1. Information we collect
The information collected depends on the service you use. Public product and corporate pages can be browsed without a public account. Enquiry services, when enabled, collect the details you submit. Preparing a franchise calculation does not require personal information, and estimate saving is not currently available.
2. Information submitted through forms
Contact enquiries include your name, email, enquiry type and message, and optional mobile and organisation details. Investor enquiries may include your region and investor profile. Distribution enquiries include business, market, capability and readiness information. Submitted records include a reference, submission identifier, status and timestamps. Do not include unnecessary sensitive personal information.
3. Account/profile information
Services requiring a public account use Supabase authentication. Profile records link to an authenticated user identifier and may contain name, contact details, city, district and state. Authentication and account information is separate from internal staff permissions. Unavailable workflows do not create a successful submission merely because a form is displayed.
4. How information is used
Enquiry information supports review, routing to the appropriate team and follow-up about your request. Account information supports authentication and record ownership. Submission identifiers and timestamps support duplicate prevention and enquiry cooldown controls. Internal status fields support administrative handling.
5. Service providers and processing infrastructure
The application uses Supabase for database storage, authentication and product-image storage. These services process information needed to provide their functions. Hosting and authentication delivery infrastructure may also process requests and technical information. This policy does not assert a particular storage country or transfer arrangement.
6. Cookies and technical information
Supabase server-side authentication uses cookies to maintain sessions where sign-in is used. Website requests also involve technical information needed to deliver pages and services. The current application does not include an analytics or advertising-pixel integration. This statement does not describe unrelated browser settings or third-party websites, and will need review if tracking tools are added.
7. Data retention
Enquiry and profile records are stored in the configured database. The application does not currently specify an automatic deletion period for these records. Retention requirements, including any applicable business and legal obligations, must be considered when records are reviewed or removed; no fixed deletion timeline is promised here.
8. Security
The application uses server-side validation, authenticated ownership checks where applicable, database access policies and staff permissions. Privileged database credentials are restricted to server-side code. These measures reduce risk but do not make electronic storage or transmission completely secure.
9. Data sharing
Submitted enquiries are available to authorised staff through the relevant administration workflow. Infrastructure providers process data required for their services. The public website does not publish contact, distribution or investor enquiry records. This is not a promise that no service provider or legally required recipient will ever receive information.
10. User rights
You can raise questions or request access, correction or deletion of information through the Contact page when enquiry submission is enabled. Applicable rights and any identity checks or limitations depend on the relevant law and circumstances. This website does not currently provide a self-service data export or deletion workflow.
11. Children/minors
The business enquiry services are intended for people able to make the relevant enquiry or act for their organisation. Please do not submit children’s personal information. The current website does not implement age verification or a parental-consent workflow.
12. Policy updates
This policy may be revised when website functionality, processing arrangements or applicable requirements change. The date above identifies this version. Any future analytics, advertising or additional data-collection tools require a separate privacy review.
13. Contact
Visit Contact Mellow Yard to see the available enquiry channel. Please identify privacy-related requests clearly in your message and avoid including unnecessary sensitive information.