Privacy & Use Policy

1. Who this policy is from

This site is operated by the market ("we", "us") to schedule vendors for our Thursday market. Questions about this policy, or any request about your information, go to —.

2. What we collect, and why

Everything we hold about you comes from the form you filled in. Nothing is bought, scraped or inferred.

• Business / stall name — to identify your booth and list you publicly once approved.
• Contact name — so we know who we are speaking to.
• Email address — to send you the approval or decline notice, the payment link, and market-day logistics.
• Phone number — for time-sensitive contact on or near market day.
• Vendor type and what you sell — to balance the lineup and set the correct booth fee.
• Requested market dates — the reason you are here.
• Approval status and whether the booth fee is paid — added by us, not by you.
• A one-way hash of your network address — kept only to stop automated abuse of the form. It is a scrambled fingerprint; we do not store or have your actual IP address, and it cannot be reversed back into one.
• The fact that you accepted this policy, and which version.

We do not collect payment card details anywhere on this site. Booth fees are paid through a link we email you, handled by that payment provider under their own policy.

What we do not do

• No advertising, tracking pixels, analytics scripts or third-party cookies.
• No selling, renting or sharing your details with anyone for their own purposes.
• No automated decisions — a person reviews every request.
• No marketing email unless you ask us to add you to a list.

3. Where it is stored

Submissions are stored server side in a hosted PostgreSQL database provided by Supabase, on infrastructure located in the United States. Supabase processes this data on our behalf and does not use it for its own purposes. The site itself is served by Vercel, with DNS and network protection from Cloudflare. The anti-bot check on the submission form is Cloudflare Turnstile, which confirms you are a person without setting tracking cookies, profiling you, or following you across other websites. Those providers may briefly log ordinary request information (such as network addresses) for security and reliability under their own policies.

Access is restricted in the database itself, not merely hidden in the page. The public site is permitted to read only four fields — business name, vendor type, market date and a record id — and only for approved vendors. Your email, phone, contact name and notes are unreachable from any browser; they can be read only by a signed-in market administrator. Traffic is encrypted in transit (HTTPS) and the database is encrypted at rest.

4. Who can see it

• The market administrator — one password-protected account. This is the only login that can see contact details.
• The public — once you are approved, your business name, vendor type and the dates you are attending appear on the "Who's attending" page. Nothing else.
• Our providers — Supabase, Vercel and Cloudflare, strictly as infrastructure.
• Anyone we are legally required to disclose to — a valid legal request, and nothing beyond it.

5. What is kept in your own browser

To save you retyping, your vendor details are also saved in your browser's local storage on the device you used, along with a random identifier that lets you see the status of your own requests without an account. That copy never leaves your device, is not readable by us or by other sites, and is not a cookie or a tracker. Clearing your browser data — or using Clear saved details on the form — removes it. Doing so does not delete anything already submitted to us; use the contact address above for that.

If you share a computer, be aware that the next person to open the form will see the saved details until they are cleared.

6. How long we keep it

Submissions are retained for 24 months after the market date they relate to, so we can settle fees, answer questions and plan future seasons. After that they are deleted. You can ask us to delete yours sooner.

7. Your choices

Write to our contact address and we will, within 30 days:

• send you a copy of everything we hold about you;
• correct anything that is wrong;
• delete your information and remove you from upcoming market dates;
• tell you who we have shared it with, if anyone.

Depending on where you live you may have these rights by law — for example under the California Consumer Privacy Act or the GDPR. We apply them to everyone regardless. We will not treat you differently for exercising them, though we cannot schedule you for a market date without the contact details needed to run it.

8. Acceptable use of this site

• Submit only your own business's information, and keep it accurate.
• One vendor per submission — do not book dates on someone else's behalf without telling us.
• Do not use automated tools to submit requests. The form is rate limited, and abusive traffic is blocked.
• Do not attempt to access data that is not yours, probe the site for weaknesses, or interfere with its operation.
• A submitted date is a request, not a booking. It is confirmed only when you receive an approval email, and your booth is held once the fee is paid.
• We may decline or remove any vendor from the calendar at our discretion.

9. Security

We take reasonable measures to protect your information, including database-enforced access rules, column-level restrictions on what the public site can read, encrypted transport and storage, a single administrator account, and rate limiting on the form. No system is perfectly secure; if a breach ever affects your information we will notify you at the email address you gave us, and any authority we are required to notify, without undue delay.

If you believe you have found a security problem with this site, please tell us at the address above rather than disclosing it publicly. We are grateful for the help.

10. Children

This site is for businesses applying to trade at the market and is not directed at children. We do not knowingly collect information from anyone under 16. If you believe a child has submitted information, contact us and we will remove it.

11. Changes to this policy

If we change this policy we will update the version number and date at the top of the page. The version you agreed to is recorded with your submission. Material changes affecting how we use existing information will be emailed to affected vendors.