Security & Data Handling

We collect as little personal information as possible through this Site. Information we never receive cannot be exposed, so we design the Site to avoid collecting data we do not need.

• Encrypted connections: the Site is served over HTTPS, which encrypts information traveling between your browser and our servers.
• Browser security protections: we use HTTP Strict Transport Security (HSTS), a Content Security Policy, and protections against clickjacking and content-type sniffing.
• No stored form submissions: our inquiry forms do not send data to or store data on our web servers. They open your own email app, so your message travels only by email.
• No payments on the Site: we do not collect or process payment card or bank information through this Site.
• No tracking scripts: we do not run advertising trackers or third-party analytics.
• Maintained software: we keep the Site’s software up to date and apply security fixes.

Inquiries you send us are kept in our business email account and used only to respond to you and to plan your event. We limit access to team members who need it, and we delete information we no longer need, as described in our Privacy Policy.

Please never send payment card numbers, bank account details, Social Security numbers, or passwords through our inquiry forms, by email, or by social media message. When a payment is due for a booked event, our team will explain the accepted payment methods to you directly.

Scammers sometimes pretend to be event venues in order to collect deposits. If you receive an unexpected message claiming to be from El Rancho that asks for payment, personal details, or changes to payment instructions, do not reply or click any links. Call us directly at the phone number on this page to confirm before sending money.

If you believe you have found a security problem with this Site, or you think your information has been misused, please email us with the details. Please do not access, change, or delete data that is not yours, and give us reasonable time to fix the issue before sharing it publicly. We appreciate reports made in good faith.

If we learn of a security incident affecting your personal information, we will investigate, take steps to contain it, and notify affected individuals and authorities as required by law, including Washington’s data breach notification law (RCW 19.255.010).

No method of transmitting or storing information is completely secure. Standard email is not end-to-end encrypted, and we cannot guarantee the security of information while it travels over the internet or is held by email providers. We work to protect your information, but we cannot guarantee absolute security.