Privacy Policy

This Privacy Policy ("Policy") is published by Sac Town Host, a business operating under a Fictitious Business Name (DBA) registered with Sacramento County, California ("Sac Town Host," "we," "us," or "our"). This Policy governs the collection, use, disclosure, and protection of information obtained through our website at sactownhost.com (the "Site") and through any associated web forms, reservation portals, or digital communications.

This Policy is designed to comply with the California Online Privacy Protection Act (CalOPPA), the California Consumer Privacy Act of 2018 (CCPA) as amended by the California Privacy Rights Act of 2020 (CPRA), and all applicable federal privacy regulations.

By accessing or using the Site, you acknowledge that you have read, understood, and agree to the terms of this Policy.

2.1 Information You Voluntarily Provide

When you complete a contact form, submit an advertising reservation request, or complete any web form on sactownhost.com, we may collect the following Personally Identifiable Information (PII):

• Business name and trade name (DBA)
• Contact person's full name
• Business email address
• Business telephone number
• Business mailing address (where applicable)
• Industry or business category
• Advertising preferences and slot selections
• Notes, messages, or any other content you voluntarily enter into form fields

2.2 Payment Information

All payment processing on the Site is handled exclusively by Stripe, Inc., a PCI-DSS Level 1 certified third-party payment processor. Sac Town Host does not collect, store, or have access to your full credit card number, CVV code, or bank account credentials. When you submit payment, you are submitting that information directly to Stripe's encrypted servers pursuant to Stripe's own Privacy Policy at stripe.com/privacy.

We do receive and retain from Stripe a limited set of non-sensitive transaction data, including: the last four digits of the card used, card brand, billing postal code, transaction confirmation identifiers, and payment status.

2.3 Information Collected Automatically

When you visit sactownhost.com, our hosting infrastructure may automatically collect:

• Internet Protocol (IP) address
• Browser type and version
• Operating system
• Referring URL
• Pages viewed and time spent
• Date and timestamp of your visit
• General geographic location derived from your IP address (city/state level only)

We use the information we collect for the following purposes:

• To process and confirm advertising slot reservations
• To communicate with you regarding your reservation, ad proof approvals, and payment status
• To coordinate production and mailing with our commercial printing and USPS partners
• To respond to inquiries submitted through our contact form
• To send transactional emails and, where separately consented, marketing communications
• To detect, prevent, and address fraud or technical errors
• To improve the Site through aggregate, de-identified analytics
• To comply with applicable legal obligations

We do not use your personal information to make automated decisions that produce legal or similarly significant effects without human review.

Sac Town Host does not sell, rent, or trade your personal information to third-party marketers. We share your information only as follows:

4.1 Payment Processor

We share transaction data with Stripe, Inc. as necessary to process payments. Stripe acts as an independent data controller for payment data processed through its platform.

4.2 Commercial Printing Partners

To produce your postcard advertisement, we share your business name, ad artwork, and campaign specifications with our contracted commercial printing partner(s) under confidentiality obligations.

4.3 United States Postal Service (USPS)

In connection with our Every Door Direct Mail (EDDM) program, we submit required mailing documentation to the USPS, including USPS Form 3602-R. This identifies Sac Town Host as the mailer of record and specifies the mailing route and volume.

4.4 Legal Compliance

We may disclose your information when required to comply with a valid legal obligation, subpoena, court order, or government request; to enforce our Terms of Service; or to protect the rights, property, or safety of Sac Town Host or others.

4.5 Business Transfers

If Sac Town Host undergoes a business restructuring, sale, or asset transfer, your information may be transferred as part of that transaction with advance notice provided.

We retain your PII for as long as reasonably necessary to fulfill the purposes described in this Policy:

• Contact and reservation records: minimum 4 years from the date of last transaction or inquiry
• Payment transaction records: as required by Stripe's platform policies and applicable financial regulations
• Marketing communication consent records: minimum 5 years from the date of consent

Sac Town Host's website may use cookies, web beacons, and local storage to operate the Site and gather analytics. We use the following categories:

We do not currently use advertising or behavioral targeting cookies. You may control cookies through your browser settings.

7.1 Do Not Track

California law (Business & Professions Code § 22575) requires us to disclose how we respond to browser-level "Do Not Track" (DNT) signals. Sac Town Host does not currently alter its data collection or use practices in response to DNT signals because a uniform industry standard for honoring DNT has not been established. We do not use cross-site tracking technologies for behavioral advertising purposes.

7.2 Global Privacy Control (GPC)

Consistent with California Attorney General guidance and CPRA Section 1798.135(b), Sac Town Host does recognize and honor browser-level Global Privacy Control (GPC) signals as a valid opt-out of the sale or sharing of personal information. Because Sac Town Host does not currently sell personal information or engage in cross-context behavioral advertising, recognition of GPC signals has no material practical effect on our current operations. This disclosure establishes our binding commitment to honor GPC as our data practices evolve.

If you are a California resident, you have the following rights:

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to Delete: Request deletion of personal information we have collected from you, subject to certain legal exceptions.
• Right to Correct: Request correction of inaccurate personal information we maintain about you.
• Right to Opt Out of Sale or Sharing: Sac Town Host does not sell personal information. If this changes, we will provide a "Do Not Sell or Share My Personal Information" link prior to engaging in any such activity.
• Right to Non-Discrimination: We will not discriminate against you for exercising any privacy right.

To submit a request, contact us at info@sactownhost.com. We will acknowledge your request within 10 business days and respond within 45 calendar days.

We implement commercially reasonable administrative, technical, and physical security measures to protect your information, including encrypted data transmission (HTTPS/TLS) and reliance on PCI-DSS compliant payment infrastructure through Stripe. No security system is impenetrable, and we cannot guarantee absolute security.

The Site is designed for business-to-business (B2B) transactions and is intended exclusively for use by adults operating legal business entities. We do not knowingly collect personal information from individuals under the age of 13.

We reserve the right to update this Policy at any time. We will post the revised Policy on this page with an updated "Last Reviewed" date. For material changes, we will take additional steps to notify active clients.

For questions, concerns, or to exercise your privacy rights:

Sac Town Host
Elk Grove, California
info@sactownhost.com
sactownhost.com