HARVEST HUB GARDEN PRIVACY POLICY

Last Updated: May 24, 2025

1. INTRODUCTION

Welcome to Harvest Hub Garden ("Harvest Hub," "we," "us," or "our"). We respect your privacy and are committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our multivendor marketplace platform, website, mobile application, and related services (collectively, the "Services").

Harvest Hub Garden connects local gardeners, farmers, cottage food producers, and consumers in a community-focused marketplace. Due to the nature of our Services, we collect and process various types of information to facilitate transactions, ensure compliance with food safety regulations, provide garden management tools specific to your location, and deliver a seamless user experience.

If you do not agree with this Privacy Policy, please do not use our Services.

2. INFORMATION WE COLLECT

2.1 Information You Provide Directly to Us

Account Registration Information:

• Full name, email address, phone number, and password
• Physical address, city, state, and zip code
• Profile pictures and biographical information
• Account preferences and communication settings

Seller-Specific Information:

• Business or farm name and description
• Business type (cottage food producer, farmer, gardener, etc.)
• Business licenses, permits, and certifications (e.g., cottage food registration, organic certification)
• Tax identification information and business structure details
• Banking and payment information for receiving payments
• Insurance information (if applicable)

Product and Service Information:

• Product listings, descriptions, pricing, and availability
• High-quality product images and videos
• Detailed ingredient lists and allergen information
• Growing practices, certifications, and farming methods
• Garden location information for local marketing
• Seasonal availability and harvest schedules

Transaction and Order Information:

• Purchase and sales history
• Payment method details and billing information
• Shipping, pickup, or delivery preferences and addresses
• Order fulfillment and delivery confirmations
• Customer reviews, ratings, and feedback

Communications and Support:

• Messages between buyers and sellers through our platform
• Customer service inquiries and support tickets
• Feedback, survey responses, and user testimonials
• Comments and posts on our community forums or educational content

Garden Management Data:

• Garden size, type, and layout information
• Planting schedules and crop rotation plans
• Growing goals and experience level
• Local growing conditions and preferences
• Garden photos and progress tracking

3. HOW WE USE YOUR INFORMATION

3.1 Provide and Improve Our Services

Core Platform Operations:

• Process and facilitate transactions between buyers and sellers
• Verify seller credentials and compliance with applicable food safety regulations
• Enable location-based matching of buyers with local sellers and products
• Provide personalized product recommendations and search results
• Deliver county and zip code-specific garden management tools and growing advice
• Process payments securely and distribute funds to sellers
• Facilitate communication between platform users

Service Enhancement and Development:

• Analyze usage patterns to optimize platform performance and user experience
• Develop new features based on user needs and feedback
• Conduct research to improve our algorithms and recommendation systems
• Test new functionality and user interface improvements
• Monitor platform security and prevent fraudulent activities

6. DATA RETENTION AND SECURITY

6.1 How Long We Keep Your Information

We retain your personal information for as long as necessary to:

• Active Accounts: While your account remains active and for reasonable periods thereafter
• Transaction Records: As required for tax reporting, legal compliance, and dispute resolution (typically 7 years)
• Communication Records: Customer service interactions retained for 3 years for quality and training purposes
• Marketing Data: Until you opt out or for 3 years after your last interaction with our Services
• Legal Compliance: As required by applicable food safety, agricultural, and business regulations

6.2 Data Security Measures

We implement industry-standard security measures to protect your information:

Technical Safeguards:

• End-to-end encryption for sensitive data transmission
• Secure socket layer (SSL) encryption for all data transfers
• Regular security audits and penetration testing
• Multi-factor authentication for account access
• Automated monitoring for suspicious activities

Administrative Safeguards:

• Employee training on data protection and privacy practices
• Limited access to personal information on a need-to-know basis
• Background checks for personnel with access to sensitive data
• Regular review and updating of security policies and procedures

Physical Safeguards:

• Secure data centers with restricted access controls
• Environmental controls to protect against equipment failure
• Redundant backup systems to prevent data loss
• Secure disposal of hardware containing personal information

6.3 Data Breach Response

In the event of a data security incident:

Technical Safeguards:

• We will investigate and contain the breach promptly
• Affected users will be notified within 72 hours when required by law
• We will provide clear information about what happened and steps we're taking
• Regulatory authorities will be notified as required by applicable laws
• We will take steps to prevent similar incidents in the future

7. CHILDREN'S PRIVACY AND FAMILY FEATURES

7.1 Children Under 13 (COPPA Compliance)

Harvest Hub Garden does not knowingly collect personal information from children under 13 years of age without verifiable parental consent. Our Services are designed for users 18 years and older.

