How landnpop uses your details

• Asking for a Brief.Your brand name, your name, your WhatsApp number, your brand's Instagram or website, what you sell, where your brand is now, and anything you tell us is in your way. We use it to reply when you message us on WhatsApp, and to set up a time to talk.
• Chatting with us on WhatsApp.Your name, your brand name, your WhatsApp number, your brand's Instagram or website, any question you add, and which page you asked from. We save it before WhatsApp opens, and use it to match your chat to your details and reply.
• Asking us to recommend events.Your name, your brand name, your WhatsApp number, your brand's Instagram or website, what you sell, where and when you want to sell, your booth budget if you give one, who would run the booth, any note you add, and which page you asked from. We use it to reply on WhatsApp with events that fit your brand.
• Updates, only if you tick the box.On these forms you can tick “Send me new markets and open calls that fit my brand”. If you do, we also use your name, brand and WhatsApp number to send you markets and open calls we think fit. Reply STOP at any time and we stop. If you don't tick it, we only use your details to answer what you asked.
• Service enquiries. Your name and WhatsApp number, and your email, brand name and message if you add them. If you come from the ingredient checker with a BPOM number, that number goes with your enquiry. We use it to answer you.
• Partner applications. Your name, your organisation, the kind of partner you are and your WhatsApp number, plus your email, how many brands you could refer and a note if you add them. We use it to talk to you about partnering.
• The ingredient checker.Your ingredient list, the product type, the BPOM number if you give one, your result, your WhatsApp number and brand name, and your brand's Instagram or TikTok and your name if you add them. If you use a photo of the label, we keep a copy of it with your check. We use all this to show your result and to follow up if anything needs fixing.

With the Talk to us, WhatsApp, enquiry and checker forms we also record how you first found us (the site or link you came from, the page you landed on, and any campaign tags in that link), a random ID your browser keeps for us, and your browser type. This tells us which of our posts and links bring people to us.

Our site keeps a few small notes in your browser: the random ID and first visit above, and whether you have closed or used our WhatsApp pop-up. When you press some of our buttons, we record which button, which page, how you first found us, the random ID and your browser type.

We also use two analytics tools. Both set cookies.

• Google Analytics counts visits and tells us which pages people read, where they came from, which of our buttons and links they use, what they filter on our calendar, the result of an ingredient check, and when a form is sent or fails to send, and whether they then open WhatsApp from it (never what they typed). Google receives your IP address with each visit, and says Google Analytics does not store it.
• PostHog shows us how people use our pages: the pages they view, how far they scroll, which links and buttons they click, how fast pages load, and recordings of visits. Anything you type into a form is hidden before it leaves your browser, so it is never in a recording. PostHog works out your approximate location from your IP address, including your city, postal area and map coordinates, which are usually accurate to about 10 km, and then drops the IP address. It keeps your visits under a random ID stored in your browser, together with your browser, device, the link you came through and any technical messages your browser logs. It does not build a profile of you.
• We sometimes use PostHog's AI tools, which run on Google's Gemini, to review recordings and summarise how people use our pages.

We use it to improve our website, and to understand which channels, content and places bring brands and partners to us. We look at it as totals and patterns. We never use it to work out who a visitor is, to contact anyone, or to make decisions about anyone.

We rely on our legitimate interests in running and improving our website. We have weighed those interests against your rights, and you can ask us to explain how.

Turn analytics off below and Google Analytics, PostHog and our own records of button presses stop in this browser. Our own notes in your browser stay, and our forms work either way. You can also block or clear cookies and site data in your browser settings.

These companies run parts of the website for us:

• Vercel hosts the website, in the US. Its server logs include what you send through a form, how you first found us, the random ID and your browser type.
• Supabase is our database, in the US. Form details, checker results, label photos and our button records are kept there.
• Anthropic, in the US, reads the ingredient list from a label photo, if you use one in the checker. When you ask us to get in touch through a form, it also receives your name, brand, social link, message and how you first found us, and looks up public information about your brand, so we can prepare our reply. When you then message us on WhatsApp, it reads that message alongside our notes on your enquiry, to suggest our answer. It does the same for messages from event organisers and other business contacts we work with. A person on our team reads every suggestion and decides what to send.
• PostHog runs the analytics above and stores it in Germany.
• Cloudflare carries the data from your browser to PostHog, through its servers worldwide.
• Google runs Google Analytics and Gemini, and Google Drive holds our notes on your enquiry. Google may process data in any country where it has facilities.
• ElevenLabs, in the US, turns a voice note into text for our notes if you send us one on WhatsApp after an enquiry, or as an event organiser or business contact we work with. We keep the text, not the recording.
• Attio is where we keep our notes on the brands we talk to. When you send a form, we file the details you entered there, with our notes on your brand. TimelinesAI connects our WhatsApp number to Attio, so when you chat with us on WhatsApp, those messages are filed there too. If you message our WhatsApp before we know you, nothing is filed: our founder alone gets an email, sent through Resend, with your number, your WhatsApp name and the start of your message, and decides whether to add you.
• Resend, in the US, delivers the emails we send ourselves about an enquiry. They include your name or brand and which form you used and when. When you message us on WhatsApp, they also include the start of your message and, written by AI, a summary of what you're asking, the next step it suggests for us, and any warnings about its drafted reply.

