Privacy Policy

What's Local(“we”, “us”, “the platform”) operates whatslocal.ca, a marketplace connecting Sarnia-area shoppers with local farmers, makers, and bakers (“vendors”). This policy explains what personal information we collect, why, and how it’s handled, in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Ontario privacy law.

From shoppers: name, email, phone number, and — for delivery orders — a delivery address and postal code. If you subscribe to updates or save a shopping list, we store your email and, optionally, your name and postal code.

From vendors: business name, contact details, address, and banking/payout information (collected and stored directly by Stripe, not by us — see below).

Automatically: basic, non-identifying usage analytics via Vercel Analytics (page views, referrers). This does not use cookies or track you across sites.

• To process and fulfill orders, including sharing your name, phone number, and pickup/delivery details with the vendor(s) you order from
• To send transactional emails — order confirmations, status updates, and cancellation/refund notices
• To send marketing emails (new vendors, seasonal updates, newsletters) only if you’ve subscribed — every marketing email includes an unsubscribe link, and we honor unsubscribe requests immediately
• To operate vendor accounts, process payouts, and calculate platform commission
• To detect fraud, enforce our Terms of Service, and comply with legal obligations

We don’t sell your personal information. We share it only as needed to operate the platform:

• Vendors you order from — receive your name, contact info, and order details to fulfill your order
• Stripe — processes payments and vendor payouts; Stripe handles and stores all card data directly, we never see or store full card numbers
• Resend — sends transactional and marketing emails on our behalf
• Cloudflare (R2) — stores images uploaded by vendors (product photos, not customer data)
• Supabase — hosts our database (PostgreSQL), located and processed per Supabase’s infrastructure terms

Each of these providers is contractually bound to use your information only to provide their service to us.

We use one essential cookie to keep you signed in (vendor/admin accounts only — shoppers don’t need an account to order). This cookie is required for the site to function and isn’t used for tracking or advertising. We don’t use marketing, advertising, or third-party tracking cookies, so there’s no cookie consent banner on this site.

We keep order records as long as needed for accounting, tax, and dispute-resolution purposes. If you unsubscribe from marketing emails, we stop emailing you but may retain a record of the unsubscribe to honor your preference. You can ask us to delete your personal information at any time — see “Your rights” below.

Under PIPEDA, you have the right to access, correct, or request deletion of the personal information we hold about you, and to withdraw consent for marketing communications at any time (via the unsubscribe link in any email, or by contacting us). To make a request, email hello@whatslocal.ca.

Questions about this policy or how your information is handled? Email us at hello@whatslocal.ca.