Privacy, in plain English
How we handle data
We hold as little as we can, we never sell any of it, and we take no cut of anyone's sales. This page explains exactly what we collect, why, and what we do to protect people in small towns where a single number can identify someone.
Last updated: 12 October 2026 · This page is the plain-English companion to our privacy policy, which is the legally binding version.
The short version
We collect an email address when you ask us to send you something, and not before.
We use the first part of your postcode to find things near you. We do not store the full one.
Producers see how many people follow them. They never see who.
Payments go straight from you to the producer. Their money never passes through us.
We do not sell, rent or share personal data with advertisers or data brokers. Ever.
We do not run advertising trackers or third-party marketing pixels on the site.
Who holds your data
Who you are dealing with
Local Green Stuff Pty Ltd, trading as Understead, is an Australian company, registered in New South Wales. The platform is UK-first: the producers on it, the markets listed, and nearly everyone using it are in the UK.
We say that plainly because you have a right to know who holds your information and where to find them. Being registered in Australia takes nothing away from what we owe you. If you are in the UK, UK data protection law applies to what we do with your data, and we follow it.
Company details
Registered nameLocal Green Stuff Pty Ltd
ACN694 870 874
ABN78 694 870 874
Registered officeCopacabana, New South Wales 2251, Australia
Data enquiriesThrough our contact page, and we answer in writing.
UK representativeWe are taking advice on whether UK law requires us to appoint one, and will name them here if so.
The lines we do not cross
What we never do
Some of these are ordinary good practice. Others are choices that cost us money, and we make them on purpose.
Sell or rent personal data to anyone, at any price.
Take a commission on a producer's sale.
Hold anyone's payment or card details.
Show a producer the identity of the people following them.
Store a full postcode from a search or a sign-up.
Let anyone pay to appear in results they do not belong in.
Publish a count small enough to identify an individual.
Send marketing email to anyone who has not asked for it.
What we hold, and why
It depends who you are
If you are looking for producers
Shoppers and local buyers
You can search this whole site without giving us anything. An account is not required to browse, search or contact a producer.
When you searchWe log the search itself so we can see what people in an area are looking for and which searches find nothing. We keep the first part of the postcode (for example TQ9), the categories, and whether there were any results. We do not store your full postcode, your coordinates, or anything that identifies you. If you type a full postcode, it is sent once to a mapping service to find the location, and the stored record keeps only the first part.
When you follow a producerWe store your email address and confirm it by sending you a link you have to click. The producer is told their follower count went up. They are not told who you are.
When you ask to hear about new producersWe store your email and the first part of your postcode, so we can tell you when someone lists near you. Same confirmation step, same one-click stop link on every email.
CookiesThe ones the site needs to work, and nothing for advertising. We do not run third-party marketing or profiling trackers. We count visits ourselves, on our own server, as daily totals: no cookies, no third parties, and nothing that identifies you.
If you make, grow or sell something
Producers, makers and market organisers
Your listingThe business details you would put on a shopfront: name, what you make, where you are, how to reach you. It is meant to be public. You control it, and you can take it down.
Listings you did not createSome pages were built from public sources before the owner knew we existed. See "Where our listings came from" below. You can claim yours and take control of it for free, or ask us to remove it.
Your followersThe people who follow you are shown to you as a number, never as a list of names or addresses. We hold that list on your behalf and it is used only to send the updates you write.
Your photosWe strip camera and GPS data out of every image before it is stored, so uploading a photo taken at your home never reveals where you live.
Your moneyIt never touches us. You connect your own payment account and customers pay you directly. We hold no card details and take no cut.
The part most sites skip
Protecting people in small places
In a village, a number can be a name. If we told a producer that three people nearby asked about goat's cheese, they could probably work out who. So we designed against it from the start, and we accept a less impressive product as the price.
What that looks like in practice
- We never show a count below a set floor. Small numbers are withheld, not rounded, because rounding still leaks.
