Last updated: February 2026
Discover Catholic Business is built on trust. We want to be completely transparent about our data practices:
Discover Catholic Business (“DCB”, “we”, “our”, or “us”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains what information we collect, how we use it, how we protect it, and your rights regarding your data when you visit or use our website at discovercatholicbusiness.com (“the Service”).
By using the Service, you consent to the data practices described in this policy. If you do not agree with these practices, please do not use the Service.
Some business listing information in our directory is compiled from publicly available sources on the internet, including business websites, public directories, chamber of commerce listings, diocesan directories, and other public records. This information is limited to business names, addresses, phone numbers, websites, categories, and descriptions that businesses have made publicly available online. We do not scrape personal email addresses, personal social media profiles, or other personal information of individuals. Our data collection is limited to publicly available business information.
If you are a business owner and wish to update, correct, or remove your business listing from our directory, please contact us at hello@discovercatholicbusiness.com. We will process removal requests within thirty (30) days.
We use the information we collect for the following purposes only:
We will never use your information to build advertising profiles, sell leads, or enable third-party marketing of any kind.
Our legal basis for processing your information includes:
We do not sell, rent, lease, or trade your personal information to any third party. Period.
We may share limited information only in the following narrow circumstances:
We do not share data with advertisers, data brokers, analytics companies (other than GA4 as described above), social media platforms, or any other third parties for their own commercial purposes.
We use a minimal number of cookies, all of which serve functional or security purposes:
These cookies are necessary for the Service to function and cannot be disabled:
These cookies help us understand how visitors use the Service:
We also use browser local storage to save your location preferences (such as coordinates for proximity search) and other user settings. This data stays on your device and is not transmitted to our servers except when used to personalize search results during your session.
We do not use advertising cookies, third-party tracking pixels, social media tracking cookies, or cross-site tracking technologies. You can control cookies through your browser settings, though disabling essential cookies may affect your ability to use certain features of the Service.
We take the security of your information seriously and implement industry-standard measures to protect it, including:
While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to promptly addressing any security incidents.
In the event of a data breach that compromises the security, confidentiality, or integrity of your personal information, we will notify affected users and relevant authorities as required by applicable law. We will provide notification within thirty (30) days of discovering the breach, including the nature of the breach, the categories of information affected, and recommended steps you can take to protect yourself. We will also report the breach to the appropriate state attorneys general and other regulatory authorities as required by applicable state and federal data breach notification laws.
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy:
When you request deletion, we remove your data from active databases within thirty (30) days. Data may persist in encrypted backups for up to ninety (90) days before automatic purging. Once deleted, your data cannot be recovered.
Regardless of your location, we provide the following rights to all users:
To exercise any of these rights or make a data-related request, please contact us at hello@discovercatholicbusiness.com. We will respond to verified requests within thirty (30) days. If we need additional time, we will notify you of the extension and the reason within the initial 30-day period. Extensions shall not exceed an additional forty-five (45) days.
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). While our business may not currently meet the thresholds that trigger mandatory CCPA compliance, we voluntarily provide the following rights to all California residents:
Authorized agents: California residents may designate an authorized agent to make privacy requests on their behalf. We may require proof of the agent's written authorization and verification of your identity before processing such requests. Authorized agent requests should be submitted to hello@discovercatholicbusiness.com with documentation of authorization.
Residents of states with comprehensive privacy laws — including Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Indiana, Kentucky, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Montana, Iowa, Delaware, Maryland, Minnesota, and other states that have enacted or may enact similar legislation — may have additional rights under their state's privacy law. We honor the rights described in this Section 8 for all users regardless of location, including rights of access, correction, deletion, data portability, and opt-out.
If we deny a privacy request, you may appeal the decision by contacting us at hello@discovercatholicbusiness.com with the subject line “Privacy Appeal.” We will respond to appeals within sixty (60) days with a written explanation of our decision. If you are unsatisfied with the outcome of the appeal, you may contact your state's attorney general to file a complaint.
Some browsers transmit “Do Not Track” (DNT) signals. Because there is no common industry standard for DNT, we do not currently respond to DNT signals. However, as described throughout this policy, we already minimize tracking and do not engage in cross-site tracking or targeted advertising.
We honor Global Privacy Control (GPC) signals. When we detect a GPC signal from your browser, we treat it as a valid request to opt out of the sale or sharing of personal information. Since we do not sell or share personal information, GPC signals are already satisfied by our default practices.
Our Service is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at hello@discovercatholicbusiness.com. If we discover that we have collected personal information from a child under 13, we will delete that information promptly.
We do not knowingly sell or share the personal information of consumers under 16 years of age. Since we do not sell or share any user's personal information, this requirement is satisfied for all users regardless of age.
We do not use automated decision-making technology, including profiling, to make decisions that produce legal or similarly significant effects concerning you. Our automated systems are limited to: (a) bot detection and rate limiting for security purposes; and (b) search result ranking based on your search query and optional proximity preferences. These automated processes do not affect your access to services, pricing, or other material outcomes.
Our Service contains links to third-party websites, including the websites of listed businesses, Stripe for payment processing, and social media platforms. These external sites have their own privacy policies, and we are not responsible for their content or privacy practices. We encourage you to review the privacy policy of any external site you visit.
Clicking a link to a listed business's website leaves our Service. We are not responsible for any data collection or practices of the linked business.
The Service is operated from the United States. If you access the Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country. By using the Service, you consent to the transfer of your information to the United States.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will update the “Last updated” date at the top of this page. For material changes, we will notify registered users via email at least thirty (30) days before the changes take effect. We encourage you to review this policy periodically.
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
Email: hello@discovercatholicbusiness.com
Website: discovercatholicbusiness.com
We aim to respond to all privacy-related inquiries within 30 days.