If we discover we have collected information from a child under 13:

• We will delete the information immediately
• We will not use the information for any purpose
• We will not share the information with third parties
• Parents will be notified if we become aware of such collection

Educational Content: While our platform includes educational gardening content that may be of interest to families, parents are responsible for supervising their children's use of our Services.

7.2 Teens (Ages 13-17)

For users between 13 and 17 years old:

• Parental consent may be required in certain states
• We limit the collection and use of personal information from teens
• Marketing communications require additional consent in some jurisdictions
• Enhanced privacy protections apply as required by state laws

7.3 Family and Educational Use

School and Educational Programs:

• Educators using our platform for educational purposes must comply with FERPA and other applicable student privacy laws
• Special terms may apply for classroom or educational institutional use
• Student data is protected according to applicable educational privacy regulations

Parental Controls:

• Parents can contact us to review their child's information
• Parents may request deletion of their child's account and data
• We provide tools for parents to monitor and control their teen's account activity

8. INTERNATIONAL DATA TRANSFERS AND GLOBAL PRIVACY

8.1 Cross-Border Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have different data protection laws than your home country.

Safeguards for International Transfers:

• We use appropriate legal frameworks for international data transfers
• Contractual protections ensure equivalent privacy standards
• We limit transfers to countries with adequate privacy protections
• Additional safeguards apply for transfers to countries without adequacy decisions

8.2 International User Rights

European Union (GDPR) Rights:

• Right to access, rectify, erase, and restrict processing of personal data
• Right to data portability and to object to processing
• Right to withdraw consent at any time
• Right to lodge a complaint with supervisory authorities

Other International Privacy Laws:

• Canadian users: Rights under PIPEDA and provincial privacy laws
• Users in other countries: Rights as provided by applicable local privacy laws

8.3 Legal Basis for Processing (EU Users)

For users in the European Union, our legal basis for processing includes:

• Contractual Necessity: To provide our Services and fulfill our obligations to you
• Legitimate Interests: To improve our Services, prevent fraud, and ensure security
• Legal Compliance: To comply with applicable laws and regulations
• Consent: For marketing communications and optional features (which you may withdraw)

9. COOKIES AND TRACKING TECHNOLOGIES

9.1 Types of Cookies We Use

Essential Cookies:

• Required for basic platform functionality
• User authentication and account security
• Shopping cart and checkout processes
• Cannot be disabled without affecting platform functionality

Performance and Analytics Cookies:

• Monitor platform performance and user experience
• Understand how users interact with our Services
• Identify areas for improvement and optimization
• Help us detect and fix technical issues

Preference and Personalization Cookies:

• Remember your settings and preferences
• Personalize content and product recommendations
• Maintain your language and location preferences
• Enhance your overall user experience

Marketing and Advertising Cookies (with consent):

• Deliver relevant advertisements on our platform and other websites
• Measure the effectiveness of our marketing campaigns
• Provide personalized promotions and offers
• Support retargeting and audience segmentation

9.2 Managing Cookies

Cookie Consent:

• We obtain your consent before placing non-essential cookies
• You can change your cookie preferences at any time through our cookie consent banner
• Cookie settings are accessible through your account dashboard

Browser Controls:

• Most browsers allow you to view, manage, and delete cookies
• You can set your browser to refuse cookies or alert you when cookies are being sent
• Private or incognito browsing modes limit cookie storage

Third-Party Tracking:

• Some cookies are placed by third-party services we use
• You can opt out of third-party tracking through industry opt-out tools
• We do not respond to "Do Not Track" browser signals, but we respect other privacy choices

10. CONTACT US AND PRIVACY INQUIRIES

10.1 Privacy Team Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Primary Contact:

• Email: privacy@harvesthub.garden
• Response Time: We respond to privacy inquiries within 2 business days
• Mailing Address: Harvest Hub Garden - Privacy Team
  [Your Business Address]
  [City, State ZIP Code]

Customer Support:

• Email: support@harvesthub.garden
• Phone: [Your Business Phone Number]
• Hours: Monday-Friday 8AM-8PM EST, Saturday-Sunday 9AM-5PM EST

10.2 Privacy Rights Requests

To Exercise Your Privacy Rights:

1. Online: Log into your account and visit the Privacy Rights section
2. Email: Send a detailed request to privacy@harvesthub.garden
3. Form: Complete our online Privacy Rights Request Form
4. Phone: Call our customer support line during business hours

