Your details, and what we do with them.

Account details — the email you sign up with, and the display name and location you choose for your profile.

Your listings — the titles, descriptions, prices, categories, provenance details and photos you post for sale or wanted, including full kits and their itemised contents.

Contact activity — when you use a contact button on a listing we record that contact happened (which listing, and when), so the marketplace can measure whether it's working. We do not store the content of what you then say to each other — that happens over your own email.

Messages to us — if you use our contact form or report something, we keep what you send so we can deal with it.

Technical data — basic information your browser sends and that our hosting keeps to run the site securely, such as log and session data.

To create and secure your account, show your listings, let buyers and sellers find and contact each other, respond to your enquiries and reports, keep the platform safe and honest, and — only if you opt in — send you the weekly summary email. When someone contacts you about a listing, we share the email on your account with them so they can reach you; it is not shown publicly on the page.

Where the law asks us to name a basis for using your information, ours are: performing our agreement with you (running your account and your listings), our legitimate interests in operating a safe and useful marketplace, your consent for the weekly summary email, and meeting our legal obligations.

We don't sell your personal information and we don't run ads on it. We do use a few trusted providers to run Showtools, who handle data on our behalf:

• Supabase — our database, logins and photo storage.
• Vercel — hosting that serves the site.
• MailerLite — sending the weekly summary email and handling unsubscribes, if you opt in.

We may also disclose information if the law requires it, or to protect members, the public or Showtools. Other members see your public profile and listings, and the email you've chosen once you or they start a contact.

Our providers store and process data on servers outside New Zealand, so your information may be held in a country whose privacy laws differ from your own. Where information is transferred out of a country that restricts those transfers — such as the EEA or the United Kingdom — we rely on the data protection terms and standard contractual clauses our providers make available. We choose providers that apply recognised security and privacy standards.

We keep your information while your account is open and for as long as we need it for the purposes above or to meet legal obligations. If you delete your account, we remove your live listings and profile; where a record of a completed sale needs to remain, we detach it from your identity rather than keep your details.

You can see and change most of what we hold from your account: edit your profile and your listings any time, turn the weekly summary on or off, and delete your account from your account settings.

Wherever you live, you can also ask us to give you a copy of the personal information we hold about you, correct it if it's wrong, delete it, or stop using it in a particular way. You can withdraw consent to the weekly email at any time without affecting anything already sent. We don't charge for any of this.

If you are in the EEA or the UK — the GDPR also gives you the right to receive your data in a portable format, to object to processing we base on our legitimate interests, and to complain to your national data protection authority.

If you are in Australia — the Australian Privacy Principles give you rights to access and correct your information, and to complain to the Office of the Australian Information Commissioner.

If your local law gives you stronger rights than this policy describes, those rights apply. To make a request or raise a concern, get in touch through the Contact page.

We take reasonable steps to protect your information, including access controls on our database so members can only reach what they're meant to. No online service can promise perfect security, so please use a strong, unique password and keep it to yourself.

We use the cookies needed to keep you signed in and the site working. We don't use advertising or cross-site tracking cookies.

Showtools is for people aged 18 and over. We don't knowingly collect information from anyone under 18.

We may update this policy as Showtools grows. If we make a material change we'll give reasonable notice on the site.