How The Local Harvest Works
A plain-English, end-to-end guide. How money flows, how deliveries work, how we verify producers, what we do with your data — and exactly what to do if something goes wrong.
Find your section
Twelve sections that cover the whole platform. Click any tile to jump straight to it.
The big picture
What The Local Harvest is, who it's for, and how money flows through it.
The Local Harvest is a postcode-based UK directory and marketplace for British food producers — farmers, fishermen, bakers, butchers, dairies, market gardens, smallholdings and artisan makers. We exist to put real producers a few clicks away from real customers, without the supermarket layer in the middle.
We’re a marketplace, not a logistics company. Producers list their own products, set their own prices and their own delivery / pickup terms, and fulfil orders themselves. We provide the shopfront, the search, the secure payments, the identity / approval layer and the customer support that sits on top.
Money never sits in our account. Customer payments route through Stripe Connect directly to the producer’s own Stripe balance, minus a small platform fee. We never see or store card numbers — Stripe handles all of that.
How a single order flows
For shoppers — your full journey
From the first postcode search to leaving a review after your delivery.
Search by postcode or town
Open a producer profile
Add to basket
Check out securely
Get your confirmation
/orders/[id], including a status timeline (paid → preparing → ready → dispatched → delivered).Receive your order
Leave a review
Browse anonymously
You can search, filter and view producer profiles fully anonymously. We only ask for an account when you check out, so we have somewhere to send your confirmation and the producer has someone to contact if a question comes up.
For producers — your full journey
What signing up, getting approved, listing products and getting paid actually looks like.
Register and pay listing fee
billing@thelocalharvest.co.uk.Verify your email
noreply@thelocalharvest.co.uk within 24 hours. You can request another from your dashboard if it expires.Wait for admin approval
Connect Stripe payouts
Pin your fulfilment area
Add your first products
Manage incoming orders
Get paid
Tax and VAT
Pause or cancel
Why a profile may not be visible
A profile shows publicly only when ALL of: approval status = approved, profile active, at least one of marketplace_visible or directory_visible is on, and you’re on a lifetime-free tier OR your subscription is active / trialing. If a profile vanishes, check those toggles first.
Money, fees and payouts
Exactly where the money goes, who takes a cut, and how refunds work.
For shoppers
- The price you see at checkout is the price you pay.
- We charge nothing extra — the platform fee comes from the producer side.
- All major UK debit / credit cards via Stripe, plus Apple Pay and Google Pay.
- Refunds go back to the original card, typically within 5–10 business days.
For producers
- You set your own prices — we never auto-discount or upsell on your behalf.
- Stripe takes its standard fee (1.5% + 20p for UK cards). Platform fee is in addition; see /pricing.
- Payouts land in your Stripe Connect bank account. You control the schedule.
- On a chargeback Stripe holds the disputed amount; we forward any evidence we hold.
Refunds & cancellations
- Producers can refund their own orders directly from the dashboard.
- Admin can refund on a producer’s behalf if a producer is unreachable.
- Stock is automatically returned to inventory on refund or cancellation.
- Every refund is double-entry-bookkeeping logged for exact Stripe reconciliation.
Deliveries, pickup and service area
We don't run vans. Producers fulfil orders themselves — here's how.
Collection
- Customer collects from a fixed location at a stated time window.
- Pickup instructions appear on the order page after checkout.
- Most common for farm shops, market stalls and cellar doors.
Local delivery
- Producer delivers within a defined radius (typically 5–30 km).
- Delivery area shown as shaded coverage on the producer’s map.
- Often the producer’s own van round — keeps the food chain short.
Courier (national)
- Some producers post non-perishable products via Royal Mail / next-day couriers.
- Courier availability is shown on each individual product.
- Lead times (e.g. “ready within 48 hours”) are set per product.
Trust, verification and reviews
How producers are vetted, why reviews are credible, and what we don't claim.
Manual admin review
- Every producer is reviewed by a real human before going live.
- We check business name, address, contact details and listing copy.
- We display certification marks (Soil Association, Red Tractor, MSC) only where awarded.
- We do not run farm inspections — that is the role of accreditation bodies.
Verified reviews only
- A review can only be left after a real, paid, delivered order.
- We never edit or filter genuine reviews.