We are in Singapore, so your details leave Indonesia or Singapore when these companies handle them. Each has agreed in its contract to protect them, mostly through the standard contract clauses used for transfers out of the EU. Data held in another country is subject to its laws, which can let its authorities ask for access. We reduce that by keeping no names in our analytics and hiding what you type.

Only our team and these companies can see your details, our accounts use two-step sign-in, and data travels between your browser and these companies encrypted.

• Your enquiry, form or checker details, including the copies in our team's email: 24 months after we last heard from you. A check you ran without leaving contact details: 24 months after the check.
• Our records of button presses: 12 months.
• Suggestions and “Was this worth it?” answers: 24 months.
• PostHog recordings: 30 days.
• Other PostHog analytics: 1 year. After that PostHog stops making it available to us; it may keep it in archived storage under its contract with us.
• Google Analytics: detailed data for 14 months. Google keeps summary reports, which hold no detail about any one visitor, for longer.

Email dickson@landnpop.com, our Data Protection Officer, to see or get a copy of the details we hold about you, to correct them, to ask us to stop using or delete them, or to object to how we use them. We reply within three days.

Our analytics data isn't tied to your name, so to find yours we need the PostHog ID shown in the box above. It stays there after you turn analytics off. We can delete your recordings. PostHog doesn't let us delete other analytics data visit by visit, so we stop using it and it ages out after a year.

If you make a brand profile: your email, the brand details you type in (name, a one-line description, Instagram, website, where it's from, category, what it sells, price range, a short description), the follower numbers you type in, your booth needs (size, table or rack, power, people at the booth, payments you take), what markets you're looking for, the logo and photos you upload, the markets you add, your answers on each market's report card, and any link or note you send to show you were at a market, and a record of the points your brand earns and spends. We also keep the date you last signed in.

Photos are kept in private storage, never in a public folder. Pages show them through links that stop working within an hour. When you pick a photo, your browser shrinks it first, which also removes where it was taken.

If you ask us to draft your profile from your website, our server opens your website's public pages once and sends the page text to Anthropic, in the US, which drafts the fields for you to check. We hold that draft for 30 minutes so you can check it, and delete it when you press Confirm and claim; nothing goes on your profile until then. We never read your Instagram. If you ask us to check your website for your verification code, our server opens your homepage once.

If you verify your brand with a code sent to your brand email, we email a 6-digit code to the address you type. The code works for 15 minutes; we keep a scrambled copy of it, with the address it went to, until it expires and delete both within a day after that. Once you're verified, we keep that address on your profile so our team can see how it was verified. Only our team sees it.

To stop misuse, we log when your account drafts or creates a profile, checks its website or sends an invite, and when someone starts or finishes “Continue with Google” or “Continue with Microsoft” (with a scrambled copy of the internet address it came from, never the address itself). We use the log only to limit how often these can happen, and delete it after 7 days (31 days for creating a profile, since that limit runs over 30 days).

If you invite someone to your brand's team, we keep their email and send them one email about the invite. The invite is deleted when they join, and stops working after 14 days. Everyone on a brand's team can see the other members' emails.

To sign you in we email a 6-digit code, sent through Resend. We store only a scrambled copy of the code; it expires after 10 minutes and is deleted once used. Signing in sets one cookie that keeps you signed in for 30 days, and a second that only says “signed in” (no name, no account), so our pages can show your own Passport link and unlock button. Both are needed for the profile to work and aren't used for anything else. If you open your Passport from a market's page, a cookie remembers which market for a day, so you land back on it after signing in.

If you choose “Continue with Google” or “Continue with Microsoft”, that company tells us your name, your email address, whether it has checked the email is yours, and an ID number for your account with them. We keep the email, that ID and whether the email was checked, so you can sign in the same way next time; we don't keep your name from them. We never get your password, your contacts, your files or your inbox, and we can't post or do anything in your Google or Microsoft account. While you sign in we set a short cookie for 10 minutes to check the answer really comes from the sign-in you started. Whenever a sign-in method is added to your account, we email your account's address to say so. You can remove a sign-in method from your profile page at any time.

