Privacy Policy
Last updated: 31 July 2026
This policy explains what TrailScout (the "Directory") collects, why, and who it is shared with. The Directory is operated by CKKC Associates LLC ("we", "us"). Contact us any time at [email protected].
1. What we collect
If you just browse. Standard request data (IP address, browser type, pages viewed) and analytics events. See section 4 on cookies.
If you create an account. Your name, email address, and a securely hashed password. We never store your password itself. We record whether your email has been verified.
If you claim a listing. The account details above, plus the claim you submit and our decision on it.
If you submit an enquiry to a listed business. Your name, email, phone number if given, and your message.
If you leave a review. Your review text, rating, and the account it came from.
Listing content itself. Trail listings are compiled from public sources and from information submitted by owners who claim them.
Location. We do not request or track your device location. Trail coordinates shown on maps are properties of the listing, not of you.
2. Why we use it
- To run your account, verify your email, and let you claim and edit a listing
- To deliver an enquiry to the business you chose to contact
- To send transactional email (verification, notices about your listing)
- To keep the Directory accurate, safe, and free of abuse
- To understand, in aggregate, how the Directory is used
We do not use your personal information to build advertising profiles, and we do not sell it.
3. Who we share it with
The business you contact. When you submit an enquiry, your name, contact details and message are sent to that business so they can reply. They become an independent controller of that information and handle it under their own policy.
Service providers who process data on our behalf, under contract:
| Provider | Purpose |
|---|---|
| GoHighLevel | customer relationship management and enquiry routing |
| Postmark | transactional email delivery |
| Google Analytics | aggregate usage analytics |
| Cloudflare | content delivery, DNS, and security |
| Railway | application and database hosting |
We also disclose information where required by law, to enforce our Terms, or to protect the rights and safety of users.
TrailScout does not process payments and does not collect card details.
4. Cookies and analytics
We use Google Analytics 4. Analytics and advertising storage are denied by default under Google Consent Mode, so no analytics cookies are set until consent is granted where consent is required.
Strictly necessary cookies — the ones that keep you signed in — are always used, because the site cannot function without them.
You can block or delete cookies in your browser; parts of the Directory that depend on being signed in will stop working.
5. How long we keep it
- Account data — while your account exists, and for a short period after closure
- Enquiries — retained so the business can act on them and so we can resolve disputes
- Analytics — in aggregate, per Google Analytics retention settings
6. Your rights
Depending on where you live you may have the right to access, correct, delete, or export your personal information, to object to or restrict certain processing, and to withdraw consent.
If you are in California (CCPA/CPRA): you may request disclosure of the categories and specific pieces of personal information we have collected, request deletion, and request correction. We do not sell or share personal information for cross-context behavioural advertising. We will not discriminate against you for exercising these rights.
If you are in the UK, EU, or EEA (UK GDPR / GDPR): our lawful bases are performance of a contract (running your account), legitimate interests (keeping the Directory accurate and secure), and consent (analytics cookies, marketing email). You may lodge a complaint with your supervisory authority.
To exercise any of these, email [email protected]. We may need to verify your identity first.
7. Security
We use encryption in transit, hashed passwords, scoped access tokens, and per-tenant data isolation. No system is perfectly secure, but we take reasonable and appropriate measures and review them as the platform changes.
8. International transfers
We are based in the United States and our providers may process data there and elsewhere. Where personal information is transferred out of the UK/EEA, we rely on appropriate safeguards such as Standard Contractual Clauses.
9. Children
The Directory is not directed at children under 13, and we do not knowingly collect their personal information. If you believe a child has provided information, contact us and we will delete it.
10. Changes
We may update this policy. Material changes will be reflected in the "last updated" date above.
11. Contact
CKKC Associates LLC
2108 N St, Ste N, Sacramento, CA 95816, United States