Privacy Policy

What we collect

When you use the assessment form we collect your name, email address, company, phone number if you give one, what you write in the message, and the IP address the submission came from.

When you engage us we collect what the filing requires: facility names and addresses, responsible party details, ingredient and label information, D-U-N-S numbers, tax identification numbers, and any documents you send us.

When you pay, the card details go straight to Stripe. We receive the fact of payment, the amount, and your email address. We never see or hold your card number.

Why we hold it

To answer your enquiry, to prepare and submit the filings you engaged us for, to keep a record of what was filed and when, and to meet our own legal and accounting obligations.

Who we pass it to

Only the parties needed to do the work: FDA, for facility registration, product listing and US Agent designation; the IRS, for Form SS-4; US Customs and Border Protection, for Form 5106; Dun and Bradstreet, for a D-U-N-S application; state filing offices and registered agent providers, for company formation; Stripe, for payment; and Resend, which delivers our email.

We do not sell your information, we do not share it with advertisers, and we do not use it to build profiles.

Cookies and tracking

The public pages of this site run no analytics, no advertising pixels and no third-party trackers. Nothing on them stores a cookie on your device.

The staff area at /login and /dashboard stores a sign-in token in the browser for people who work here. That area is not for clients.

Our payment page hands you over to Stripe, which sets its own cookies for fraud prevention under its own privacy policy.

Do Not Track signals

Some browsers can send a Do Not Track signal. There is no agreed industry standard for how a site must answer one. We do not track visitors across other websites or over time, so there is nothing for the signal to switch off. Receiving one changes nothing, because what we do is already not to track.

Third-party tracking

No third party collects personal information about your online activity on our public pages, and no third party follows you from our pages to other sites. When you go to Stripe to pay, you are on Stripe's site under Stripe's own privacy policy, and what Stripe does there is described by Stripe.

How long we keep it

Enquiries that do not turn into work are kept for two years and then deleted. Engagement records are kept for seven years, which is the period we may need them for tax, professional and agency purposes, and then deleted.

You can ask us to delete your information earlier by writing to [email protected]. If a filing has already been made we will keep what is needed to evidence it, and delete the rest.

Where it is processed

We are a US company. We work and store data only in the United States, and we have no office or entity in China, Japan or anywhere else in Asia. If you are outside the United States, engaging us means your information is sent to and handled in the United States.

What you send us is mostly company and product information. Where it names an individual, such as a contact name, job title, email or phone number, we use it only to make the filing you engaged us for. If the law where you are requires you to obtain that person's consent before sending their details to a service provider outside your country, that step is yours to take and we cannot take it for you.

Your rights, wherever you are

Whatever privacy law does or does not apply to us, everyone who writes in gets the same treatment: we will tell you what we hold about you, correct it, send you a copy, or delete it, apart from records we must keep to evidence a filing already made. Write to [email protected] and we answer within five business days.

We have never sold or shared personal information for money or for advertising, and we do not intend to. We only send email that relates to your enquiry or your engagement. We do not run a marketing list.

Changes to this policy

If we change this policy in a way that materially affects what we collect, who we pass it to, or how long we keep it, we will post the new version on this page and update the effective date before the change takes effect. If you have an open engagement with us at the time, we will also email you at the address we hold for you.

Contact

KECC LLC, 17731 Irvine Blvd, STE 205, Tustin, CA 92780. Email [email protected]. This version is effective 24 August 2026.