Collective Crate Privacy Policy

1. Scope

This Privacy Policy applies to:

• Visitors to the Site;
• Customers who place or attempt to place orders;
• Vendors and vendor representatives using the Site to list and sell products.

This Policy does not apply to third‑party websites, services, or vendors’ off‑platform activities.

2. Information We Collect

We collect three broad categories of information:

2.1 Information You Provide Directly

Examples include:

• Account Information: Name, email, phone number, password or login methods, profile details.
• Vendor Information: Business name, entity type, address, tax IDs, payout/banking info, license info.
• Order Information: Products ordered, quantities, price, time, pickup/delivery instructions.
• Communications: Messages to us, support requests, survey responses, messages between Customers and Vendors via the Site.
• Preferences: Marketing preferences, notification settings.

2.2 Information Collected Automatically

• Usage Data: Pages viewed, time on page, clickstream, referrers, and usage metrics.
• Device/Technical Data: IP address, browser type, OS, device identifiers.
• Location Data: Approximate location from IP; precise location if you enable it.
• Cookies/Similar: Small files to remember preferences, secure sessions, and analyze Site usage.

2.3 Information from Third Parties

• Payment Processors (e.g., Stripe): Limited payment info like tokenized IDs, last four digits, payment status confirmation.
• Vendors or Customers: Order‑related information and communications.
• Analytics/Marketing Partners: Aggregate or de‑identified interaction data.
• Public Sources: Where permitted by law, we may supplement with public information.

3. How We Use Your Information

3.1 Providing and Improving the Service

• Create and manage your account;
• Enable Customers and Vendors to discover and transact;
• Process payments, payouts, and refunds;
• Operate, maintain, and improve performance, functionality, and security.

3.2 Communications

• Transactional messages: confirmations, receipts, pickup/delivery instructions, account alerts, security codes;
• Respond to inquiries and support requests;
• Promotional/marketing communications where permitted and per your preferences.

3.3 Safety, Security, and Fraud Prevention

• Detect, investigate, and prevent fraud, abuse, and security incidents;
• Verify identities (particularly for Vendors);
• Enforce our Terms of Use and Vendor Agreement.

3.4 Legal and Regulatory Compliance

• Comply with laws and regulations (e.g., tax, financial reporting, consumer protection);
• Respond to lawful requests from authorities;
• Maintain business and accounting records.

3.5 Research and Analytics

• Understand how users interact with the Site;
• Measure effectiveness of features and campaigns;
• Generate anonymized or aggregated data for internal purposes.

4. Legal Bases for Processing (EEA/UK)

• Contract: Provide the Service and fulfill obligations (e.g., process orders).
• Legitimate Interests: Improve and secure the Site, prevent fraud, communicate about our relationship.
• Consent: Certain cookies, marketing, or precise location uses where required by law.
• Legal Obligations: Comply with legal requirements (e.g., tax/reporting, lawful requests).

5. How We Share Your Information

5.1 With Vendors and Customers

• To fulfill orders, we share necessary details (e.g., name, contact, pickup location) with the relevant Vendor.
• Vendor profiles may show business names, descriptions, ratings/reviews.
• Vendors see relevant customer details for their orders.

5.2 With Service Providers

We use trusted third parties for payment processing (e.g., Stripe), hosting, communications, analytics, and support.

They may only use personal information to provide services to us and must protect it appropriately.

5.3 For Legal and Safety Reasons

We may disclose information to comply with law, protect rights/safety, or address fraud/security/technical issues.

5.4 Business Transfers

Information may be transferred in connection with a merger, acquisition, reorganization, or sale of assets, subject to safeguards and applicable law.

5.5 With Your Consent

We may share information with third parties when you explicitly consent.

6. Cookies and Tracking Technologies

6.1 What Are Cookies?

Cookies are small text files placed on your browser or device. We and partners may use cookies and similar technologies (pixels, local storage) to:

• Keep you signed in;
• Remember preferences and settings;
• Secure your session and help prevent fraud;
• Analyze traffic and usage patterns;
• Personalize content and, where permitted, marketing communications.

6.2 Your Choices

Most browsers let you delete, block, or warn before storing cookies. Disabling some cookies may impair Site features. Where required by law, we request consent for non‑essential cookies.

7. Data Retention

We retain personal information as long as necessary to provide the Service, comply with legal obligations, and resolve disputes/enforce agreements. When no longer needed, we delete or anonymize data per our policies and law.

8. Data Security

We use reasonable technical, organizational, and physical measures to protect personal information. No method is 100% secure. You are responsible for maintaining the confidentiality of your account credentials and activity under your account.

9. Your Rights and Choices

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, port, object, and withdraw consent. To exercise rights, contact us at [email protected] and provide information to help verify your identity.

EEA/UK users may also lodge a complaint with a supervisory authority.

10. Children’s Privacy

The Site is not intended for children under 13 (or the minimum equivalent age). We do not knowingly collect personal information from children under 13. If you believe we have collected such information, contact us at [email protected].

11. International Data Transfers

We are based in the United States. Personal information may be transferred to, stored in, and processed in the U.S. or other countries with different data protection laws. Where required, we implement appropriate safeguards (e.g., standard contractual clauses).

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will revise the Effective Date above and, where required, provide additional notice (e.g., email or in‑app notice). Continued use after changes take effect constitutes acceptance.

13. Contact Us