Privacy policy

Version 2026-09-v4. Ecuador's Organic Law on Personal Data Protection (LOPDP).

Who processes your data

Controller: Raw With Peace / Monica Anderson, Vilcabamba (Ecuador). Contact for any data matter: sovarael@rawwithpeace.com (or through the market's WhatsApp).

What we store and why

If you sign up as a vendor: the name or nickname you want to appear under, your zone (only the town, never your address), the category and description of what you offer, the languages you speak, a photo if you upload one, and your WhatsApp number. The sole purpose is for the community to find and contact you. We do not ask for ID numbers, date of birth, exact address or any details about minors.

If you RSVP to a living table: your name, whether you are coming or bringing something and what, how many of you are coming, and your WhatsApp number, which we use only to send you the location pin. On the site we show only your first name and what you bring (and a link to your profile if you have one in the directory); never your WhatsApp or how many of you are coming. All of this is deleted automatically 30 days after the table. If you link your directory profile, the RSVP stays attached to it while it lasts.

If you propose a table in "Tables of the world": your name, your country, your city, the place hint, when it meets, what you say about your table and the link you provide are published; your WhatsApp and email are never published — they are kept in a separate table that only the administrator can reach, and are used only so Monica can talk to you. Your table does not appear until she approves it, and if she rejects it she tells you why.

Your WhatsApp number is never public

It is stored in a separate table that the website cannot read. It is handed out one at a time, with a limit per person and hour, only when someone taps "Message on WhatsApp" on your profile. Every hand-out is logged to detect abuse. We recommend a dedicated WhatsApp Business number. The WhatsApp number of anyone who RSVPs to a table is also stored separately and only the administrator can see it.

Legal basis and retention

Your consent, given by ticking the box on the form (we store the date and version). Published profiles are kept for as long as you want to be listed. Rejected or incomplete profiles are deleted after 90 days. Table RSVPs are deleted 30 days after each table. Proposed tables of the world that are rejected or left unreviewed are automatically deleted after 90 days; published ones are kept for as long as you want your table on the page.

Your rights

You can request access, correction, deletion, objection or portability of your data at any time by writing to the administrator. We reply within 15 working days at most. Deletion is real: your profile, your phone number and the related log are erased. If you gave your consent, you can withdraw it at any time by the same email, without giving a reason: withdrawal does not affect what was processed before and means deleting your listing or your sign-up.

Where it is stored

On Supabase servers (database, US East region) and Vercel (website), outside Ecuador, encrypted in transit and at rest. We do not sell or share data with third parties. Automatic translation: the text of your description (without your phone or name) is sent to Google (Gemini service, processed outside Ecuador) to offer it in Spanish and English; Google does not receive your name, phone or email, just like the text of your table in "Tables of the world" (without phone or email).

Cookies

We use no tracking cookies or third-party analytics. The form keeps a draft on your own phone so you do not lose what you wrote if the connection drops. If you sign in to "My account", we use a technical session cookie, essential to recognise you while you browse; it is not used for tracking and is kept until you sign out or, at most, for 400 days.