shown with it.
Information Automatically Collected
When you visit our website, we may automatically collect:
- Device and browser information
- IP address and general location
- Pages visited and time spent on site
- Referring website or search terms
How We Use Your Information
We use the information we collect to:
- Provide and maintain our business directory service
- Process business listing requests and payments
- Respond to your inquiries and support requests
- Send administrative information and updates
- Improve our website and user experience
- Protect against fraudulent or unauthorized activity
Information Sharing
We do not sell your personal information. We may share information with:
- Service Providers: Third-party services that help us operate our website (e.g., Stripe for payments on existing plans, Resend for email, Vercel for hosting)
- Business Listings: Information you provide for a business listing will be publicly displayed on our directory
- Legal Requirements: When required by law or to protect our rights
Data Security
We implement appropriate technical and organizational measures to protect your personal information. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.
Third-Party Services
Our website uses the following third-party services:
- Stripe: For billing on existing paid plans
- Resend: For the sign-in and billing emails we send to owners, and to bring us the reviews and messages you send
- Vercel: For website hosting and analytics
- Google Analytics: Only after you allow analytics, it sets cookies to count page views, how visitors arrive, and taps on a listing's call, directions and website links
Each of these services has their own privacy policies governing their use of your data.
Your Rights
Depending on your location, you may have rights including:
- Access to your personal information
- Correction of inaccurate information
- Deletion of your personal information
- Opting out of marketing communications
Cookies
We use cookies and similar technologies to enhance your experience, analyze site traffic, and for authentication purposes. You can control cookie preferences through your browser settings.
Vercel Analytics counts visits and pages for every visitor, without cookies and without storing anything in your browser. It does not record private pages, such as sign-in links. Google Analytics, Speed Insights and the visit counter load only if you allow analytics. After "Essential only", only Vercel Analytics runs.
Children's Privacy
Our website is not intended for children under 13. We do not knowingly collect personal information from children under 13.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.
Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
- Email: info@shopcastlerock.co
- Contact Form: shopcastlerock.co/contact