We may start a private draft profile for your brand ourselves, from public information (your brand's name, Instagram handle and website, and what your website says) and our own records of markets. We then contact your brand once, by Instagram message or by email, with a link to claim it. An unclaimed draft is never public: nobody but our team can see it, it can't be shared, and it never appears in any list. If nobody claims it, we delete it 6 months after we made it. The claim link works once, for 30 days; we keep only a scrambled copy of it. Until you sign in, the link shows only your brand's name and Instagram handle.

If your brand pays to unlock a market or buys a 10-Market Pass, the payment is handled by HitPay, in Singapore: you type your card or wallet details on HitPay's page, never ours, and we never see or keep them. HitPay tells us the payment went through, with its amount, currency and a payment reference. We keep an order record: what was bought, the amount and currency, the date, the payment reference, your brand's name and the email we send the receipt to (through Resend). Paying never gives your brand points.

Google Analytics and PostHog don't run on brand profile pages: your profile, its markets, sign-in, claim links and shared profile pages. Nothing on them is counted or recorded. These pages also tell your browser not to pass their address on to any other website you open from them.

• To run your profile, and to reply to you about it.
• Your report cards are private. Organisers and other brands never see your answers with your brand's name on them. Brands earn points for reviewing markets they were at, and spend them to unlock what other brands said about another market; points can't be bought and never depend on what you answer. Once unlocked, a brand sees what other brands said about that market: answers combined from at least five other brands with a checked booth at any of its editions in the last 12 months, one answer per brand (its latest), never counting their own. Under ten brands it shows only the most common answer; from ten, shares rounded to the nearest 10%. The combined answers are updated in batches, not each time someone answers, so nobody can work out one brand's answer by watching them change. It never names anyone, never shows exactly how many brands answered and never shows what anyone wrote. Organisers never see these.
• The same unlock shows a verified brand that has reviewed a market of its own whether brands rebook that market: in bands such as “about 3 in 10”, never exact numbers. It names a brand that rebooked only if that brand ticked “List my brand as a regular at markets I rebook”, which is off unless you tick it and works only while your profile is verified and shared. Then those brands see your brand's name, logo, a link to your shared profile and how often you've been there (“2–3 times” or “4+ times”). Untick it any time and your brand stops being listed; turning sharing off does the same. It never shows on public pages.
• Your shared profile page shows your brand details, photos, follower numbers, booth needs, what you're looking for and the markets you've listed, and only while you have sharing switched on. Anyone with the link can see it. It never shows report-card answers. A tip shows on it only if you ticked both boxes to share and credit it, and after our team has read it.
• Markets our records hold for your brand are shown only to your own team, and only once you've shown the profile is yours.
• A tip you tick to share is read by our team first. Then brands who have unlocked that market can read it, with the month of the market. It shows your brand's name only if you also ticked to credit it and have sharing on; otherwise it says “A brand”. One shared tip may also show on the market's public page: without your name, only once 5 or more brands have reviewed that market.
• Our team sees your profile to check it belongs to your brand and to check proof and tips you send.
• When our team verifies your brand, checks proof you sent, or shares your tip, we email everyone on your brand's team to say so.

Your answers are anonymous to organisers and the public, but not to a court. If a court or the authorities order us to say who wrote something, we may have to. That's why we keep as little about you as we can.

We keep your profile while you use it, and delete it 24 months after you last sign in. Email dickson@landnpop.com any time to see, correct or delete your profile and everything on it; deleting it removes your report cards and photos too. You can remove a photo yourself at any time, and it is deleted from storage at once.

Order records are the exception: we keep them for our accounts even after a profile is deleted, without the link to the profile. We keep payment records for 7 years, as tax and accounting law requires, then delete the personal details. What stays is anonymous: what was bought, the amount, the currency and the date.

Your name, email and Singapore mobile number, the date, the event, and which boxes you ticked.

• If you bought something, to send your receipt and sort out anything about your purchase.
• If you ticked the first box, landnpop sends you news and offers about the brand on your card and the other brands we carry.
• If you ticked the second box, we share your details with the brand on your card, in Indonesia, and the brand may send you its own news and offers. The brand has agreed with us to protect your details to the same standard, to use them only for this, not to pass them on, and to delete them when asked.

Reply STOP to any message, use the unsubscribe link in any email, or email dickson@landnpop.com. We stop within 21 days, and usually much sooner. Stopping doesn't affect anything you've bought.

Email dickson@landnpop.com, our Data Protection Officer.

Until you ask us to stop, or 24 months after we last heard from you, whichever comes first.