1. Who we are
VendMap is operated for public-market stall management. This policy applies to guest use of the public map and to vendor and administrator accounts.
2. Information we collect
Depending on how you use the service, we may collect:
- Account data: name, email, mobile number, username, and password (stored as a hash).
- Vendor application data: personal details, business information, preferred section, emergency contact, uploaded documents, product lists, and product photos.
- Stall activity: reservations, assignments, and related status history.
- Technical data: basic server logs needed to operate and secure the site.
3. How we use information
- To create and manage vendor accounts and applications.
- To review documents and assign or manage stalls.
- To display public business information on the stall map (for example business name, products, and product images) when a stall is occupied.
- To send service notices such as application status or reservation updates (including SMS where enabled).
- To maintain security, prevent abuse, and keep audit records for administrators.
4. What is shown publicly
The public map does not display home addresses, government IDs, contact numbers, emergency contacts, or login details. Only information intended for market visitors is shown, such as stall location, occupancy status, and public vendor/business profile fields including product photos you upload.
5. Sharing
Personal data is shared with market administrators who operate the platform. We do not sell personal information. Service providers (for example SMS delivery) may process limited data solely to send messages you or the administrator initiate.
6. Retention
We keep application, stall, and account records for as long as needed to administer the market, comply with legal obligations, and resolve disputes. You may request correction or deletion subject to operational and legal requirements.
7. Security
We use access controls, hashed passwords, and restricted document downloads. No method of transmission or storage is completely secure; please use a strong password and keep it confidential.
8. Your rights
Under the Data Privacy Act of 2012, you may have the right to be informed, to access, to object, to erasure or blocking, to damages, and to data portability, subject to lawful exceptions. Contact the market administrator to exercise these rights.
9. Cookies and local storage
We use a session cookie (or equivalent) to keep you signed in. The public map does not require an account.
10. Changes
We may update this policy to reflect operational or legal changes. The “last updated” date at the top of this page will change when we do.
11. Contact
Privacy requests may be sent to the market administrator through the official market office channels.