Privacy

Gate + Gather is designed to hold real seller and customer information — and no more than that. This policy explains what personal information we handle when you open a Gate, buy from one, or simply browse the site, and how we look after it under New Zealand's Privacy Act 2020.

We are the "agency" for the purposes of the Privacy Act in respect of the information we control on the platform. Individual sellers are responsible for the personal information their customers share with them directly (for example, verbal pickup arrangements or off-platform messaging).

Seller information: name, email, phone number, business or Gate details, physical location and (where relevant) pickup address, payment-account information and verification status from our payment provider, order history, subscription and billing details, and any support correspondence.

Customer information: name, email, phone number where needed for pickup coordination, order details, pickup or delivery information, payment-related information handled by our payment provider, and any messages you send us.

Technical information: IP address, device and browser type, referring pages, timestamps, and product analytics events (page views, clicks) used to keep the platform working, secure and improving. We do not build advertising profiles.

We use the information above to open and run your Gate, process orders and payments, keep stock accurate across markets and channels, prevent fraud and abuse, send transactional email (order confirmations, receipts, password resets, subscription notices), respond to your questions, and meet our legal obligations. We rely on your consent, the performance of the contract you've entered into with us, our legitimate interests in operating a safe platform, and compliance with New Zealand law.

We share personal information only with the service providers we need to run Gate + Gather — currently Stripe (payments and subscription billing), Resend (transactional email), and our infrastructure providers (hosting, database, object storage). Each of these providers processes information on our instructions under their own terms. We do not sell personal information, and we do not share it for third-party advertising.

Where a legal request is properly served on us — a court order, a lawful request from the Privacy Commissioner, or a regulator acting under statutory authority — we may need to disclose information to meet that obligation.

Order and financial records are retained for the period required by New Zealand tax and consumer law (typically seven years). Account information is kept while your Gate is open and for a reasonable period afterwards so we can answer questions and meet regulatory requirements. You can ask us for a copy of the information we hold about you, ask us to correct it, or ask us to delete anything we're not required to keep — email us and we'll confirm your request within a reasonable time. If you're not happy with how we've handled a privacy issue, you can complain to the New Zealand Privacy Commissioner at privacy.org.nz.

We use a small number of first-party cookies and product-analytics events to keep you signed in and to understand how the platform is used. We do not use third-party advertising cookies. Personal information in transit is encrypted with TLS; passwords are hashed; access to production data is restricted to Gate + Gather staff who need it to operate the service.