Privacy Policy

Local Harvest is an online marketplace that connects customers with independent UK farm shops. For data protection questions, contact us at hello@local-harvests.co.uk.

Depending on how you use the site, we may process:

• Account details — name, email address, and a securely hashed password when you register as a customer or farmer.
• Order information — contact name, email, phone number, pickup or delivery preferences, delivery address (if applicable), order notes, and what you bought.
• Farm shop listings — farm name, location, descriptions, product details, prices, and photos you upload as a farmer.
• Payment references — Stripe transaction and subscription IDs. We do not store your full card number.
• Session data — a cookie named local-harvest-session so you can stay signed in.

We use personal data to:

• Run your account and keep you signed in.
• Process orders and show order history.
• Pass order contact details to the relevant farm shop so they can fulfil your order.
• Send service emails (for example order confirmations) via our email provider.
• Manage farmer subscriptions, free trials, and platform fees.
• Keep the platform secure and fix problems.

Our legal bases include performing our contract with you, legitimate interests in running a safe marketplace, and — where required — your consent.

We share data only where needed to provide the service:

• Farm shops — when you place an order, the selling farmer receives your name, email, phone, and fulfilment details so they can prepare and hand over your order.
• Stripe— processes customer checkout payments and farmer subscription billing. Stripe's privacy policy applies to payment data they handle.
• Resend — sends transactional emails on our behalf.
• Railway — hosts our application and database.

We do not sell your personal data.

We keep account and order data for as long as your account is active and for a reasonable period afterwards for support, accounting, and legal obligations. You can ask us to delete your account — see Your rights below.

Under UK data protection law you can:

• Ask for a copy of your personal data.
• Ask us to correct inaccurate data.
• Ask us to delete your data in certain circumstances.
• Object to or restrict some processing.
• Request data portability where it applies.

Email hello@local-harvests.co.uk to exercise these rights. You can also complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

We use industry-standard measures including HTTPS, hashed passwords, and access controls. No online service is completely risk-free; please use a strong, unique password.

We may update this policy from time to time. The “Last updated” date at the top will change when we do. Significant changes may also be highlighted on the site.

See also our Terms of Service.