This Privacy Policy explains how Hobbies collects, uses, stores, and shares information when you use our marketplace.
1. Information we collect
- Account data: email address, display name, password hash, and optional business application details
- Transaction data: orders, shipping addresses, payment status (payment card numbers are processed by Stripe, not stored by Hobbies)
- Listing and messaging data: product descriptions, photos, messages between buyers and sellers, reviews, and dispute records
- Technical data: IP address, browser type, device information, and usage logs for security and reliability
2. How we use information
- Operate the marketplace, process orders, and facilitate payouts
- Send transactional email such as order updates, password resets, and account confirmations
- Detect fraud, enforce policies, and respond to support requests
- Improve search, discovery, and platform performance
3. How we share information
We share information with service providers that help us operate Hobbies (for example payment processing, shipping labels, email delivery, and error monitoring). Sellers receive buyer shipping details needed to fulfill orders. We may disclose information when required by law or to protect users and the platform.
When usage analytics is on, Hobbies Direct shares page views and form submissions with HighLevel (GoHighLevel), its marketing platform. The script sends those events to LeadConnector at backend.leadconnectorhq.com. Password-like fields and payment-card fields are left out of form submissions. Admin, seller, procurement, and point-of-sale pages do not load the script.
4. Data retention and security
We retain account and transaction records as needed to operate the marketplace, meet legal obligations, and resolve disputes. Sensitive fields such as addresses and API secrets are encrypted at rest where applicable. Access to admin tools is restricted and audited.
5. Your choices
You may update profile and notification settings in your account. Signed-in users can turn usage analytics off in account privacy settings. That stops the HighLevel script on the next page load. Guests receive it until they sign in and turn it off, or until they block the cookie in the browser. You can request account deletion by contacting support; some records may be retained where required for tax, fraud prevention, or legal compliance.
6. Cookies and analytics
We use a session cookie to keep you signed in and secure the platform. On pages where usage analytics is on, the HighLevel script sets a cookie whose name starts with lc_session_. That cookie lasts one day, uses path /, and SameSite=Lax, and stores a session id. If the browser blocks that cookie, the script stores the same session id in sessionStorage. The script can also read and write a localStorage item named _ud. You can control non-essential cookies through your browser settings, and signed-in users can turn this off in account privacy settings.
7. Contact
Privacy questions: [email protected]. Security reports: [email protected].