Privacy policy

The short version

This is a static website. It has no user accounts, no login, and no newsletter. The one thing you can submit is a review of a supplier, and that is entirely optional. We do not sell or share personal information. The location feature never sends your coordinates anywhere.

What we collect

Information you give us

What you put in an email to us. If you write to hello@crutchdirectory.com to report a listing, we keep that message for as long as it takes to act on it and to keep a record of the correction.

If you submit a review, we store what you typed: the rating, the review text, the name you signed it with, the month you say you visited, what you were looking for, and how you told us you know the business. All of that is meant to be published, so do not put anything private in it. We also store, and never publish, a one-way hash of your IP address and your browser's user-agent string, purely to stop one person flooding the site. The hash cannot be reversed into an address, and we do not keep the address itself. Reviews are held in a Cloudflare D1 database in the United States. See the review policy for how they are moderated.

Information collected automatically

• Server logs. Our host records standard request data (IP address, user agent, requested URL, timestamp) for security and operations. We do not build profiles from it.
• Privacy-friendly analytics. Where analytics are enabled, they are configured to record aggregate page views without cookies and without cross-site tracking identifiers.

What we do not collect

• No health information. We never ask about your injury, condition, or treatment.
• No accounts, passwords, or payment details. Nothing is sold on this site.
• No advertising cookies or cross-site tracking pixels.

Location search

Four places use your browser's geolocation API: the "use my location" feature on the near me page and on the national map, the "nearest to me" sort on a city page, and a city's own map screen. In every case your browser asks your permission first, returns coordinates to the page, and the distance calculation runs in JavaScript on your own device against coordinates that were downloaded with the page. Your coordinates are never transmitted to us or to anyone else. There is no server-side endpoint that could receive them, and nothing stores them: close the tab and they are gone.

A city's map screen asks on arrival rather than waiting for you to press a button, because the whole purpose of that screen is to show which suppliers are closest to you. Decline, and it lists the same suppliers in our own ranking, which is what it shows before you answer either way; a "use my location" button stays on the map if you change your mind. If you have already declined once, your browser will not ask again.

We do record whether a location lookup was granted, declined or failed, as a count with no coordinates attached, so we can tell a feature nobody uses from one that is quietly broken. That number says a prompt was answered. It never says where you are.

Cookies

We set no cookies of our own for tracking. Any cookie present is strictly necessary for the site or hosting platform to function.

Third parties

• Hosting. The site is served by our hosting provider, which processes request data as described above.
• Outbound links. Directions links open Google Maps and phone links open your dialler. Once you leave, that service's own privacy policy applies.
• Retailer offers and affiliate links. The offer bar above the page header, the offer card in the page rail, and some links on the buying guides go to online retailers. Following one may let that retailer set a cookie recording that we referred you. Where we earn anything from the link it is marked as sponsored. None of these ever appear inside a directory listing.

Business listing data

Listings describe businesses, not consumers, and are derived from the public federal NPPES registry. That information is published by the U.S. government in the public domain. If you represent a listed business and want the listing changed or removed, see contact and corrections. Removal here does not alter the underlying federal record.

Your rights

California (CCPA/CPRA)

California residents may request to know what personal information we hold, request deletion, and opt out of sale or sharing. We do not sell or share personal information as those terms are defined by the CCPA, and we do not use it for cross-context behavioural advertising. To exercise any right, email hello@crutchdirectory.com. We will not discriminate against you for making a request.

EEA and UK (GDPR)

If you are in the EEA or UK you have the rights of access, rectification, erasure, restriction, portability, and objection. Our lawful basis for processing the limited data described above is legitimate interest in operating and securing the site. Email us to exercise any right, or complain to your local supervisory authority.

Children

This site is not directed to children under 13 and we do not knowingly collect information from them.

Changes

If this policy changes materially we will update the date at the top of the page.

Contact

NLH Enterprises LLC, at hello@crutchdirectory.com.