Privacy Policy

Effective date: July 19, 2026

This Privacy Policy applies to the Findlay Market Shopping App and related services operated by The Corporation for Findlay Market, a 501(c)(3) Ohio not-for-profit corporation (collectively, the “App”, “Services”, “we”, “us”, or “our”).

This Privacy Policy explains how the App accesses, collects, uses, shares, retains, and deletes user and device data when users browse the storefront, create an account, place orders, contact support, receive communications, or otherwise use the Services.

Account and data deletion: To request deletion of your Findlay Market Shopping App account and associated data, follow the account-deletion instructions below.

Contact Information

If you have questions, requests, or complaints about this Privacy Policy or our privacy practices, you may contact:

The Corporation for Findlay Market
Attn: Shopping App Support Team
P.O. Box 14727
Cincinnati, OH 45202
Email: shoppingapp@findlaymarket.org

Scope

This Privacy Policy applies to the Findlay Market Shopping App website, mobile applications, APIs, and any websites or application features that link to this Privacy Policy.

Data We Collect

Depending on how you use the Services, we may collect the following categories of personal and sensitive user data and other information:

1. Account and Identity Information

  • Name

  • Email address

  • Phone number

  • Account login details, if account creation and sign-in are enabled

  • Saved preferences and profile information you choose to provide

2. Order and Transaction Information

  • Billing address

  • Delivery address

  • Order history

  • Merchant selections, cart contents, and fulfillment details

  • Payment-related information needed to process transactions

Important: Payment card numbers and certain payment credentials may be collected and processed directly by our payment processors or commerce platform providers rather than stored by us, depending on the checkout method used.

3. Customer Support and Communications Information

  • Information you provide when contacting support

  • Messages, emails, call or text details related to order support and service communications

  • Feedback, complaints, and issue-resolution details

4. Device, App, and Usage Information

  • IP address

  • Browser type and version

  • Device type, operating system, app version, and technical identifiers made available by your device or platform

  • App interaction data, pages or screens viewed, products viewed, searches, session activity, referring URLs, timestamps, and crash or diagnostic information

  • Cookie, pixel, tag, log, or similar analytics data where applicable

5. Marketing and Analytics Information

  • Information about how users interact with our Services

  • Campaign, attribution, and engagement data

  • Newsletter and marketing preferences

6. Information We Do Not Intend to Collect Unless Required for a Feature

We do not intentionally collect highly sensitive categories such as contacts, call logs, SMS content, microphone recordings, camera content, precise location, Health Connect data, or inventory of installed apps unless a specific feature clearly requires it and we provide any required in-app disclosures, permissions requests, and consent flows first.

How We Collect Data

We collect data:

  • Directly from users, such as when users create accounts, place orders, request support, join mailing lists, or communicate with us

  • Automatically through the App and related technologies, such as logs, cookies, SDKs, analytics tools, and platform-generated events

  • From service providers and commerce, payment, communications, and analytics partners that support the Services

How We Use Data

We may use collected data to:

  • Provide, operate, maintain, and improve the App and Services

  • Process orders, payments, fulfillment, delivery coordination, refunds, and customer service

  • Send transactional communications such as receipts, confirmations, delivery updates, and support responses

  • Detect, investigate, and prevent fraud, abuse, security incidents, and misuse

  • Analyze usage, performance, and product interactions to improve the storefront and user experience

  • Send newsletters, promotions, merchant updates, and marketing communications where permitted by law

  • Personalize content, offers, and merchandising experiences

  • Comply with legal obligations and protect our rights

We limit our access, collection, use, and sharing of personal and sensitive user data to purposes reasonably necessary to operate the App, provide requested services, support legitimate business operations, and comply with applicable law.

Third Parties and Data Sharing

We may share information with service providers and processors that help us operate the Services. These may include:

  • Shopify and related Shopify services, to power commerce functionality and checkout

  • Google Analytics 4 (GA4), to understand app and storefront usage, engagement, and performance

  • Payment processors, such as Shopify Payments, Worldpay, or other configured processors, to process transactions

  • Communications providers, such as email, SMS, or customer support vendors

  • Marketing platforms used for newsletters or promotional messaging

  • Platform operators such as Google Play and Apple, as necessary for app distribution, billing, support, security, or compliance

We may also share information:

  • At your direction

  • In connection with legal requests, law enforcement, subpoenas, or regulatory obligations

  • In connection with a merger, acquisition, financing, or asset transfer, subject to applicable legal requirements

We do not sell personal and sensitive user data for monetary consideration.

