How we handle your data.

Account data: your staff ID, name, branch, email address and phone number. Email is used to send one-time sign-in passcodes and order updates.

Order data: items you order during a seasonal cycle, quantities, delivery location and the receipts generated for your orders.

Device data: your browser stores small local items (localStorage) for your theme preference, shopping cart and sign-in session. Standard web server logs record IP address, time and pages requested for security and abuse prevention.

To authenticate you (staff ID plus a one-time email passcode), to process and deliver your seasonal orders, to show your order history and receipts, and to respond to support requests you send us.

To let cooperative staff run the operation: administrators approve and deliver orders, and your branch representative sees the orders assigned to your branch so they can fulfil them.

To keep the platform safe: rate limiting, signed session cookies and audit logging of administrative actions.

Inside the cooperative: administrators and your branch representative see the order details needed to fulfil your order. Vendors see only the orders for their own products (name and fulfilment details, not your account credentials).

Infrastructure: the platform is hosted on Supabase (database, authentication and realtime), which processes data on our behalf under its own security standards. We do not sell, rent or trade your personal data with advertisers or third parties.

Order and account records are retained for as long as the cooperative needs them for accounting, audits and member service. You can ask us to correct your details or answer any question about your data at any time.

Sessions expire automatically and you can sign out at any time; clearing your browser storage removes the locally stored theme, cart and session items.