Privacy Policy

Catholic Owned (“we,” “us,” or “our”) operates the catholicowned.com marketplace and Business Directory. This Privacy Policy explains what personal information we collect, how we use it, and the choices you have.

By using our services, you agree to the collection and use of information as described below. If you do not agree, please do not use our services.

Information you provide: Account information (name, email, password), billing and shipping addresses, payment method details (handled by Stripe — we never see your full card number), business information if you sell on the platform, content you post, and messages you send to other users.

Information collected automatically: IP address, device and browser information, pages viewed, referring URLs, and interactions with the platform. We use this for analytics, fraud prevention, and improving the service.

From third parties: If you sign in via Google, Apple, or another identity provider, we receive the profile information you authorize them to share (typically name, email, and profile image).

• To create and manage your account
• To process orders, payments, and subscriptions
• To deliver transactional emails (receipts, shipping updates, payment notices)
• To send marketing emails (only if you’ve opted in)
• To enable messaging between buyers, vendors, and directory listings
• To verify Catholic-owned business status
• To improve the platform and detect fraud or abuse
• To comply with legal obligations

With vendors: When you place an order, we share the information the vendor needs to fulfill it (name, shipping address, order contents).

With service providers: We use vetted third-party services to run the platform, including Stripe (payments), Resend (transactional email), SendGrid (marketing email, if you’ve opted in), and analytics providers. Each operates under a data processing agreement limiting their use of your information to the purposes we specify.

For legal reasons: We may disclose information if required by law, subpoena, or to protect our rights, users, or the public.

We do not sell your personal information.

We use cookies to keep you signed in, remember your cart, and understand how the platform is used. You can disable cookies in your browser settings, though parts of the site may not work correctly without them.

Depending on where you live, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Delete your account and associated data
• Opt out of marketing emails (use the unsubscribe link in any marketing email)
• Export your data in a portable format

To exercise any of these rights, email us at privacy@catholicowned.com.

We retain your account information for as long as your account is active and for a reasonable period afterward, or as required to meet legal or accounting obligations. Order and transaction records are retained as required by tax and commercial law.

We use industry-standard measures to protect your data — TLS encryption in transit, secure databases, and limited internal access. No system is perfectly secure, and we cannot guarantee absolute protection against unauthorized access. If you believe your account has been compromised, email security@catholicowned.com immediately.

Catholic Owned is not directed at children under 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, contact us and we’ll delete it.

We may update this policy from time to time. When we do, we’ll update the “last updated” date at the top and, for material changes, notify you by email or a prominent notice on the platform.

Questions about this Privacy Policy? Email privacy@catholicowned.com.