Privacy

Trove Grove is built and run by Jeremy Bray, a sole trader in Queensland, Australia, and handles personal information under the Australian Privacy Principles. This page says what we actually collect and where it goes. If you want a copy of your data, or want it deleted, email hello@heyjeremy.com.

If you sell here

• Your email address and display name, so you can sign in and buyers know who they're dealing with.
• The suburb or area you enter, which buyers see under your gem where it is listed in a trove. We don't ask for a street address.
• What you list: titles, descriptions, prices and photographs.
• Orders placed through your gem or trove, including the buyer's details, because you need them to post the parcel.

If you buy from a seller here

• Your name, email address and delivery address, so the seller can send the thing to you.
• Your phone number, only where the seller has chosen to ask for it.
• Anything you type into the checkout conversation, which becomes part of the order the seller reads.

The seller receives all of that, because they're the one posting your parcel. You don't need an account to buy.

Card details

We never see your card. Payment happens on Stripe's own checkout, and Stripe holds the card details. We store the reference Stripe gives us for the payment, and the amount, so an order can be matched to it.

Who else touches your data

• Stripe: payments and payouts.
• Cloudinary: stores and serves the photographs on every gem.
• Mailgentix: sends the emails, such as order confirmations and password resets.
• Railway: hosts the application and its database.
• Cloudflare: DNS.
• Google Fonts: serves the typefaces, so Google sees the address you connect from on every page. It sets no cookie here and it is not analytics.
• Google Analytics: tells us which pages are visited and where visitors came from, and only if you accept the cookie banner. Decline and it measures nothing.
• Progentick: a feedback button, which only invited reviewers can see. It captures a screenshot of the page when one of them reports a problem, and does nothing at all for anyone else.

These are suppliers doing a job for us, not an audience. We don't sell your data, and we don't hand it to anyone for advertising.

Cookies

One session cookie, so that signing in works and stays working. Google Analytics asks before it sets anything: a banner offers the choice, declining sticks, and the Cookie preferences link in the footer reopens it if you change your mind. There is no advertising cookie on this site. A seller who has connected their own Google Analytics to their storefront gets the same treatment on their pages: nothing is measured there until you accept.

How long we keep it

Listings and account details are kept while your account is open. Orders are kept afterwards, because both sides may need the record of a sale and tax law expects it. Ask us to delete your account and we'll remove what we're not required to keep.

Your rights

You can ask what we hold about you, ask for it to be corrected, or ask for it to be deleted. Email hello@heyjeremy.com and a person will read it. If you aren't satisfied with how we handle a complaint, you can take it to the Office of the Australian Information Commissioner.