Privacy Policy

Crafted Market operates an online marketplace connecting Western Australian handmade goods sellers (“Sellers”) with buyers (“Buyers”). References to “we”, “us” or “our” refer to Crafted Market.

You can contact us at: lachlan@craftedmarket.com.au

Account information: When you create an account, we collect your name, email address, and password (stored as a secure hash).

Seller information: If you open a shop, we also collect your shop name, description, location, product listings, and Stripe Connect account details (a reference ID only — your financial details are held by Stripe, not us).

Transaction data: When a purchase is made, we store the order details, items purchased, and amounts paid. Payment processing is handled entirely by Stripe.

Usage data: We may collect anonymised information about how you use the platform (pages visited, browser type, device) to improve our service.

Cookies: We use functional and analytical cookies. See our Cookie Policy for details.

When a buyer views a product page or a shop page, we record an anonymous view event containing only the product or shop identifier and a timestamp. We do not record IP addresses, device identifiers, or any personal information in connection with these events.

View data is not linked to individual visitors, does not use cookies, and is never shared with third parties. It is used solely to show sellers how their listings are performing and to help us improve the marketplace.

We use your information to:

• Create and manage your account
• Process orders and facilitate payments through Stripe
• Send order confirmations and service-related emails
• Provide seller dashboard features and earnings reports
• Improve the platform through anonymised usage analytics
• Comply with our legal obligations under Australian law

We will not sell, rent, or share your personal information with third parties for marketing purposes.

All payments on Crafted Market are processed by Stripe. When you pay for an order or connect a Stripe account as a seller, you are subject to Stripe's Privacy Policy.

We never store credit card numbers or full bank account details on our servers.

Your data is stored securely using Supabase, hosted on infrastructure located in Australia or with appropriate data sovereignty protections. We implement industry-standard security measures including encryption at rest and in transit, access controls, and regular security reviews.

Despite our precautions, no method of internet transmission is 100% secure. We cannot guarantee absolute security but will notify you in the event of a data breach where required by law.

Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and associated data
• Opt out of non-essential communications

To exercise any of these rights, contact us at lachlan@craftedmarket.com.au. We will respond within 30 days.

We use the following third-party services that may process your data:

• Supabase — database and authentication
• Stripe — payment processing and seller payouts
• Netlify — website hosting and delivery

Each of these services operates under their own privacy policies and security standards.

Crafted Market is not directed at children under 16 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email. Continued use of the platform after changes constitutes acceptance of the updated policy.

If you have questions about this policy or wish to make a complaint, contact us at lachlan@craftedmarket.com.au.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.