Privacy Policy
Last updated: October 13, 2026
This Privacy Policy describes how Market at Delta collects, uses, and discloses personal information in connection with marketatdelta.com and related services, including the vendor notification settings page and tokenized document upload links.
Who we are
Market at Delta is a neighborhood flea market located at San Joaquin Delta College, Budd 4 Parking Lot, 5151 Pacific Ave, Stockton, CA 95207. For questions about this policy or to exercise any of the rights described below, contact hello@marketatdelta.com.
Information we collect
- Contact information you provide (name, email address, phone number, preferred language) when you apply to be a vendor, submit a form, or manage your notification preferences.
- Newsletter signups. When you check the "subscribe me to the newsletter" box on a form or submit the dedicated footer signup, we record your first name (and last name, if provided), email address, the form you came in through (so we can send you relevant rather than blanket email), and the timestamp of the signup.
- Survey and feedback responses. When you submit the visitor survey, we record your answers to each question. Personal contact details on the survey (name, email, phone) are optional and only collected when you provide them voluntarily, typically to be entered into a drawing.
- Compliance documents you upload through a tokenized link (permits, licenses, certifications, and related records).
- Correspondence between you and Market at Delta staff.
- Technical information transmitted automatically by your browser or device, including IP address, user agent, and request timestamps. We record your IP address at the moment you opt in to text messages, as required for consent recordkeeping under the Telephone Consumer Protection Act.
- Browsing activity on our website, such as the pages you view and the links you tap, collected through Meta's advertising tools as described under Meta advertising tools.
Why we use it
We use personal information to operate the market (review vendor applications, assign booths, verify compliance documents), to respond to your messages, to send transactional communications, to measure and show our advertising (see Meta advertising tools), and to comply with applicable law. Where required by law, the legal bases for processing are performance of a contract, our legitimate interest in operating the market, your consent (for optional communications such as SMS), and compliance with legal obligations.
Categories of recipients
We do not sell personal information. Except as described under Meta advertising tools, we share it only with authorized staff and with service providers acting on our behalf in categories including website hosting and infrastructure, database storage, transactional email delivery, SMS delivery, and privacy- preserving analytics. These providers process personal information under written agreements that restrict use to the services they provide. A current list of subprocessors is available on request at hello@marketatdelta.com. We may also disclose personal information if required by law or legal process, or to protect the rights, property, or safety of Market at Delta, our staff, or the public.
Meta advertising tools
We use two Meta advertising tools on marketatdelta.com: the Meta Pixel, which runs in your browser, and the Conversions API, which sends the same events from our server so that each one is counted once. They help us see which of our ads bring shoppers and vendors to the market, and help Meta show our ads to people who may be interested.
What Meta receives. When these tools are on, Meta receives:
- the pages you view and when, such as the home page or an event page;
- these actions: tapping a directions or map link, starting the vendor application, completing a vendor registration, and signing up for our newsletter;
- whether a page is meant for shoppers or for vendors, the page's language (English or Spanish), and, on an event page, the name of the event;
- your IP address, your browser's user agent, and Meta's own cookie identifiers.
What Meta never receives from us. We never send Meta your name, email address, phone number, or anything you type into a form, in any form, including hashed or coded versions. We never upload customer lists to Meta.
How long. We may add visitors to advertising audiences in Meta, which we use to show our ads. A visitor stays in an audience for up to 180 days after their last visit and is then removed. Meta keeps and uses the information it receives under its own privacy policy, and may also use it to improve its advertising services.
Where these tools do not run. They do not run in our mobile apps, for visitors in the European Economic Area, the United Kingdom or Switzerland, when your browser sends a Global Privacy Control signal, or after you opt out.
How to opt out. Use the "Do Not Sell or Share My Personal Information" link at the bottom of any page. One click turns these tools off in that browser: the Pixel stops loading and our server stops sending events about you. We remember your choice with a small cookie on our own site, so if you clear your cookies or use another browser or device, opt out there too. We treat a Global Privacy Control signal the same way, and our site shows "Opt-out request honored" when it receives one. Opting out stops sharing from then on; it does not remove information Meta already received. To ask Meta about information it holds, see Meta's privacy policy.
International transfers
Market at Delta operates in the United States. Some of our service providers may process information in other countries. Where personal information is transferred out of the European Economic Area or the United Kingdom, we rely on approved safeguards such as the European Commission's Standard Contractual Clauses.
Retention
We keep personal information for as long as necessary for the purposes described in this policy and to meet our legal and recordkeeping obligations. Tokenized upload and settings links expire on a fixed schedule. Consent records for SMS opt-in are retained for as long as the opt-in is active and for a period afterward sufficient to evidence consent. Visitors we add to Meta advertising audiences are removed up to 180 days after their last visit (see Meta advertising tools).
Communications
Email. Transactional email (sign-in links, document reminders, replies) is part of the service and is governed by the federal CAN-SPAM Act. You may opt out of non-essential reminders through the settings page linked in those messages.
SMS. Text messages are strictly opt-in. At the moment you opt in, we record the exact disclosure text you agreed to, the phone number, the timestamp, and your IP address. Message frequency varies. Message and data rates may apply. Reply STOP to cancel, HELP for help. Mobile carriers are not liable for delayed or undelivered messages.
Your privacy rights
California residents (CCPA / CPRA)
California residents have the right to request to know what personal information we have collected, to access and receive a copy of that information, to request correction of inaccurate information, to request deletion, to opt out of the sale or sharing of personal information, and to limit the use of sensitive personal information. We do not sell personal information. Our use of Meta's advertising tools, described above, may be considered "sharing" personal information for cross-context behavioral advertising under California law. We do not knowingly share the personal information of anyone under 16.
You can opt out at any time with the "Do Not Sell or Share My Personal Information" link at the bottom of every page, and we honor Global Privacy Control (GPC) signals as an opt-out. We do not discriminate against you for exercising any of these rights.
Other U.S. state privacy laws
Residents of Virginia, Colorado, Connecticut, Utah, Texas, and other states with comprehensive consumer privacy laws may have rights similar to those described above, including rights of access, correction, deletion, and to opt out of certain processing activities, subject to the specific conditions and exceptions in each law. To exercise rights under any applicable state law, contact us at the address below.
European Economic Area and United Kingdom (GDPR / UK GDPR)
If you are located in the EEA or the United Kingdom, you have the right to request access to your personal data, to request rectification or erasure, to restrict or object to processing, to data portability, and to withdraw consent at any time for processing based on consent (without affecting processing already carried out). You also have the right to lodge a complaint with your local data protection supervisory authority.
How to exercise rights
Send your request to hello@marketatdelta.com. We may need to verify your identity before we act on certain requests. We will respond within the time frame required by applicable law.
Children
The site is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete the information.
Security
We use industry-standard administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is completely secure; we cannot guarantee absolute security.
Changes to this policy
We may update this policy from time to time. The "last updated" date at the top of this page reflects the most recent revision. Material changes will be communicated as required by applicable law.