Required Information for Requests:

• Your full name and account email address
• Specific right you wish to exercise (access, deletion, correction, etc.)
• Detailed description of your request
• Verification information to confirm your identity

10.3 Complaints and Concerns

Internal Complaint Process:

• Contact our Privacy Team with your concern
• We will investigate and respond within 30 days
• Escalation to management is available if needed

External Authorities:

• California Residents: California Attorney General or California Privacy Protection Agency
• EU Residents: Your local data protection authority
• Other Jurisdictions: Relevant privacy regulatory authorities in your region

11. CHANGES TO THIS PRIVACY POLICY

11.1 Policy Updates

We may update this Privacy Policy from time to time to reflect:

• Changes in our business practices or Services
• New legal requirements or regulatory guidance
• Technological developments affecting privacy
• User feedback and industry best practices

11.2 Notification of Changes

Material Changes:

For significant changes that affect your privacy rights, we will:

• Email you at your registered email address at least 30 days before the changes take effect
• Display a prominent notice on our platform homepage
• Provide a clear summary of what has changed and how it affects you
• Allow you to review the updated policy before it becomes effective

Minor Changes:

For minor updates (such as clarifications or formatting improvements):

• We will update the "Last Updated" date at the top of this policy
• Changes will be posted on our website and accessible through your account
• Continued use of our Services constitutes acceptance of minor changes

11.3 Your Options When We Update Our Policy

If you disagree with policy changes:

• You may contact us to discuss your concerns
• You can adjust your privacy settings to limit data collection
• You may close your account before the changes take effect
• We will provide options to opt out of new data uses where legally required

Policy Archive: Previous versions of our Privacy Policy are available upon request for your reference.

This Privacy Policy was last updated on May 24, 2025, and is effective immediately for new users and 30 days after posting for existing users.

By continuing to use Harvest Hub Garden after the effective date, you acknowledge that you have read, understood, and agree to be bound by this updated Privacy Policy.

12. STATE-SPECIFIC PRIVACY INFORMATION

12.1 California Residents

Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents have specific rights regarding their personal information:

• Right to Know: You may request information about the categories of personal information we collect, specific pieces of personal information we have collected, categories of sources from which information is collected, business purposes for collecting information, and categories of third parties with whom we share information.
• Right to Delete: You can request deletion of personal information we have collected, subject to certain exceptions.
• Right to Correct: You can request correction of inaccurate personal information.
• Right to Opt-Out of Sales and Sharing: While Harvest Hub does not "sell" personal information as traditionally understood, certain data sharing activities might be considered a "sale" under the CCPA/CPRA. You have the right to opt-out of such sharing.
• Shine the Light: California residents may request information about how we share certain categories of personal information with third parties for their direct marketing purposes.

To exercise these rights, please contact us using the information provided in Section 10.

12.2 Virginia, Colorado, Connecticut, and Utah Residents

Residents of Virginia (Consumer Data Protection Act), Colorado (Colorado Privacy Act), Connecticut (Connecticut Data Privacy Act), and Utah (Utah Consumer Privacy Act) have similar rights to access, delete, correct, and opt out of certain processing of their personal information. To exercise these rights, please contact us using the information provided in Section 10.

13. SUPPLEMENTAL TERMS FOR MARKETPLACE SELLERS

Sellers on our platform are subject to additional privacy requirements:

• Regulatory Compliance: Sellers must comply with applicable food safety regulations and privacy laws when handling customer information.
• Information Handling: Sellers may only use buyer information for fulfilling orders and must not use it for marketing purposes without explicit consent.
• Data Security: Sellers must implement appropriate measures to protect buyer information they receive.
• Record Retention: Sellers should retain order information as required by applicable cottage food and food safety regulations.

By using our services as a seller, you agree to handle personal information in accordance with these supplemental terms and all applicable laws.

14. SUPPLEMENTAL TERMS FOR AGRICULTURAL INFORMATION

Harvest Hub Garden collects and processes certain agricultural information:

• Growing Practices: Information about sustainable farming, organic practices, and agricultural methods.
• Seasonal Data: Planting and harvesting schedules, seasonal availability of products.
• Geolocation for Agricultural Purposes: County-specific growing information, local climate data, and regional harvest timing.

This information is used to:

• Match buyers with appropriate local produce
• Provide relevant seasonal recommendations
• Ensure compliance with county-specific agricultural regulations
• Facilitate education about sustainable and local food systems

This information may be shared in aggregated, anonymized form for research, educational, or public interest purposes related to local food systems and sustainability.