Privacy Policy

What we collect

Account data — your name, email address and a one-way hash of your password (we can never read the password itself). Order data — delivery name, address, phone number and the items you bought, kept so sellers can fulfil your order and you can track it. Content you post — reviews, recipes and store information. Technical basics — your language, currency and theme preferences are stored in your own browser, not on our servers.

What we don't collect

Card details never touch our servers — payment is completed on our payment provider's (Stripe's) own secure pages. We run no third-party advertising or tracking scripts.

How we use your data

To operate the marketplace: processing orders, sending transactional email (order confirmations, payment receipts, delivery updates, password resets), showing sellers the shipments they must fulfil, and keeping the marketplace safe (fraud and compliance screening). We do not sell your personal data.

Who sees it

The seller fulfilling your order sees the delivery details for that order. Our service providers — payment processing (Stripe), email delivery (Resend) and cloud hosting (Microsoft Azure) — process data on our behalf under their own security commitments. Reviews you post are public under the name on your account.

Security

Passwords are hashed with an industry-standard algorithm; sign-in tokens are stored only as hashes and expire automatically; accounts lock after repeated failed sign-ins; and all traffic is encrypted in transit.

Retention and your rights

Order records are retained for as long as needed for bookkeeping and dispute resolution. You can ask us to export or delete your account data at any time — contact us and we will act on it promptly, subject to records we must keep by law.

Changes

If this policy changes materially we will announce it on the site before the change takes effect.