Privacy Policy

01Who we are and what this covers

LOCAL City Places LLC (“we,” “us” or “our”) operates LOCAL Pennsylvania Places at www.localpennsylvaniaplaces.com. This Privacy Policy explains how we collect, use, share and protect personal information when you browse the site, register or manage a business, sign a merchant agreement, submit payment details or contact us. It is part of our Terms and Conditions.

We are responsible for the personal information described here. Each LOCAL Places site keeps its own accounts and records: an account on LOCAL Pennsylvania Places does not create or share an account on another state’s site. This policy does not cover the websites of listed businesses or other third parties, which have their own policies.

02Information we collect

When you browse

You can explore the site without an account. We do not use advertising cookies, cross-site tracking or third-party analytics. Like any website, our hosting provider receives technical request information, such as your IP address, browser type, the page requested and the time, to deliver pages, keep the service secure and diagnose problems. Searches you type are used to return results and are not saved to a profile about you.

When you register or manage a business

When you sign a merchant agreement or submit payment

We do not collect credit or debit card numbers, Social Security numbers or government ID numbers through the site.

Business information from public sources

To build and improve listings, we review businesses’ official websites, menus, booking pages and official social or business profiles. This is business information, but it can include the names or images of owners or staff when a business publishes them. We keep records of where published photos came from and the permission we relied on.

When you contact us

If you email, call or use our contact form, we receive your contact details and the contents of your message, and we use them to respond. To stop automated spam, the contact form runs an invisible check from Vercel BotID that examines your browser and device signals when you send; it is not used for advertising or to build a profile of you.

03How we use information

• Provide the Service: show listings, run search, and let merchants create, edit, review and publish Merchant Pages.
• Accounts and security: verify email addresses, sign you in, keep you signed in, prevent fraud and abuse, and protect accounts and records.
• Merchant services: prepare, send and store agreements, confirm authority to sign, and match and verify payments you choose to make.
• Communications: send transactional emails, such as sign-in links, invitations and agreement notices, and respond to your questions.
• Marketing: with the consent you give when you create an account, send you emails about our programs, partners, sponsors and local offers, including a short welcome series after you sign up. Every marketing email includes an unsubscribe link. We record whether each marketing email was delivered, opened and which links were clicked, to see what is useful and to stop emailing addresses that bounce or unsubscribe. Marketing text messages are sent only with your separate consent.
• Improve listings: review submissions, keep information accurate and resolve conflicting details.
• Legal and business needs: comply with law, keep accounting and tax records, enforce our terms, and handle disputes.

04What becomes public

A Merchant Page is meant to be seen. Once a listing is published, its business name, address, business phone, hours, descriptions, photos, logo, links and other listing content are public and may be indexed by search engines, shared or copied by others.

05How we share information

Who we share information with

• Our affiliates and sister sites, including the other LOCAL Places sites and our City LIVING and CITYWIN programs, to run and promote those programs.
• Business partners, sponsors and participating local businesses, so they can offer you rewards, promotions, sponsored content and deals, and contact you about them.
• Advertisers, marketing partners and other third parties, which may include selling your information or sharing it for targeted advertising. They use it under their own privacy policies.
• Service providers that host and operate the Service for us under contracts that limit their use of it (listed below).
• People at your business. Other authorized managers of a listing can see and edit its content. Agreements and payment details are visible only to the designated signer and our authorized staff.
• Our staff and contractors who need access to run the Service, bound by confidentiality obligations.
• Legal reasons: to comply with law or valid legal process, to protect the rights, safety and property of our users, businesses, the public or us, and to investigate fraud or security issues.
• Business transfers: as part of a merger, acquisition, financing or sale of assets, subject to this policy’s protections.
• With your direction or consent.

What may be shared with affiliates, partners, businesses and advertisers is limited to account and contact information: your name, email address, phone number, city and ZIP code, your business details if you are a merchant, and your account type and program participation. We never sell or share bank account details, payment information, passwords, sign-in tokens or the contents of signed agreements. We do not sell the information of anyone we know is under 16.

Service providers

Maps and videos load directly from those providers, who may set their own cookies and handle data under their own policies, including the Google Privacy Policy and Vimeo Privacy Policy. You can enter business details manually instead of using the Google search, and use “Open in Google Maps” links instead of embedded maps.

06Cookies and browser storage

We use only what the Service needs to work. We do not use cookies for advertising or analytics, so there is nothing to opt out of on our side. Visitors who never sign in receive no cookies from us.

