Privacy Policy

Everyone with an account

• Your email address and password (the password is stored securely by our authentication provider; we can't read it).
• Pieces and artisans you save to your favourites.
• Messages you send to and receive from artisans or buyers.

When you buy

• Your shipping name, address and optional phone number, and any note you add for the artisan.
• Saved addresses, if you choose to save one for next time.
• Your order history: what you bought, from whom, amounts, shipping and refund status.
• Payment details are entered directly with Stripe. We receive confirmation of the payment, but never your full card number.

When you apply to sell or become an artisan

• Your application: the name on your enrollment documents, the name you'd like shown to buyers, tribal enrollment, other affiliations, location, bio and the attestations you agree to. The name on your documents is never shown publicly.
• A copy of your tribal enrollment document(such as a tribal ID or CDIB). It's stored in private storage that can't be reached from the website; only NativeHand's admin views it, to verify your application. We keep it as the record of your verification while you sell on NativeHand, and you can ask us to delete it.
• The date you confirmed each listing is your own authentic work.
• Your storefront: name, nation, photos, story, shop policies and social links. These are public.
• Your listings and photos. These are public.
• Payout setup (identity verification and bank details) is collected by Stripe, not by us. We receive your Stripe account ID and whether it's ready to receive payments.
• Your sales: orders, payouts, refunds and disputes.

Automatically

• Cookies that keep you signed in. Your cart is stored in your own browser. We don't use advertising, analytics or third-party tracking cookies.
• Basic technical logs (such as IP address, browser type and the pages requested) kept by our hosting providers to operate and secure the site.
• Visit statistics from Vercel Web Analytics: which pages are viewed, the referring site, and your country, device and browser type. It uses no cookies, doesn't identify you or follow you across other sites, and we remove sign-in codes and other private details from page addresses before they're counted.

• To run the marketplace: accounts, listings, checkout, orders, shipping, messaging and payouts.
• To send emails about your activity: order confirmations, shipping and refund notices, new-message alerts, new-sale alerts and shipping reminders for sellers, and seller application decisions. These are service emails, not marketing.
• To verify sellers and keep the marketplace authentic, as described in our Terms.
• To prevent fraud, handle refunds and chargebacks, and enforce our Terms.
• To meet legal, tax and accounting obligations.

We don't sell your personal information, and we don't share it for advertising.

• The artisan you buy from receives your name, shipping address, phone number (if given) and any note, so they can ship your order. Artisans you message or buy from can also see your account email or display name. Artisans may use this only to fulfil and support your order.
• The publicsees artisans' storefronts and listings. Buyers' information is never public.
• Service providers that run parts of NativeHand for us, under their own privacy and security terms:
  • Stripe: payments, seller payouts and identity verification
  • Supabase: accounts, database, photo storage and private document storage
  • Vercel: website hosting and visit statistics
  • Resend: sending our emails
• Legal reasons: when required by law, or to protect the rights, safety or property of our users, the public or NativeHand.
• Business changes: if NativeHand is sold or merged, your information may transfer to the new owner under this policy.

We keep your account information while your account is open. If you ask us to delete your account, we'll delete or anonymise your personal information, except records we must keep for legal, tax, accounting or fraud-prevention reasons, such as completed orders and payouts, which we typically keep for up to 7 years.

• You can update your storefront, listings and saved addresses in your account at any time.
• You can ask us to access, correct, export or delete your personal information by emailing support@nativehand.shop. We'll verify it's you before acting on a request.
• Depending on where you live (for example, California), you may have additional rights under local law. We'll honour them, and we won't treat you differently for using them.

We protect your information with access controls that limit what each user can see, encrypted connections, and by keeping payment and bank details with Stripe rather than on our own systems. No system is perfectly secure, so please use a strong, unique password.

NativeHand isn't intended for anyone under 18, and we don't knowingly collect information from children under 13. If you believe a child has given us information, contact us and we'll delete it.

We'll post any changes to this policy here with a new date, and let you know by email if a change is significant. Questions or requests: support@nativehand.shop.

NativeHand is operated from the United States, and your information is stored and processed there.