Privacy Policy

1. Overview

GradedTown ("we", "our", "us") operates the marketplace at gradedtown.nz. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the New Zealand Privacy Act 2020.

2. Information We Collect

We collect the following types of information:

• Account information: Name, email address, profile picture (via Google OAuth)
• Shipping addresses: NZ addresses you provide for order delivery
• Identity verification: Government-issued ID for seller verification (processed by Stripe)
• Payment information: Processed directly by Stripe — we do not store card numbers
• Usage data: Pages visited, search queries, and interactions with the marketplace
• Communication data: Messages sent through the Platform, reviews, and support requests

3. How We Use Your Information

We use your information to:

• Provide and operate the marketplace
• Process transactions and payouts
• Verify seller identity and prevent fraud
• Send order notifications and updates
• Resolve disputes between buyers and sellers
• Improve our services and user experience
• Comply with legal obligations

4. Information Sharing

We share your information with:

• Stripe: For payment processing and identity verification
• Supabase: For secure data storage and authentication
• Resend: For transactional email delivery
• Vercel: For website hosting
• Other users: Buyers and sellers see limited information necessary for transactions (display name, city for shipping, reviews)

We do not sell your personal information to third parties.

5. Data Storage & Security

Your data is stored securely using Supabase (hosted in Australia/NZ region) with row-level security policies. Payment data is handled entirely by Stripe and never touches our servers. We use HTTPS encryption for all data in transit.

6. Your Rights

Under the New Zealand Privacy Act 2020, you have the right to:

• Access your personal information
• Request correction of inaccurate information
• Request deletion of your account and data
• Know how your information is being used

To exercise these rights, contact us at privacy@gradedtown.nz.

7. Cookies

We use essential cookies for authentication and session management. We do not use third-party tracking cookies or advertising cookies.

8. Email Communications

We send transactional emails related to your orders, bids, and account activity. You can manage your email preferences in your notification settings. Note that certain emails (order confirmations, security alerts) cannot be disabled as they are essential to the service.

9. Data Retention

We retain your account data for as long as your account is active. Transaction records are retained for 7 years for tax and legal compliance. You may request account deletion at any time — we will delete your personal data while retaining anonymised transaction records as required by law.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or platform notification. Continued use of the Platform after changes constitutes acceptance.

11. Contact

For privacy-related enquiries, contact our Privacy Officer at privacy@gradedtown.nz.

You may also lodge a complaint with the Office of the Privacy Commissioner if you believe your privacy rights have been breached.