Embedded third-party content described above may use its own cookies. You can block or delete cookies in your browser settings, but you will need the session cookie to sign in.

Do Not Track and Global Privacy Control. We do not track you across other websites. Where the law requires, we treat a Global Privacy Control signal from your browser as a request to opt out of the sale and sharing of your information.

07How long we keep information

We keep personal information only as long as needed for the purposes above, then delete or de-identify it.

• Sign-in links expire after 2 days and work once. Sessions end when they expire or you sign out.
• Account, contact and listing records are kept while your account or listing is active, and for a reasonable period afterward to handle questions and restore mistakes.
• Signed agreements, payment submissions and audit records are kept for the length of the relationship and afterward as long as needed for legal, tax, accounting and dispute purposes. Signed agreements are permanent records and are not edited after signing.
• Marketing email records (who each email went to and whether it was delivered, opened or clicked) are kept with the email’s results while they are useful for planning. Unsubscribe choices are kept so we keep honoring them.
• Abuse-prevention and request records are kept for short periods consistent with their security purpose.
• Backups are overwritten on a rolling schedule, so deleted information may remain in them for a limited time.

08How we protect information

• All traffic to the site is encrypted in transit with HTTPS.
• Bank account details are encrypted with AES-256-GCM before storage. Normal screens show only the last four digits. Revealing full details is limited to authorized staff, requires a stated reason, is logged, and hides again automatically.
• Passwords and sign-in tokens are stored only as secure hashes, and sign-in attempts are rate limited.
• Signed agreement PDFs are stored privately and downloaded only through authenticated, non-cached requests.
• Access to private records is limited by role and business, and is enforced on our servers, not just in the interface.

No system is perfectly secure. If a breach affects your personal information, we will notify you and authorities as required by law. Please protect your email account, because it can be used to sign in.

09Your choices and rights

Depending on where you live, you may have the right to:

• Know and access the personal information we hold about you and get a copy in a portable format;
• Correct inaccurate information;
• Delete your personal information, subject to records we must keep, such as signed agreements and payment records;
• Opt out of the sale of your information, its sharing for targeted advertising, and marketing messages; and
• Appeal our decision on your request.

We extend these rights to all users regardless of state. Merchants can update most listing information directly in the dashboard. For anything else, email team@localcityplaces.com from the address on your account. We may need to verify your identity before acting, and will respond within 45 days (or tell you if we need more time, as the law allows). An authorized agent may submit a request with your signed permission. We will not discriminate against you for exercising your rights. To appeal a decision, reply to our response with “Appeal” in the subject line; if you are not satisfied, you can contact your state attorney general.

Do Not Sell or Share My Personal Information

You can withdraw the sharing consent you gave when creating your account at any time, without closing it. Email team@localcityplaces.com with “Do Not Sell or Share” in the subject line from the address on your account. We do not need to verify your identity for an opt-out, and we will stop selling and sharing your information as soon as we can, and within 15 business days. To stop marketing emails, use the unsubscribe link in any of them. Opting out does not affect transactional emails such as sign-in links and agreement notices.

California residents

In the past 12 months we have collected identifiers (such as name, email, phone and IP address), commercial information (agreements and payment records), financial information (bank account details you submit), internet activity (request and session data) and professional information (your business and role), from the sources and for the purposes described above. Bank account details are sensitive personal information; we use them only to process the payment you authorized and never sell or share them. As of the effective date of this policy we have not sold personal information. Going forward, with the consent described above, we may sell or share identifiers (name, email, phone, city and ZIP code) and professional information (business details and role) with the categories of third parties listed in “How we share information.” We have no actual knowledge of selling or sharing the personal information of anyone under 16.

10If your business is listed

We list businesses using information they publish and information they give us. If you are the owner or representative of a listed business and want to correct it, claim it or have it removed, or want a photo of yourself or your staff removed, email team@localcityplaces.com with the page address. We review these requests promptly and may ask for reasonable confirmation of your connection to the business.

11Children’s privacy

The Service is not directed to children under 13, and merchant accounts require users to be at least 18. We do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, contact us and we will delete it.

12Where information is processed

The Service is intended for people in the United States, and we and our service providers store and process information in the United States. If you use the Service from elsewhere, you understand your information will be transferred to and processed in the United States, where privacy laws may differ from those where you live.

13Changes to this policy

We will update this policy when our practices change and post the new version here with a new effective date. For material changes, we will give reasonable notice, such as an email to account holders or a notice on the site, before they take effect. We will not use previously collected personal information in a materially different way without your consent where the law requires it.