Privacy Policy

1. Who we are

Your Garden to Your Plate is a community-run local-food directory for the Mornington Peninsula, Victoria, Australia. This policy explains how we handle your information in line with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).

2. Information we collect

When you browse:

• Pages you visit, general location (city/region), device and browser type, and referring site — via Google Analytics.

When you create an account:

• Email address and a hashed password (we never see your password in plain text).
• If you sign in with Google: your name, email and profile picture as provided by Google.
• Profile details you choose to add: display name, suburb or address, interests, and the roles you identify with (e.g. food lover, producer, community group, buyer).
• Whether you opted in to receive updates from us.

When you submit a form: contact messages, feedback, listing suggestions and claims (including any contact details or context you provide).

Local storage on your device: your login session token and, for QR check-ins, a record of visits used to show your local-food impact.

3. How we use your information

• To create and manage your account and keep you signed in.
• To send transactional emails (account confirmation, password reset, form receipts) from notify.gardenplate.app.
• To send occasional updates about the site — only if you opted in. You can unsubscribe any time via the link in those emails.
• To respond to feedback, suggestions, listing claims and contact messages.
• To improve the site and understand which features are useful.

We do not sell your personal information, and we do not share it for third-party marketing.

4. Who we share it with

We use trusted service providers to run the site:

• Lovable Cloud — hosting, authentication and database.
• Google — optional sign-in, and Analytics.
• Resend — outbound transactional email delivery.

These providers may store data outside Australia. We only share what's needed for them to deliver their service.

5. Cookies and local storage

Google Analytics sets cookies to distinguish unique users and sessions. If you have an account, we store your login session token in your browser's local storage so you stay signed in. QR check-in history is also kept locally. You can clear these any time via your browser settings.

6. Your rights

You can:

• Access and update your profile any time from your account page.
• Unsubscribe from updates via the link in any update email.
• Request a copy of the personal information we hold about you.
• Request correction or deletion of your account and associated profile data.

Email us at the address below to make a request.

7. Data retention

We keep account and profile data for as long as your account is active. If you delete your account, we remove your profile promptly. Form submissions (feedback, suggestions, claims, contact messages) may be retained for reference and moderation purposes.

8. Third-party links

This site links to external producer websites. We're not responsible for the privacy practices or content of those sites.

9. Changes to this policy

We may update this policy occasionally. Material changes will be highlighted on the site. Continued use after changes means you accept the updated policy.

10. Contact

Questions or privacy requests? Email hello@gardenplate.app.