- We will remove reviews that are abusive, identifiable to a specific employee, or off-topic.
- Every review links back to the order id internally for audit.
Honest pre-launch copy
- Producer ratings on the homepage are calculated from these verified reviews.
- Pre-launch testimonials use initials and region only and are flagged as such.
- We follow ASA / CAP guidance on what is and isn’t a real review.
- No invented “500+ happy customers” — see /about for our stance.
Emails and notifications
What we send, when, and from which mailbox — all on the verified thelocalharvest.co.uk domain.
noreply@thelocalharvest.co.ukAccount & orders
- Sign-up confirmation
- Login confirmation
- Password reset
- Order confirmations
- Order status updates
billing@thelocalharvest.co.ukReceipts & invoices
- Subscription invoices
- Listing-fee receipts
- Refund confirmations
- Payout summaries
support@thelocalharvest.co.ukHelp & replies
- Replies to support enquiries
- Producer / Stripe payout help
- Manual password-reset assistance
hello@thelocalharvest.co.ukGeneral contact
- Messages from the contact form
- Lost-order / missing-email queries
- Anything that doesn’t fit the other three
privacy@thelocalharvest.co.ukData & GDPR
- Subject Access Requests
- Data export, correction or deletion
- Anything covered by /privacy#your-rights
legal@thelocalharvest.co.ukLegal & abuse
- Copyright / IP / trademark notices
- Abuse and Acceptable Use reports
- Anything covered by /terms
Privacy, data and cookies
Short version: we store the minimum we need, we don't sell your data, and you can see / export / delete what we hold whenever you want.
Lawful basis
Mostly contract (running your account / orders) and legitimate interests (security, fraud prevention).
Maps & analytics
Consent-gated. Google Maps and Google Analytics never load before you accept the cookie banner.
Audit log
Every consent decision is recorded (anonymised user id + hashed IP + UA + policy version).
Data export
Export everything we hold about you in JSON from Dashboard → Settings → Privacy.
Account deletion
Personal data removed within 30 days. Transaction records pseudonymised but retained for HMRC.
Sub-processors
Supabase, Stripe, Resend, Google Maps, Vercel. Full list at /privacy.
Security, reliability and uptime
The boring-but-important stuff that protects your money, your data and your account.
Card data
Card details never touch our servers — Stripe handles them at PCI-DSS Level 1.
Authentication
Passwords bcrypt-hashed via Supabase Auth. Reset / magic links are single-use, expire in an hour.
Database isolation
Row-level security on every table — even buggy app code can't expose another user's data.
Transport
HTTPS-only with HSTS. Cookies are HTTP-only, secure, SameSite=Lax.
Webhooks
Every Stripe / Resend webhook verifies a cryptographic signature; replays are de-duplicated server-side.
Backups
Daily automated backups on the Supabase infrastructure side, plus a write-only audit log.
Monitoring
Uncaught errors centralised. Performance monitored externally; planned maintenance announced 24h+ ahead.
Rate limiting
Every public POST endpoint we own is rate-limited per IP, and Supabase Auth adds its own limits on every login / signup / reset attempt.
When something goes wrong
Twelve real-world failure modes and the exact steps to take. If yours isn't listed, jump to /contact.
Wait two minutes, then check your spam / junk folder. Search for "thelocalharvest". If still missing, sign in (we mark your account active even if the email is delayed) and request a re-send from Dashboard → Settings → Email. If you cannot sign in, email hello@thelocalharvest.co.uk from the same address you signed up with and we will resend manually. We also queue every transactional email through Resend with delivery and bounce tracking, so we can see whether your provider rejected the message.
This is almost always a webhook delay (under one minute typically). Refresh after 60 seconds. If it is still missing after 5 minutes, contact hello@thelocalharvest.co.uk with your card-statement reference (the alphanumeric string near the charge). We can look up the Stripe PaymentIntent and either provision the missing order or refund you immediately if the producer cannot fulfil. We never keep money for an order we did not create.
Refunds are issued back to the original card via Stripe. The producer or our admin team must initiate the refund first; once initiated, your bank typically clears it within 5–10 business days (debit cards are usually faster than credit). If 10 business days have passed since the refund email arrived in your inbox, email hello@thelocalharvest.co.uk with the order number and we will dig into the Stripe ledger.
