Draft: have a lawyer review before launch. This text is a template, not legal advice.
Privacy Policy
Effective date: [effective date] · Operator: [Company name] · Questions: [contact email]
1. Who is responsible
[Company name] operates the platform. Contact for privacy questions: [contact email]. When you order from a seller, that seller also receives your order details and uses them to prepare and hand over your order.
2. What we store
We store only what is needed to run the service:
- Orders: the items, pickup time, notes and the contact details you enter at checkout (name, email and phone).
- Followers: if you follow a seller, your email, optional name, language and the topics you chose, plus the time you confirmed.
- Sellers: account details, store information and the data they enter about their business.
- Basic technical logs kept by our hosting providers for security and troubleshooting.
3. Why we use it
To process and show your order, to send you the messages about it, to let sellers contact you about your order, to send the updates you asked for from a seller you follow (only after you confirm by email), and to keep the service secure.
4. Cookies, local storage and tracking
We do not use advertising or tracking cookies and we do not show ads. We use two small things that stay on your device:
- Your cart is kept in your browser's local storage, so it is still there if you reload the page. It stays on your device until you place the order or clear it.
- A cookie named NEXT_LOCALE remembers your language choice (English or Spanish).
5. Visit counts
Stores count page views in aggregate (for example, how many times a store page was opened). We do not store your IP address, user agent or any identifier for this, we do not use cookies for it, and it is skipped when your browser sends Do Not Track or Global Privacy Control.
6. Who receives your data
Sellers receive the orders and follower details that concern their own store. We use service providers to run the platform, such as hosting, a database and an email delivery provider. They process data on our behalf and only for those purposes. We do not sell your personal data.
7. How long we keep it
We keep order and follower data while the seller's store is active and for as long as needed for the purposes above or to meet legal obligations, then delete or anonymise it. Visit counts are kept as totals and old ones are deleted periodically. Retention periods to be confirmed before launch: [retention period].
8. Your rights
Depending on where you live, you may have the right to access, correct, delete or export your data, to object to or restrict its use, and to complain to your data protection authority. Followers can unsubscribe from any email with the link it contains. To exercise your rights, write to [contact email].
9. Children
The service is not directed at children and we do not knowingly collect their data.
10. Changes
We may update this policy; the effective date above shows the current version.