Privacy Policy

This Privacy Policy explains how [LEGAL ENTITY NAME] ("Legacy & Land," "we," "us") collects, uses, and shares information when you use [DOMAIN]. By using the platform, you agree to this Policy.

Information you provide:

• Account information - name, email, password, and role (shopper, vendor, restaurant).
• Vendor application information - business name, county, business registration details, license information, and uploaded verification documents (which may include an EIN or business registration number), and portfolio photos for makers.
• Order information - items ordered, pickup selections, and communications with Vendors.
• Waitlist information - name, email, and interest details you submit before launch.
• Payment information - processed by Stripe; we do not store your full card or bank details. Stripe's handling is governed by Stripe's own privacy policy.

Information collected automatically:

Device, browser, IP address, and usage data, collected through cookies and similar technologies to operate and improve the platform.

We use information to: create and manage accounts; review Vendor applications and verify business eligibility; operate the marketplace and process orders; communicate with you about your account, orders, and (with your consent where required) marketing; maintain safety and security; and comply with legal obligations.

• With Vendors - when you order, the relevant Vendor receives the information needed to fulfill your order (e.g., name, order details, pickup selection).
• With Buyers - a Vendor's public storefront information is visible to shoppers.
• With service providers - such as our hosting, database, payment (Stripe), and email providers, who process data on our behalf.
• For legal reasons - to comply with law, enforce our Terms, or protect rights and safety.

We do not sell your personal information.

Vendor verification documents (registration, licenses, insurance) are stored privately and are accessible only to Legacy & Land administrators - never publicly displayed and never shared with other users.

We use cookies to keep you logged in, remember preferences, and understand usage. You can control cookies through your browser settings; some features may not work without them.

[ATTORNEY/DEV: add a consent banner if using analytics or non-essential cookies.]

We keep information as long as your account is active or as needed to provide the platform, resolve disputes, and meet legal obligations, after which we delete or anonymize it.

Depending on where you live, you may have rights to access, correct, delete, or restrict use of your personal information, and to opt out of marketing. To exercise these, contact [PRIVACY EMAIL].

California residents (CCPA/CPRA): You have rights to know, delete, correct, and opt out of "sharing" of personal information, and not to be discriminated against for exercising them. We do not sell personal information.

[ATTORNEY: confirm CCPA applicability thresholds and add required disclosures if/when they apply.]

The platform is not directed to children under 18, and we do not knowingly collect their information.

We use reasonable safeguards to protect information but no system is perfectly secure. Verification documents are stored in access-restricted storage.

We may update this Policy; we will post the new date and, for material changes, provide notice.

[LEGAL ENTITY NAME] · [BUSINESS ADDRESS] · [PRIVACY EMAIL]