We keep your pickup request for 18 months, then delete it.

This notice takes effect on 29 September 2026 and applies to every visit to easternmarket.us from that day. It replaces nothing earlier. If we change it, the new date goes at the top and on this rail.

The site is operated by Easternmarket, trading as Eastern Market Provisions at easternmarket.us. We are the controller of the personal data described here.

Postal address: 2934 RUSSELL STREET, DETROIT, MI 48207, DETROIT, MI, United States. Phone (313) 833-9300. Email [email protected].

The pickup request form. Your name, phone, email, street address (or "pickup only"), the kind of item you picked, your notes, the amount or unit you asked for, and whether you ticked the consent box. With it, automatically: your IP address, your browser's user-agent string, the page that referred you, the moment the form was shown and the moment you sent it.

The support chat. The messages you and the counter exchange, the name and contact details you choose to give, and a token stored in your browser so you can return to the same conversation.

Technical and log data. Our server writes a standard access log for each request: IP address, time, page requested, user-agent and referrer.

Cookie and storage identifiers. Your consent choice is stored in your browser under site_consent_v2. Nothing else on this site stores a choice. Advertising cookies are only set after you allow storage. The detail is on the cookie notice.

Advertising click identifiers. When you arrive from an ad, the link carries a click identifier: gclid, msclkid or fbclid. It is read from the address bar.

We take no account, no password, no payment and no card data. Nothing is sold on this site. You pay at the counter.

• Form details: to call or email you, confirm the weight and a pickup day, and label your order at the counter.
• Chat: to answer your question and to pick the thread back up when you return.
• IP, user-agent and timestamps: to stop spam and automated submissions, and to keep the site running.
• Consent choice: to remember what you decided so the banner does not ask on every page.
• Click identifiers and ad cookies, only after you allow them: to measure which ads brought a visit that turned into a request.

We do not sell your details and we do not build profiles for anyone else's marketing.

This site receives paid clicks. Google Ads, Microsoft Advertising and Meta Ads send traffic to it. Each attaches its own identifier to the link you click:

Until you allow storage, the identifier sits in the address bar and nothing is written to your browser for advertising. After you allow it, the platform's tag can store it and report that a visit led to a request. None of these platforms has any role in what we stock or what we charge.

The site uses Google Consent Mode v2. Before the page loads anything else, four signals are set to denied: ad_storage, ad_user_data, ad_personalization and analytics_storage. They stay denied until you press Allow. If you press Decline, or later withdraw through "Cookie settings" in the footer, all four go straight back to denied.

Your choice is kept in site_consent_v2 for 12 months, then the banner asks again.

If your browser sends the Global Privacy Control signal (the Sec-GPC header), we treat it as an opt-out of sale and sharing and of ad storage. We do not ask you again and the four consent signals stay denied.

• Google Ireland Ltd and Google LLC, for Google Ads. Receives gclid and the consent signals.
• Microsoft Ireland Operations Ltd, for Microsoft Advertising. Receives msclkid. Its own handling is set out in the Microsoft privacy statement at privacy.microsoft.com.
• Meta Platforms Ireland Ltd, for Meta Ads. Receives fbclid where a campaign runs there.
• Our hosting provider, which serves the site and stores the request database and chat.
• Our mail provider, which carries the notice of each new request to our inbox.

The ad platforms only receive data after you allow storage. The hosting and mail providers act on our instructions and nothing else.

We collect in the United States. If you visit from Europe, your data travels to the US to reach us and our host. Google, Microsoft and Meta move data between their Irish and US entities. Those transfers rely on the EU-US Data Privacy Framework where the recipient is certified, and on the European Commission's standard contractual clauses otherwise.

Every page and every form is served over HTTPS. The request database sits outside the public web folder and is reachable only through a password-protected panel used by the counter. Honeypot fields and a render timestamp filter automated submissions. Only the people who answer requests can read them. We keep no card numbers, so there are none to lose.

If you reach the site from the EU, the EEA or the UK, the GDPR gives you these rights over the data we hold about you:

• Access: a copy of what we have.
• Rectification: correcting a wrong phone number or name.
• Erasure: deleting it before the clock runs out.
• Restriction: keeping it but not using it while a dispute is settled.
• Portability: receiving it in a common machine-readable file.
• Objection: to processing based on legitimate interest.
• Withdrawing consent at any time, without affecting what was done before. Use "Cookie settings" in the footer for ads, or email us for the form and chat.

US state privacy law applies to this site. California residents have rights under the CCPA as amended by the CPRA: to know what personal information we collect and why, to delete it, to correct it, to limit use of sensitive information, and to opt out of the sale or sharing of personal information. Residents of other states with privacy laws in force have matching rights under those laws.

We do not sell personal information. Letting an ad tag store a click identifier can count as sharing for cross-context advertising, so Decline on the banner, or a Global Privacy Control signal, is your opt-out. We will not treat you differently for using any of these rights.

The site is for adults ordering food for a household. It is not directed at children and we do not knowingly take data from anyone under 16. If a child has sent us a request, write to us and we delete it.

Email [email protected] with "Data request" in the subject, or write to Easternmarket, 2934 RUSSELL STREET, DETROIT, MI 48207, DETROIT, MI, United States. Say what you want: a copy, a correction, a deletion or an opt-out. Give the name and phone or email you used, so we can find the record and check it is yours.

We answer within 10 days. If we need to confirm who you are, we ask once, by the contact details already on the record. An authorised agent can make a request for you with your signed permission.

You can complain to your state Attorney General. In California you can also complain to the California Privacy Protection Agency. Visitors from Europe can complain to the data protection authority in the country where they live or work. We would rather hear it first, but you do not need to ask us before going to them.

We build against WCAG 2.2 level AA as the target. The pages work with a keyboard alone, starting with a skip link. Every form field has a visible label and an error message in words, not colour. Body text on the dark ground is set in light bone on near-black for high contrast. The moving spec ticker pauses on hover and focus, and stops completely when your system asks for reduced motion. The pinned process on the home page releases into a plain list in the same case.

Known gap: the ticker can be busy for some readers even when paused. Its content is repeated once in plain text for screen readers. If something on the site blocks you, call (313) 833-9300 and place the order by phone, then tell us what failed so we can fix it.

A change is announced by a new date at the top of this page and on the rail, with a line saying what moved. If a change widens what we collect or who receives it, the cookie banner asks for your choice again before anything new runs.

Email [email protected] or call (313) 833-9300. Post goes to 2934 RUSSELL STREET, DETROIT, MI 48207. The same people who read pickup requests read these. For the rules on orders and holds, see the terms. To place an order, use the pickup request form.