Google Analytics 4 Disclosure

We use Google Analytics 4 (GA4) to measure traffic, understand user engagement, analyze app and storefront performance, and improve the Services. GA4 may collect device, usage, and event information such as page or screen views, session activity, approximate location derived from IP, technical device information, and interactions with content or products.

Where required by law, we will provide appropriate notice and obtain any legally required consent for analytics technologies. Users may also be able to control certain analytics collection through device settings, browser controls, cookie choices, or tools made available by Google.

If the Android app uses an App Set ID or similar non‑advertising identifier for analytics or fraud prevention, that use is limited to essential analytics, measurement, security, and fraud‑prevention purposes and not for ads personalization. We do not associate App Set ID with Android advertising identifiers or personal and sensitive user data for advertising purposes.

Advertising and Marketing

We may use personal data to send promotional emails, offers, newsletters, merchant updates, and similar communications. We may also use analytics and engagement information to improve merchandising, campaigns, and marketing effectiveness.

If the App uses targeted advertising or ad‑related measurement in the future, we will update this Privacy Policy, maintain accurate Google Play Data safety disclosures, and provide any disclosures or consent required by applicable law and platform policy.

Permissions and Sensitive Features

If a feature of the App requests access to device permissions or personal and sensitive user data beyond what a user would reasonably expect for storefront use, we will provide a prominent in‑app disclosure before the permission request or data collection begins, explain what data is accessed, how it is used or shared, and obtain any required consent through affirmative user action.

Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal data from unauthorized access, loss, misuse, alteration, or disclosure. We also require data in transit to be transmitted using appropriate security measures, including modern cryptography such as HTTPS where applicable.

However, no system can be guaranteed to be completely secure, and we cannot guarantee absolute security.

Data Retention

We retain personal data for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

  • Provide the Services and maintain user accounts

  • Complete transactions and maintain order records

  • Provide customer support

  • Detect and prevent fraud or misuse

  • Comply with tax, accounting, legal, regulatory, and contractual obligations

  • Enforce our agreements and resolve disputes

Retention periods may vary by data type and legal requirement. For example:

  • Account information is retained while the account remains active and for a reasonable period afterward unless deletion is requested or longer retention is legally required

  • Order and transaction records may be retained for tax, accounting, fraud‑prevention, and regulatory compliance purposes

  • Support communications may be retained as needed to document service history and resolve disputes

  • Analytics records may be retained according to the configuration of our analytics tools and our business needs

When personal data is no longer reasonably necessary, we will delete, anonymize, or securely de‑identify it unless continued retention is required by law or a legitimate compliance, security, or fraud‑prevention purpose.

Account Deletion and Data Deletion

If the App allows users to create an account, users may request account deletion both:

  1. Within the App, through the account or support flow made available in the App; and

  2. Outside the App, email us from the address associated with your account using the subject “Findlay Market Shopping App Account Deletion Request”: Request account and data deletion.

When we process a verified account deletion request, we will delete the account and associated personal data unless retention of specific information is required for legitimate purposes such as transaction recordkeeping, fraud prevention, security, legal compliance, dispute resolution, or enforcement of agreements. Temporary deactivation, suspension, or freezing of an account is not treated as account deletion.

Children

The App is not directed to children under 18, and we do not knowingly collect personal data from children. If you believe a child has provided personal data through the App, contact us at shoppingapp@findlaymarket.org so we can investigate and, where appropriate, delete the information.

International and Legal Compliance

We may process personal data in the United States and other jurisdictions where our service providers operate. Where applicable, we will comply with privacy, data protection, and consumer protection laws that apply to the jurisdictions in which we offer the Services.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will post the revised version and update the effective date above. If required by law, we will also provide additional notice.