Privacy Policy

Your Account Information

When you sign up as a seller, we collect your email address and a password, which we store only in a scrambled form that cannot be turned back into it. You can add a business name, a shop address, a description and pictures for your shop, and the bank account your buyers pay into. This is so you can log in, so we can email you sign-in codes and password reset links, so your buyers know who their emails are coming from, and so they know how to pay you. If you subscribe, Stripe handles the payment and your card details — we never see or store your card number.

Your Shop on the Marketplace

While your shop is open and your subscription is active, the things you have on offer appear on the Little Stall marketplace at littlestall.nz/marketplace, with your shop name and, if you add them, your region and where you courier to. It shows nothing your shop page does not already show: no address, contact details or payment details, and no stock counts if you have hidden them. It is on by default, and you can untick "List my shop on the Little Stall marketplace" on your Shop page at any time. We count how many visits reach your shop from the marketplace so we can show you; we keep only the count, nothing about the person visiting.

Card Payments and Identity Checks

If you switch on card payments, you connect your own Stripe account. Stripe collects and holds the identity and bank details it asks for; we keep only your Stripe account's reference and whether it can take payments. For each card payment a buyer makes, we keep the amount, the order it was for and the buyer's name, so you can always tell which payment was which. If you verify your identity, Stripe checks your photo ID and keeps the documents; we keep only the outcome, Stripe's reason if the check did not pass, and when it happened.

Your Buyers' Data

When you log an order, or a buyer orders from your shop, we store the buyer's name, email address, phone number, delivery address, any note they add, what they ordered and whether it is paid. Each buyer is also kept in your address book (name, email, phone and delivery address) so you can find them for their next order; you can edit or remove an entry there at any time. We keep a record of each email sent to a buyer: which email, the address it went to, and whether it was delivered to our email provider.

You own this data. We are strictly the processors. We store it so you can see your queue and fulfill your orders. We use the buyer email addresses to automatically send order confirmations and shipping updates on your behalf. We do not use your buyers' data for our own marketing, and we will never sell or rent their details to anyone else.

Custom Orders

Made-to-order and custom pieces often need personal details, such as a name to engrave or a child’s size. Anything you or your buyer write in an order’s notes is stored with that order, like the rest of it. Only ask for what you need to make the piece, and you can edit the notes once the order is done.

Cookies

We use one cookie, and it exists to keep you signed in to your account. There is no advertising network, no analytics pixel and no third-party tracking on this site or in the app.

How Sellers Find Us

For up to 30 days, your browser stores a small set of categories describing how you found Little Stall, such as Google search, a maker guide or a shop footer. When you follow a signup link, those categories travel to the app. If you create an account, we keep them with your signup and record when you first open a shop, create an order and pay for a subscription. This helps us understand which pages bring in active sellers. We do not store your search terms, full referring address, buyer links or browsing history in this report. Clearing your browser storage removes the categories before signup; account records remain until the account is deleted.

Technical Information

Our servers see the internet address each visit comes from. We use it to limit repeated sign-in attempts and orders from one place, holding it in memory only while that limit applies, and it can appear in our server logs, for example beside a shop order that looks automated.

Services We Use

Little Stall runs on Railway, which hosts our servers and database. We send email through Brevo, and use Stripe for subscriptions, card payments and identity checks. Each of them handles only what its part of the service needs.

Security and Retention

Everything between your browser and Little Stall travels encrypted. Your buyers see their order through a private link that is difficult to guess; anyone who has the link can see that order, so it is best kept to themselves.

If you cancel your account, we hold onto your data for a grace period so you don't lose your history if you decide to come back. If you want your account and all associated buyer data deleted immediately, just ask us and we will wipe it from our active systems.

Changes to this policy

If we change this policy, we'll update the date at the top of this page. If the changes are significant, we'll email you to let you know.

Contact us

We follow New Zealand's Privacy Act 2020. If you have any questions about your privacy, or want a copy of what we hold about you, you can reach us at [email protected].