Privacy Policy

Last updated: 16 June 2026

This policy explains what information The Farm Stall ("we", "us", "our") collects when you use thefarmstall.co.uk (the "Site"), how we use it, and your rights over it. If you have any questions, contact us at hello@thefarmstall.co.uk.

Information we collect

Visitors (no account)

• Analytics data — we use Google Analytics 4 to collect anonymised information about how pages are used (pages visited, approximate location, device type, referrer). This does not identify you personally. You can opt out via your browser's cookie settings or a browser extension such as the Google Analytics Opt-out Add-on.
• Technical logs — standard server logs (IP address, browser type, pages visited) collected automatically for security and troubleshooting.

Sellers (registered accounts)

• Account information — name, email address and password (passwords are hashed and never stored in plain text; authentication is handled by Supabase).
• Storefront information — business name, tagline, description, contact details, address and map coordinates, opening hours, stall types, payment options, social media links and any photos you upload.
• Billing information — if you subscribe to a paid plan, Stripe collects and stores your payment card details. We only receive a Stripe customer ID and subscription status — we never see or store your card number.
• Stripe Connect information — if you connect a Stripe Express account to accept payments, Stripe collects your identity and bank account details directly as part of their Know Your Customer (KYC) process. We store only your Stripe Connect account ID and account status.

Buyers making QR payments

• Payment card details entered on a QR payment page are processed directly by Stripe and are never transmitted to or stored by us. We may store a payment intent ID and the outcome of a transaction (success or failure) for logging purposes.

"Submit a find" contributors

• If you submit information about a business, we collect the details you provide about that business and, optionally, your name and contact details.

How we use your information

• To operate and display the directory, producer storefronts and map
• To create and manage seller accounts
• To moderate new listings before they go live, including automated AI-assisted content review
• To process subscription payments and manage your billing relationship via Stripe
• To enable sellers to accept card payments from buyers via Stripe Connect
• To send transactional emails — account confirmation, password reset and billing notifications
• To respond to enquiries and "Submit a find" entries
• To keep the Site secure and working properly
• To understand how the Site is used, via anonymised Google Analytics data

We do not sell your personal information to third parties and we do not use it for unsolicited marketing.

Third-party services we use

We use the following third-party services, each of which processes data on our behalf or under their own terms:

• Supabase — hosts our database, handles account sign-up and login, and stores uploaded images. Data is stored within the EU. Supabase Privacy Policy.
• Stripe — processes subscription payments (Lite/Grow plans) and, for Lite and Grow sellers who opt in, manages the Stripe Connect Express account used to collect buyer payments. Stripe is the data controller for payment card information. Stripe Privacy Policy.
• Google Analytics 4 — collects anonymised usage data (pages viewed, session duration, approximate location, device type). Data is processed by Google under their terms. You can opt out via your browser settings or the Google Analytics Opt-out Add-on.
• Anthropic (Claude AI) — new seller profiles and listings are submitted to Anthropic's Claude API for automated content moderation (checking for accuracy, appropriateness and policy compliance). Only the text content of profiles and listings is shared — no personal contact details, payment information or private data is included in these requests. Anthropic Privacy Policy.
• Hostinger — our web hosting provider; runs the server that delivers the Site. Hostinger Privacy Policy.

Information you add to a public storefront (business name, location, opening hours, photos, etc.) is visible to anyone browsing the Site, as the purpose of a listing is to be found by buyers.

When you click an external website or social media link on a seller's profile, you leave our Site and enter a third-party platform. That platform's own privacy policy applies. We have no control over and take no responsibility for those third parties' data practices.

Cookies

We use the following types of cookies:

• Essential cookies — used to keep you signed in to your account (set by Supabase Auth) and to remember that you have accepted our cookie notice. These are strictly necessary and cannot be disabled without breaking the Site for signed-in users.
• Analytics cookies — set by Google Analytics 4 to collect anonymised usage data. These are only set if you accept analytics cookies via our cookie banner.

You can control or delete cookies through your browser settings, but disabling essential cookies will prevent you from staying signed in.

How long we keep information

• Account and storefront data — kept for as long as your account is active. If you delete your account, your data is removed promptly, except where we are required to retain it for legal or financial compliance purposes.
• Billing records — Stripe retains transaction records in accordance with their own retention policy and applicable financial regulations.
• Analytics data — Google Analytics data is retained for 14 months (the default GA4 retention period) before being automatically deleted.
• "Submit a find" entries — kept while we review and action them, then deleted or converted into a listing.

Your rights

Under UK GDPR and the Data Protection Act 2018, you have the right to:

• Access a copy of your personal data
• Correct inaccurate data
• Delete your data ("right to be forgotten") — you can delete your account directly from your account settings page
• Restrict or object to certain processing
• Receive your data in a portable format

To exercise any of these rights, email hello@thefarmstall.co.uk. You also have the right to complain to the Information Commissioner's Office (ICO) if you have concerns about how we handle your data.

Children

The Site is intended for adults running or looking for farm shops, stalls and similar businesses. It is not directed at children under 13, and we do not knowingly collect personal data from children.

Changes to this policy

We may update this policy as the Site develops. We will update the "last updated" date above when we do. Continued use of the Site after changes means you accept the updated policy.

Contact us

Questions about this policy or how we handle your data? Email hello@thefarmstall.co.uk.