Privacy Policy

This policy covers shopwhiteclover.com and the emails we send from it. White Clover is a small marketplace at 825 Chattanooga Ave, Suite 29, Dalton, GA 30720. When this policy says "we," it means White Clover and its owner.

1What we collect, and why

The opening day email list

If you enter your email on the home page, we store your email address and the date you signed up. That is everything. We use it once to tell you we have an opening date, plus the occasional note about what is happening at the shop.

The vendor application

If you apply for a space, the form asks for your business name, your name, business address, phone number, email address, website and social media handles, how long you have been in business, a description of your products, your price range, display preference, restocking plans, where else you sell, and anything else you choose to add. You may also attach photos of your work. There is also an optional step asking how you would like payouts sent and your Venmo username or Cash App cashtag, so we have it ready if you are accepted. You can skip it.

If you tick the box asking for a copy, we also send that same PDF to the email address you entered.

Applying also adds your email to the opening day list, so you hear about the opening along with everyone else. Every email we send carries an unsubscribe link, and you can come off the list here at any time. Coming off the list does not withdraw your application.

Vendor agreements, which we do store

If you are accepted and we send you an agreement, we keep a record of it so both sides have a copy. That record holds your business and contact details, the terms of your space (fee, commission, dates, any special terms), the Venmo or Cash App handle you want your payouts sent to, the name you typed as your signature, and the date and time you signed.

This one is deliberately kept, and stays available to you. Your private link and passcode keep working after you sign, so you can come back whenever you like and download the finished PDF with both signatures on it. It is held in Cloudflare's storage, and nobody without your passcode can open it.

If an agreement is sent to you and not signed within about 4 days, the invitation link expires automatically and stops working - we send a reminder email roughly 24 hours before that happens. Nothing about your application or your record is deleted when this happens; a fresh link can always be sent.

Staff sign in

The owner's admin page sets one cookie after she enters her passcode. It holds a scrambled version of the passcode so she is not asked for it on every page. It is not used for tracking, and it is only ever set for her.

What we deliberately do not collect

• No analytics or visitor statistics. There is no Google Analytics, no Meta pixel, no heatmaps.
• No advertising or remarketing tags.
• No IP address or browser logging by us.
• No location data.
• No fonts, scripts, or images loaded from other companies' servers, so no one else sees you visiting.

2Who else touches your information

We use a small number of companies to actually run the site and send email. They only ever see what they need to do their job, and none of them are permitted to use your information for their own purposes.

We do not sell your personal information, and we do not share it with anyone for their own advertising or marketing. If we were ever legally required to hand something over, we would.

3How long we keep it

• Email list: until you ask to come off it. Reply to any email from us and you are removed.
• Applications: they live in the owner's inbox permanently, and also in a temporary hold for up to 60 days (see above) so she can act on them without retyping anything. Successful ones become an agreement, which is kept while you are a vendor. If we do not move forward, ask us and we will delete yours from the inbox.
• Agreements: kept for the length of your agreement and for a reasonable period afterward, because both of us may need to refer back to a signed contract.
• Photos you upload: attached to the application email and embedded in the PDF, so they are kept for as long as that email is, and also held for up to 60 days in the same temporary hold as the rest of your application, for the same reason.

4Your choices

Whatever state or country you are in, we will honor these. You do not need to give a reason, and we will not charge you.

• See it. Ask what we hold about you and we will tell you.
• Fix it. Tell us what is wrong and we will correct it.
• Delete it. Ask and we will remove it, except where we need to keep a signed agreement for our records.
• Stop the email. Reply to any message from us, or email the address below.

Write to hello@shopwhiteclover.com and we will get back to you within 30 days. We may ask you to confirm the email address you originally used, so we are not handing your details to somebody else.

5Cookies

This site sets exactly one cookie, and only for the owner when she signs in to the admin page. It is marked HttpOnly and Secure, which means scripts cannot read it and it only travels over an encrypted connection.

There are no analytics cookies, no advertising cookies, and no third party cookies. That is also why you will not find a cookie banner here. There is nothing to consent to.

6How we protect it

• The whole site is served over HTTPS.
• The admin area is behind a passcode, and the vendor agreement pages each need their own separate passcode.
• The public copy of the agreement is encrypted in the page itself and only unscrambles once the correct passcode is entered.
• Passcodes are compared in a way that does not leak them, and are never stored in plain text in the page.

No system is perfect, and we will not pretend otherwise. This is a small business site, not a bank. The only payment detail we ever hold is the Venmo or Cash App handle you give us so we can pay you, which is the same handle anyone paying you would see. We will never ask for a bank account number, a card number, or a Social Security number, and you should not send them.

7Children

This site is meant for adults running or shopping with a small business. It is not directed at children under 13 and we do not knowingly collect anything from them. If you believe a child has sent us information, email us and we will delete it.

8Changes to this policy

If we change how we handle your information, we will update this page and change the date at the top. If it is a significant change and we have your email, we will tell you directly.