Privacy Policy
This policy describes what personal information the platform collects from shopkeepers and buyers, why it is collected, how it is used, and the choices available to you.
What this policy covers
The platform serves two audiences whose data is handled differently: shopkeepers who list their shops, and buyers who purchase from those shops. This policy applies to both, along with anyone who interacts with the website or contacts the team.
Information collected from shopkeepers
- Account information - owner name, contact email, and the shop's legal name and identifier where applicable.
- Shop location - the geographic point used to compute delivery radius and locality-based discovery.
- Shelf photographs - the images uploaded to generate listings, retained during your active use of the platform.
- Listing data - the structured product records produced from your photographs, including price and stock state.
- Operational records - orders received, fulfilment progress, payments settled.
Information collected from buyers
- Buyer contact information provided at checkout.
- Delivery address used to verify orders against the shop's delivery radius.
- Order history required to fulfil purchases and honour returns.
- Non-personal usage information such as pages visited and category browsing to improve nearby discovery.
How information is used
- Generate listings from shelf photographs and keep them accurate.
- Surface a shop to nearby buyers who are searching for items it stocks.
- Enforce delivery radius decisions consistently across search, cart and payment.
- Route orders, collect payments through a licensed gateway, and share fulfilment status with buyers.
- Communicate about the account, orders, security matters and material product changes.
Payments
Payments are processed by a licensed payment gateway. Card details and bank credentials are not stored on our infrastructure. The gateway retains payment records to the extent required by law and its own regulatory obligations.
Data sharing
Data is shared with a shopkeeper strictly to fulfil the orders placed at their shop. Data is shared with buyers strictly to inform them about their orders. Beyond this, personal data is not sold or shared with third parties for their own marketing.
Limited sharing occurs with service providers necessary to run the platform - such as the payment gateway, transactional email delivery, and cloud infrastructure - under contractual obligations to handle the data only for the purposes we specify.
Retention
- Shelf photographs and listing data are retained for the active life of the shop account.
- Order and payment metadata are retained for the statutory tax, accounting and dispute-resolution periods that apply.
- Buyer contact information is retained for the duration required to fulfil the order and any applicable warranty or return window.
Your choices
- You may access, correct or export the personal data associated with your account.
- You may request deletion of your account and its data, subject to records the law requires us to retain.
- You may opt out of non-essential communications while continuing to receive essential account and order messages.
Security
Data is transmitted over TLS and encrypted at rest. Internal access to production data is restricted to a small group under named roles and logged. Security incidents are triaged promptly and communicated to affected users where required.
Children
The platform is intended for use by adults operating or purchasing from retail shops. It is not directed to children.
Changes to this policy
If we materially change how personal information is collected or used, the change will be reflected on this page and, for account holders, communicated by email in advance where practical.
Contact about privacy
Questions or requests relating to your personal information can be sent through the contact channel available on the site. Please mark the subject line as a privacy matter so it is routed correctly.
