1. Scope and contact
This policy covers personal information handled through Saleyard's website, accounts, seller tools, listings, enquiries and membership services. Questions, access or correction requests, marketing opt-outs and privacy complaints can be sent to hello@saleyard.co.nz.
2. Information we collect
Information you provide
- Account and profile information, such as your email, name, phone, region, farm or trading name, buying or selling purpose, approximate cattle-number band, password hash, marketing choice and policy acceptance.
- Listing information, including cattle details, prices, descriptions, photos, captions, pickup region, private pickup address, seller contact details and private seller notes.
- Enquiry information, including buyer name, email, optional phone number and message.
- Membership and support information, including membership status, Stripe customer, subscription and checkout identifiers, billing events and messages you send us.
Information from other sources
- If you use Google sign-in, Google provides an account identifier and verified email and we request the
openid,emailandprofilescopes. - Stripe sends checkout, subscription, invoice and payment-status events. Saleyard does not receive or store your full card details.
- Sellers, buyers and service providers may give us information needed to operate an enquiry, investigate a problem or secure the service.
Technical and usage information
- Security and operational records may include timestamps, internal account or content identifiers, session and one-time-token hashes, device or browser information, and hashed email, IP address or user-agent values.
- First-party funnel events record service actions such as sign-in, checkout, listing and enquiry steps. They are designed not to contain names, email addresses, phone numbers, session tokens or raw IP addresses and user agents.
3. Why we use information
We use personal information to:
- create, authenticate, secure and support accounts;
- save, publish, update and display listings and media;
- deliver private buyer enquiries to the relevant seller or authorised administrator;
- operate Saleyard Pro checkout, membership, billing status and support;
- prevent abuse, duplicate submissions, unauthorised access and information leakage;
- measure whether important service journeys work and diagnose errors;
- send product or market updates when you have chosen to receive them; and
- respond to requests, disputes, legal obligations and safety or security incidents.
4. Public and private information
A live listing may display cattle details, price information, photos, approximate location, seller display or trading name and the seller's selected contact method. If a seller chooses phone contact, the seller phone number may be public.
Account IDs, user IDs, exact pickup address, private seller notes, storage keys, account email and other private contact details are not intended for the public listing. Buyer enquiry details are delivered privately and are not shown on the listing. Sellers should still avoid placing private information in public titles, descriptions or photos.
6. Overseas processing
Some service providers operate infrastructure or support teams outside New Zealand, so personal information may be processed overseas. Their locations and processing arrangements can change and are not fully verified or published by Saleyard. Providers process information under their own terms and the services configured for Saleyard. Saleyard remains responsible for its own legal obligations, but this policy does not claim that every overseas jurisdiction provides the same privacy protections as New Zealand. Contact us if you want more information about a current provider relevant to your information.
8. Retention and deletion
We keep personal information for as long as reasonably needed to provide and secure Saleyard, maintain transaction and consent records, resolve disputes, meet legal obligations and protect legitimate rights. Retention differs by record and Saleyard does not yet publish a comprehensive fixed retention schedule.
You can delete a draft using the available account tool. That deletes the draft database record, but private uploaded photo objects may currently remain in Cloudflare R2 until provider lifecycle cleanup. Removing an individual media item separately attempts to delete its private object on a best-effort basis. You can end a live listing; ended listings currently retain their media and enquiries.
Deletion may not be immediate or complete where copies remain in backups, provider lifecycle queues, security records, dispute records or information that must reasonably be retained for legal purposes. Contact hello@saleyard.co.nz if you want to ask about retention or deletion of particular information. We will consider the request and explain any information we need to keep.
9. Security
We use measures intended to protect information, including hashed passwords and tokens, time-limited authentication and upload links, same-origin checks, account-scoped access, private media storage, webhook verification and runtime log redaction. No internet service is completely secure, so please use a unique password and contact us promptly if you suspect unauthorised access.
10. Your choices and privacy rights
You can update available profile fields and your marketing choice in your account. Email hello@saleyard.co.nz to opt out of marketing, request access to personal information we hold about you, or ask us to correct information you think is wrong, incomplete or misleading. We may need to verify your identity before acting.
If we do not make a requested correction, you may ask us to attach a statement of correction where the Privacy Act 2020 requires it. Some access or deletion requests may be limited where the law permits or requires information to be withheld or retained.
If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner.
11. Changes to this policy
We may update this policy as Saleyard, its providers or legal requirements change. We will publish the updated policy and change the date above. If a change materially affects how we use existing personal information, we will take reasonable steps to give notice before the new use begins.
12. Contact
Email privacy questions or requests to hello@saleyard.co.nz. Information about access and correction rights is also available from the Office of the Privacy Commissioner.