- We hold the first part of a postcode only. A district covers thousands of homes. A full postcode covers about fifteen.
- Counts refresh on a fixed schedule rather than live, so nobody can watch a number tick up and match it to a person who just signed up.
- The radius we use to match people to producers and count demand is fixed. You can widen or narrow your own search on the map as you like; what we count and show to producers never moves with it, so overlapping searches cannot be used to narrow down where someone lives.
- Producers see totals. They never see identities, addresses or individual records.
Being straight about it
Where our listings came from
Many of the businesses on this site have not signed up yet. We built their pages from public sources, the same information a person would find by searching: trade registers, public directories and map listings (some through a data supplier, DataForSEO), and businesses' own websites. Most of it is business information. Where a business is one person, such as a sole trader, their business name and contact details are personal data, and we treat them that way: we use them only to show the business on the map, which is our legitimate interest in a complete local directory, and the owner can claim, correct or remove the page at any time. Every page says plainly that it is unclaimed.
We did that because a map with nothing on it helps nobody. A producer who joins should find their neighbours already there.
How we collected it matters as much as what we collected. We honour robots.txt and stated rights reservations, and we have walked away from sources that asked not to be used, including ones that would have been useful to us. We do not work around measures put in place to stop email harvesting. When we found a security flaw exposing personal data on someone else's site, we reported it to them privately rather than using it.
If a buyer asks for something a listed business makes, we pass that request to the email address the business publishes, so it can reply to the buyer directly. The business can tell us to stop at any time.
If a page is yours, you can claim it and control it for nothing, or tell us to take it down and we will.
Third parties
Who else touches your data
A short list on purpose. Every one of these is a supplier doing a specific job for us, not a partner we share data with for their own use. We are completing formal data-processing agreements with each, and this table will carry each supplier's region and transfer basis once those are confirmed. The privacy policy carries the same list.
| Service | What it does for us |
|---|---|
| Mailgun | Sends our email and handles replies. |
| Hostinger | Hosts the website and its database. |
| Google Maps | Turns a postcode into a map location and draws the results map. |
| Cloudflare Turnstile | Checks that a form was submitted by a person, not a bot. |
| Stripe and PayPal | Take payment for our own subscriptions. Stripe also runs the checkout for producers' shops and pays each producer's own account directly; that money never passes through us. |
| Google Workspace | Holds our team email inboxes, including messages sent through the contact form. |
| AI writing services | Help us draft listing descriptions from public information about a business. |
Your rights
What you can ask us to do
Under UK data protection law you have these rights, and we will not make you fight for them. Contact us and we will act on it.
See what we hold
Ask for a copy of your data and we will send it.
Correct it
Tell us what is wrong and we will fix it.
Delete it
Ask us to erase you and we remove your record and everything attached to it.
Stop the emails
Every marketing email we send carries a one-click stop link. One click stops it, with no login and no questions.
Take your listing down
Claimed or unclaimed, ask and it goes.
Complain
If you are in the UK you can complain to the Information Commissioner's Office. We would rather you told us first so we can put it right.
Retention
How long we keep things
We delete what we no longer need. We are finalising exact retention periods and will publish the specific numbers here rather than vague reassurance. What is already true today:
Search logsCarry no identity to begin with: the first part of a postcode, the categories, and whether anything was found.
Page-view countsDaily totals with no identity attached, deleted after 90 days.
Sign-ups never confirmedIf you did not click the confirmation link, no email is ever sent to you.
If you unsubscribeWe keep a minimal record that you asked us to stop, so we never contact you again by accident. Nothing else.
If you ask to be erasedYour record and everything attached to it are removed together, across every list at once.
Ask us anything
If something here is unclear, tell us and we will fix the wording.
A privacy page nobody understands protects nobody. If you work for a council, a food partnership or a community organisation and need more detail for an assessment, we will answer properly and in writing.
Ollie and Lucy