Privacy Policy

1. Scope

This policy explains what information Zilker Community Market, Inc. d.b.a. Zilker Farmers Market ("ZCM," "we," "us") collects through zilkermarket.org and the vendor portal at portal.zilkermarket.org (the "Site"), how we use it, and who we share it with. It does not cover information you give directly to a vendor at the market, or to any third-party site we link to.

2. Information we collect

Information you give us. Your name, email address, mobile phone number, and anything else you enter when you sign up for our email or text message list, respond to a survey, submit a vendor application, contact us, or make a donation. Vendor applications also collect business information, product descriptions, permits, licenses, and certificates of insurance.

Payment information. Donations are processed by Stripe. Stripe receives your card or bank details directly — we never see or store your full payment card number. We receive a record of the donation amount, date, address, and the name and email you provided.

Electronic signature information. When you sign a vendor or partner agreement through Firma, we and Firma record your name, email address, the date and time of signing, your IP address, and an audit trail of the signing process, so that the signed record can be authenticated later.

Information collected automatically. When you visit the Site, we and our analytics and advertising providers automatically collect your IP address, browser and device type, operating system, referring website, pages viewed, links clicked, and the dates and times of your visits, along with cookies and similar online identifiers.

3. Cookies, analytics, and advertising

Google Analytics 4. We use Google Analytics 4, provided by Google LLC, to understand how people find and use the Site. Google Analytics sets cookies and similar identifiers on your device and collects the automatic information described above, including an approximate location derived from your IP address. Google Analytics 4 does not log or store full IP addresses. This information is transmitted to and processed by Google, which may store it on servers outside your country. We retain Google Analytics data for 14 months, after which Google deletes it automatically.

Google Signals and demographic reporting. We have enabled Google Signals. This means that for visitors who are signed in to a Google account and have turned on Ads Personalization, Google may associate your activity on the Site with your Google account and with your activity on other devices. We also receive demographic and interest reports — including estimated age range, gender, and interest categories — that Google derives from its own data about you. We see these only as aggregated reports, not as information tied to your name.

Google Ads and remarketing. We use Google Ads conversion and remarketing tags. These place cookies and identifiers that allow us to show you ads for the market on Google Search, YouTube, and websites in the Google Display Network after you have visited the Site, and to measure whether those ads led to visits or donations.

Meta Pixel and remarketing. We use the Meta Pixel, provided by Meta Platforms, Inc. The Pixel records pages you view and actions you take on the Site and transmits them to Meta, which may match that activity to your Facebook or Instagram account. We use this to show you ads on Meta's platforms, to build custom audiences of past visitors, and to build lookalike audiences of people similar to our visitors.

What this means. Because of the advertising technologies above, we share online identifiers and information about your browsing activity with Google and Meta so that they can show you targeted advertising. Under some state privacy laws this is treated as "sharing" or a "sale" of personal information, even though we receive no money for it. We do not sell personal information for money, and we do not share your name, email address, or mobile number with Google or Meta for their own independent marketing or promotional purposes.

Your choices.

• Block or delete cookies through your browser settings.
• Install the Google Analytics Opt-out Browser Add-on to opt out of Google Analytics on all sites.
• Adjust or turn off ad personalization at Google My Ad Center and in your Meta ad preferences.
• Use the industry opt-out tools at optout.aboutads.info and optout.networkadvertising.org.
• To understand how Google handles data from sites that use its services, see Google's privacy policy and How Google uses information from sites or apps that use our services. For Meta, see Meta's Privacy Policy.

Other cookies on the Site are set by our hosting, form, and payment providers and are necessary for the Site to function — for example, to keep you logged in to the vendor portal or to complete a donation.

4. How we use information

We use the information we collect to operate the market and this Site: to review vendor applications and administer vendor participation; to prepare, deliver, and retain signed agreements; to process and acknowledge donations; to send market announcements, newsletters, and text messages you have asked for; to respond to your questions; to understand Site traffic and improve the Site; to advertise the market and measure whether that advertising works; to keep the required financial, tax, and corporate records; and to comply with law.

5. How we share information

We share personal information only with:

• Service providers who help us run the market and the Site, and only as needed for that purpose. These currently include Stripe (payments), Supabase and Lovable (site hosting and database), Tally (forms and surveys), Sender.net (email and text message marketing), Firma (electronic signatures), Google (analytics and advertising), and Meta (advertising).
• Successor organizations, if ZCM merges with or transfers its assets to another organization.
• Government agencies, auditors, or legal counsel, where required by law, subpoena, or a government program we participate in.

Mobile numbers are treated differently. No mobile information — including your phone number and your consent to receive text messages — will be shared with any third party or affiliate for their own marketing purposes. We share mobile numbers only with the service provider that delivers our messages, and only to deliver them. Text messaging originator opt-in data and consent are not shared with any third party.

Vendor business information — business name, product categories, description, photos, and any social media links you provide — is published on the Site and used in market promotion. Do not submit anything in those fields you do not want public.

6. Email and text messages

If you join our email list, you can unsubscribe at any time using the link in any message or by emailing hello@zilkermarket.org. If you join our text message program, you can opt out by replying STOP to any message; the program is governed by the SMS/MMS Mobile Message Marketing Program Terms and Conditions in our Terms of Service. We may still send you transactional messages — donation receipts, vendor application decisions, and market-day operational notices to accepted vendors.

7. How long we keep information

We keep personal information as long as needed for the purpose it was collected, and then in accordance with ZCM's Document Retention and Destruction Policy. In general: financial and donation records are kept seven years; signed agreements and their audit trails are kept seven years after the agreement ends; vendor applications from vendors who are not accepted or no longer active are kept three years; email and text message subscriptions are kept until you unsubscribe; Google Analytics data is retained 14 months.

8. Security

We use reasonable administrative and technical safeguards, including encrypted connections and access controls on our systems. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your choices and rights

You may ask us to access, correct, or delete the personal information we hold about you, to opt out of targeted advertising, or to stop contacting you, by emailing hello@zilkermarket.org. We will respond within a reasonable time. We may need to keep certain records to meet legal, tax, or grant-program requirements even after a deletion request.

10. Children

The Site is intended for adults. We do not knowingly collect personal information from children under 13, and our advertising audiences are not built to target children. If you believe a child has provided us information, contact hello@zilkermarket.org and we will delete it.

11. Do Not Track and Global Privacy Control

The Site does not currently respond to browser Do Not Track or Global Privacy Control signals. You can opt out of targeted advertising using the tools listed in Section 3.

12. Changes to this policy

We may update this policy. We will post the revised version with a new "Last updated" date and, for material changes affecting vendors, notify vendors by email or through the vendor portal.

13. Contact

Zilker Community Market, Inc. d.b.a. Zilker Farmers Market 1905 Blue Crest Dr, Austin, TX 78704 hello@zilkermarket.org