Privacy policy

Two groups of people give us personal information, and we treat them differently.

• Store staff, meaning the owners, managers and employees who sign in to run a shop on SashaPet.
• Storefront customers, meaning the shoppers who buy from a store that uses SashaPet, in person or through its online shop.

• Name.
• Email address.
• Phone number.
• Account credentials, handled for us by Supabase Auth. Passwords are stored by Supabase in hashed form and we never see them in plain text.

• Name.
• Email address.
• Phone number.
• Delivery address, where an order is being delivered rather than collected.
• Order history, meaning what was bought, when, and whether it was picked up or delivered.
• Loyalty points earned and redeemed.

Storefront customers give this information to the store they are shopping with. We hold it on that store’s behalf so the store can fulfil the order and run its loyalty scheme.

• Processing orders: taking a sale at the counter or online, arranging pickup or delivery, and keeping a record of the transaction for the store.
• Running loyalty: awarding points on purchases, showing a customer their balance, and applying points against a bill.
• Managing staff accounts: creating sign-ins, controlling what each member of staff can see and do, and keeping the right people attached to the right store.
• Contacting people about their own orders or accounts, and responding when they get in touch with us.

We do not use this information to build advertising profiles, and we do not use one store’s data to serve another store.

Customer and store records, including accounts created through Supabase Auth, are held in a Supabase-hosted database. The application services that read and write those records run on Railway. Both providers process this information on our instructions in order to host the service.

Data is kept for as long as the store keeps its SashaPet account, and for as long afterwards as we need it to meet our own record-keeping obligations.

We do not sell, rent or trade personal information to third parties, and we do not share it for anyone else’s marketing. The only parties who see it are the store the information belongs to, and the hosting providers named above who need it to keep the service running.

You can ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it. Email hello@sashapet.com from the address on the account and tell us which store you deal with.

We will confirm receipt and deal with the request within 30 days. Some records, such as completed sales, may have to be retained where the store is legally required to keep them; if that applies we will say so rather than quietly keep the data.

If we change what we collect or what we do with it, we will update this page and move the last-updated date at the top. Material changes will also be sent to store account holders by email.

Questions about this policy can go to hello@sashapet.com.