Privacy policy
Last updated October 13, 2026
This policy covers ontariokettlecorn.com: what Ontario Kettle Corn Co. collects when you visit, send a booking request or pre-order kettle corn for pickup, why, who helps us handle it, how long we keep it, and what you can ask us to do with it. Our fundraiser site has its own privacy policy.
Who we are
Ontario Kettle Corn Co. is a family-owned kettle corn business in Ontario, NY. We pop kettle corn at festivals, fairs, markets and private events.
Questions or requests about your information: email info@ontariokettlecorn.com or call (315) 584-9920.
What we collect
When you ask us to come to your event
- Your name, and an email address, a phone number or both.
- Your event's dates and times, its town and place, and anything you tell us in your message.
When you pre-order for pickup
- Your name, email address and phone number.
- Which event you're picking up at, what you ordered, the price and sales tax, and whether it's paid, picked up or refunded.
We never see or store your card number. Card, Apple Pay, Google Pay and Cash App Pay details are entered into Square's payment form and go straight to Square.
When you visit the site
Just browsing doesn't ask you for anything. We use Google Analytics to count visits and see which pages people find useful. It records the pages you view, the site or search that brought you here, your device, browser and screen size, and your rough location (town or region), which Google works out from your IP address.
Google Analytics doesn't run on the pre-order, checkout or receipt pages, and it never gets what you type into our forms. We don't run advertising trackers.
How we use it
- To reply to your booking request. If you book us, we keep your name and contact details with the event, as its organizer, so we can plan it with you.
- To take payment for your pre-order and email you its confirmation, a reminder on the morning of the event, and a notice if we refund it.
- To hand over your order: your name, phone number and what you ordered are on the pickup list at our stand.
- To keep sales and sales-tax records.
- To keep the site secure and stop spam and abuse.
- To see how many people visit and which pages they use (Google Analytics), so we can improve the site.
We don't send marketing emails from this site. We don't sell your information, and we don't share it with advertisers.
Who sees it
Our own staff, to reply to requests, plan events and hand over orders, and the companies below that help us run the site. We may also share information if the law requires it, or with Square if you dispute a pre-order charge with your card company.
Companies that help us
These companies handle information for us, only to provide their service:
- Square takes pre-order payments by card, Apple Pay, Google Pay and Cash App Pay. To process and check the payment, Square receives your name, email and phone, and what you ordered.
- Cloudflare hosts the site and its database, and sends our emails. It also runs a spam check (Turnstile) on the booking and pre-order forms and limits repeated tries, which use your IP address.
- Google Workspace runs our business email. Booking requests are emailed to our inbox, and replies to our emails arrive there too.
- The U.S. Census Bureau and the New York State address locator: when an event's ZIP code crosses county or city lines, we send them the event's street address (not your name) to find which county or city it's in, so we charge the right sales tax.
- Google Analytics, a Google service, measures visits to the site, as described above.
- Intuit QuickBooks keeps our accounting. It receives the fees we pay for events, which event each is for, and the names of the event organizers and businesses we pay. It never receives pre-order buyers' names, or anyone's email, phone or address.
Square, Google Pay, Cash App, Cloudflare, Google and Intuit have their own privacy policies for the information they handle.
How long we keep it
- Pre-orders left before payment is tried are deleted after 7 days. If a payment was tried but didn't go through, we keep the order with Square's payment record.
- Paid pre-orders are kept as sales and sales-tax records.
- We delete booking requests from our booking records 2 years after our last update to them, unless you booked us. The copy emailed to our inbox when you send a request isn't deleted on a schedule. If you book us, your name and contact details stay with your event.
- Google Analytics keeps the detailed record of each visit for 2 months, then deletes it. After that, we only see totals, such as how many people viewed a page.
- We'll delete any of this sooner when you ask, unless we need it for tax records.
Your choices and requests
You can ask to see the information we have about you, correct it, or delete it. Email info@ontariokettlecorn.com and tell us the name and email address or phone number you used. We'll reply within 30 days.
We may have to keep some pre-order details, even after a deletion request, because New York requires us to keep sales-tax records. If so, we'll tell you what we kept and why.
You don't have to give us any information, but we need a way to reach you to answer a booking request, and a name, email and phone to take a pre-order.
Children
Our booking and pre-order forms are meant for adults.
Keeping it safe
The site is served over a secure (HTTPS) connection. Pre-order receipt links use a long, random code, and staff pages need a password. No system is perfectly secure, so we collect only what we need.
Changes to this policy
If we change how we handle your information, we'll update this page and the date at the top.