Privacy Policy
Last updated: August 31, 2026
This policy explains what Connecticut Kitchen ("we," "us," "our") collects when you use ct.kitchen, why we collect it, who we share it with, and the choices you have. It describes how the site actually works today — not every feature the software could support.
1. Information you give us
You can browse the whole catalog without telling us anything. We receive personal information only when you choose to send it:
- Quote and consultation requests. Our contact page hosts a request form and an appointment booking calendar. These are embedded from our customer relationship management (CRM) provider, GoHighLevel, and what you type into them goes directly to that provider on our behalf. They typically ask for your name, email address, phone number and a description of your project.
- Project survey. Our design survey collects your name, email address, phone number and project address, along with the project details you select — renovation goal and type, room and space information, style preferences, budget range and material choices — plus any photographs you choose to upload.
- Accounts. Creating an account stores your email address and a password. We never see your password in readable form; authentication is handled by our platform provider, which stores it hashed.
- Saved selections and quote requests. Products you save to your selection, and the details you submit when you request a quote — name, email, phone, and the delivery or pickup address you provide.
- Chat. The chat bubble in the corner of every page is operated by our CRM provider on our behalf. Anything you type into it — including the name, email address or phone number it asks for so we can reply — goes to that provider and then to us.
- Direct correspondence. Anything you include when you call or email us.
Photographs uploaded to the survey
Please read this before uploading. Photos submitted through the project survey are stored in a public cloud storage bucket. That means each uploaded file has a web address that will load for anyone who has that address, without signing in. The addresses are long and random and we do not publish or index them, but they are not access-controlled. Please do not upload photographs containing documents, identification, or anything else you would not want to be reachable by link. If you have uploaded something you would like removed, email us and we will delete it.
2. Information collected automatically
We run our own first-party analytics rather than a third-party service such as Google Analytics. When you use the site we record, in our own database:
- A randomly generated visitor identifier and a session identifier — these are random values, not your name;
- The pages you view, the type of interaction, and the referring address that sent you to us;
- Your browser’s user-agent string, window size and language setting;
- Approximate location derived by our hosting provider from your network connection — country, region, city, postal code and an approximate latitude and longitude. This is city-level accuracy at best, not your street address;
- Your account identifier, if you are signed in at the time.
We do not store your IP address. It is visible to our hosting provider in transit and we use it momentarily, in memory, to rate-limit abusive traffic — it is never written to our database. We also discard analytics events from search-engine and AI crawlers rather than recording them.
Linking a device to an account
When you sign in, we record a link between the random visitor identifier stored on your device and your account. This lets us recognise that browsing done on that device before you signed in belongs to you, and it applies to past as well as future visits on that device. If you would prefer this link not exist, clearing your cookies gives the device a new identifier, and you can ask us to delete the association entirely.
3. How we use it
- To answer your questions and prepare quotes, estimates, consultations and design work;
- To maintain your account and the product selection saved to it;
- To contact you about a request you made, including reminders about a selection you left unfinished;
- To understand which parts of the site are useful and to improve them;
- To keep the site secure and limit abusive automated traffic; and
- To meet our legal and record-keeping obligations.
4. Who we share it with
We do not sell your personal information, and we do not share it with advertising networks. The site loads no advertising or social-media tracking pixels. We rely on a small number of service providers who process information on our behalf:
Beyond those providers, we share personal information only with professional advisers where reasonably necessary, where the law or valid legal process requires it, where it is needed to protect the rights and safety of our customers or our business, or in connection with a sale or reorganisation of the business — in which case it would remain subject to a policy no less protective than this one.
Some product images on this site are delivered from manufacturer and content-delivery networks. Loading an image tells that network your browser requested it. We do not send them any information about you.
5. Payments
We work quote-first. The site does not take card payments and does not collect card numbers or bank details. Payment methods, deposits, schedules and terms are set out in the estimate, invoice, order or agreement that applies to your project, and are handled outside this website.
6. Your choices
- Access, correction and deletion. Email us and we will tell you what we hold about you, correct it, or delete it. We may need to confirm your identity first, and we may keep records we are required to keep.
- Marketing. Every marketing email includes an unsubscribe link. You can also ask us to stop by email or phone. We will still send messages about a request or project already underway.
- Cookies and site data. See our Cookie Policy for exactly what is stored on your device and how to clear or block it in your browser.
- Accounts. Ask us to close your account and we will delete it along with the selection saved to it.
7. How long we keep it
We keep enquiry and project information for as long as we are working with you and afterwards for as long as we may need it for warranty, accounting, tax and legal-record purposes. Account information is kept until you ask us to close the account. Analytics records are kept in aggregate to understand long-term trends. When information is no longer needed for any of these purposes we delete it.
8. Security
Traffic to this site is encrypted in transit. Account passwords are stored hashed by our platform provider, and access to customer records is limited to staff who need it. No method of transmission or storage is completely secure, so we cannot guarantee absolute security — and, as noted above, files uploaded to the survey are stored without access control.
9. Children
This site is intended for adults arranging home-improvement work. It is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has given us information, contact us and we will delete it.
10. Changes to this policy
If we change how we handle personal information, we will update this page and move the “last updated” date above. Significant changes will be described here rather than made silently.
11. Contact us
Questions about this policy, or a request about your information:
Connecticut Kitchen
Email: hi@ct.kitchen
Phone: (203) 496-6563
Connecticut, USA — design consultations by appointment