Privacy policy

What we collect

When you create an account: your name and email address.

When you make a purchase: your shipping address and payment method. Payment details are processed directly by Stripe — we never see or store your card number.

When you sell with us: your name, email, and bank account details for payouts (held securely by Stripe).

When you browse: basic usage data such as pages visited and items viewed. This data is anonymised and used only to improve the platform.

How we use it

We use your information to fulfill and communicate about orders, process payouts to sellers, send transactional emails (order confirmations, shipment notifications, submission updates), and improve the platform. We do not sell your data to third parties. We do not use your data for advertising.

Third-party services

We use the following third-party services to operate the platform:

Stripe — payment processing and seller payouts. Your payment and payout information is subject to Stripe's privacy policy (stripe.com/privacy).

Supabase — our database and authentication provider. Your account data is stored on Supabase's infrastructure.

Vercel — our hosting provider. Web traffic passes through Vercel's network.

Resend — transactional email delivery. Email addresses used for transactional emails are processed by Resend.

Cookies

We use essential cookies only — for authentication sessions and to keep you logged in. We do not use advertising, tracking, or analytics cookies. You can disable cookies in your browser settings, but doing so may prevent you from logging in.

Data retention

Order records are retained for seven years for accounting and tax compliance. Account data is retained until you request deletion. You may request deletion at any time by emailing hello@slowpokeshop.com — we will delete or anonymise your data within 30 days, subject to legal retention obligations.

Your rights

You have the right to access the personal data we hold about you, correct inaccurate information, request deletion of your data, and withdraw consent where processing is based on consent. To exercise any of these rights, email hello@slowpokeshop.com. We will respond within 30 days.

Security

We use industry-standard encryption and security practices to protect your data. All connections to slowpokeshop.com are encrypted via HTTPS. Passwords are handled by Supabase Auth and never stored in plaintext.

Changes to this policy

We may update this policy from time to time. Material changes will be communicated by email. The effective date at the top of this page reflects the most recent revision.

Contact

Questions about this privacy policy? Email hello@slowpokeshop.com.