Reach out via the messaging button on their profile first; many producers are small operations and reply outside business hours. If 48 hours pass with no reply, email hello@thelocalharvest.co.uk with the order number. Per our Terms of Service §7, if a producer cannot fulfil within their stated lead time and does not reach a fair resolution, we will refund you in full and follow up with the producer ourselves.
Take photos within 24 hours of delivery / collection. Message the producer through their profile with the photos and your order number — most resolve issues at-source by replacing items or partially refunding. If the producer does not respond or refuses, forward the same evidence to hello@thelocalharvest.co.uk and we will mediate. Your statutory rights under the Consumer Rights Act 2015 (goods of satisfactory quality, fit for purpose, as described) are unaffected by anything in our Terms.
Reset links are valid for one hour. If yours has expired, request a new one from /forgot-password. If you never receive the email, check your spam folder — it is sent from noreply@thelocalharvest.co.uk. If the issue persists, email support@thelocalharvest.co.uk with the email address on the account; we can manually issue a fresh link. Auth endpoints (sign-in, sign-up, password reset) are rate-limited per IP by Supabase Auth, and we add an extra middleware-level limit on top, which together make brute-force impractical.
Email privacy@thelocalharvest.co.uk with proof of identity (a copy of a photo ID matching the email on file). Under UK GDPR we respond within 30 days. We will verify identity, then action your request: data export (JSON), correction, deletion, restriction or objection. See /privacy#your-rights for the full list.
A profile is publicly visible only when ALL of: (a) approval_status = "approved", (b) profile_active is on, (c) marketplace_visible OR directory_visible is on, and (d) you are on a lifetime-free tier OR your subscription_status is active / trialing. Open Business Dashboard → Profile to see which gate is failing. If everything looks correct but you are still not visible, allow up to 5 minutes for our search index to rebuild. If still missing, email support@thelocalharvest.co.uk with your business name.
Stripe sends you a separate email when a payout fails — usually because of an outdated bank account or a missing verification document. Open Business Dashboard → Billing → Stripe Connect dashboard, complete any flagged "action required" items, then re-trigger payout from the Stripe dashboard. We never hold producer funds; everything routes directly through your Connect account. If you are stuck for more than 7 days, email support@thelocalharvest.co.uk and we will introduce you to the right Stripe support thread.
One-time auth links are single-use and expire. If the link has been used or expired, you will see a "link invalid" message — request a new one from /login or /forgot-password. We invalidate previous links on every request, by design, so an attacker who later finds an old email cannot reuse it.
We occasionally take the site offline for short maintenance windows; we always announce planned ones at least 24 hours in advance via email and on the homepage. If maintenance lasts more than 30 minutes you should see updates on our status communications channel. Stripe checkouts and webhooks continue to function during maintenance — we do not lock you out of orders that are mid-flight.
Our application sends every uncaught error to our internal error log via /api/error-log, which means we usually know about it before you do. Refresh once. If the error persists, copy the URL and any "Error Digest" id you can see and email it to hello@thelocalharvest.co.uk — that digest lets us pinpoint the exact stack trace. The more detail you provide (browser, time, what you clicked), the faster we can fix it.
Sign in, then Dashboard → Settings → Privacy → "Delete my account". Your profile and personal data are permanently removed within 30 days. Order records are kept for the legally required retention period (HMRC requires 6 years of transaction records) but are pseudonymised after deletion — they are no longer linked to your name or contact details, only to the order id and amounts.
What is coming next
An honest snapshot of where we're headed. None of these are promised delivery dates — they're directions of travel.
One-checkout multi-producer baskets
Multi-producer baskets that pay out per producer in the background, so customers see one Stripe charge.
Saved baskets and reorders
Save your favourite weekly baskets and reorder in one click.
Producer events calendar
Farm-shop hours, farmers' market dates, open-day events — all in one place.
Native mobile app
iOS first, then Android, with the same feature set as the web app.
Soft-launch in Ireland & Scotland
Once the UK marketplace has critical mass, we'll roll out to selected regions.
Tell us what's missing
Want to see something on this list? Let us know via /feedback.
Glossary
Every term used elsewhere on the site, defined in plain English.
We aim to reply within one UK business day
Try the Help Centre or FAQ first for the quick answers. For everything else, drop us a message — every email goes to a real person.