Booth & Banner runs registration for city kids markets. That means we hold information about children, so this page is written plainly rather than in legal boilerplate. Last updated 4 September 2026.
From a parent or guardian who registers a booth
Your name, email address, mobile number, and home address. The address is the one thing the whole system exists to check: a city market is for that city's families, and the address is how that is proven.
About the children on an application
First and last name, and date of birth. The name goes on the booth. The date of birth is used once, to check the child is inside the market's age range on market day, and for nothing else.
Proof of residency
Either a code we mail to your address on a postcard, or a document you upload if your market uses document verification. A document is only ever seen by your market's coordinator.
From volunteers
Name, email, and optionally a phone number and what you would like to help with. Volunteering requires no account.
Automatically
Which pages were viewed, and a visitor count. We do not use cookies for analytics and we do not store IP addresses against page views: a visitor is counted using a hash that is rotated daily and cannot be traced back to a person or linked across days.
The coordinator of the market you registered with, and nobody else. Every query in this system is scoped to a single market, so one city's coordinator cannot see another city's applicants. Coordinators sign in with a one-time link and, in production, a second factor.
Every time a coordinator opens a residency document or exports a list, that is recorded with who did it and when. Those records are kept as the audit trail of decisions about your application.
A job runs every day and deletes what is past its date. These are the actual periods it uses, not intentions.
Uploaded residency documents
Deleted 30 days after your coordinator decides on them, or 30 days after you uploaded them if nobody ever decided, and when the season is archived if that comes first. If nobody decided, we also close the review and email you so you can upload another one. That is the most sensitive thing we hold and it has the shortest life. The record that a document was reviewed stays; the image does not.
Children's names and dates of birth, your address and phone number
Removed 18 months after market day. That covers the following year's market, so a returning market can still see who sold last year. A city may be subject to public records rules that require longer, and a market can be set to a longer minimum here, which only ever lengthens this period. If you want your family's details removed sooner, ask your market's coordinator: they have a button for it on your application, and using it is recorded in the audit log. While your application is still taking part in a season that is running, the coordinator needs those details to run the market, so the button removes them once the booth is canceled or the season is over. Volunteer sign-ups are deleted on the same clock.
Your booth name, your name, and what happened to the application
Kept as the market's record of who took part. This is what is left after the 18 months above, and it is deliberately not deleted: a market has to be able to say who sold at it.
The text of a message is removed after 90 days, and the text of a sign-in link after one day, because a sign-in link is a way into your account. The delivery record, meaning who it went to, its subject, and whether it arrived, is kept for 2 years and then deleted. If you unsubscribe, that stays on file permanently, because forgetting it would mean emailing you again.
Text messages
The same schedule as email: the message and the phone number it went to are removed after 90 days, and the delivery record is kept for 2 years and then deleted. If you reply STOP, that stays on file permanently, because forgetting it would mean texting you again.
Messages you send us
Contact-form messages and their replies are deleted after 2 years. The IP address a message was sent from is deleted after 90 days.
Sign-in records
Used sign-in links are deleted a day after they expire. An account nobody has signed into for 3 years is anonymized: the name, email address, and phone number are replaced and any Google connection is removed. The account is not deleted outright, because a market's record of who sold at it points at it.
Visitor counts
After 90 days each visit is folded into a daily total and the visit itself is deleted, which removes the rotating visitor hash, the referring site, and the time of day. What is left is a count of views and visitors per page per day, which holds nothing about a person and is kept indefinitely.
The audit trail
Kept for as long as the market is on this platform. It records who opened a document, who exported a list, and who changed your application, which is the part of this system that protects you, so it outlives the data it describes. No automatic job deletes any of it, including the addresses recorded in it. Removing it is something we would do by hand if a city left the platform, and we would say so in writing to that city.
We send transactional messages about your own application: sign-in links, deadline reminders, and notices about your place in the queue. Coordinators can also send announcements about their market. Every announcement carries an unsubscribe link, and unsubscribing is honoured across the whole platform. Sign-in links and deadline notices are not marketing and are sent regardless, because missing one costs you your booth.
Text messages are optional and are only ever used for an urgent notice on event day, such as a weather cancellation, a delayed start, or a venue change. You only receive one if you ticked the box on your application, and we record the date and time you did. Unticking it on a draft removes the consent, and replying STOP to any text ends them straight away and everywhere on this platform, not just for one market. Every urgent notice also goes out by email, so opting out of texts never means missing the news. Message and data rates may apply.
Children do not have accounts here and cannot sign in. Everything about a child on this platform is entered by their parent or guardian, who controls it. A parent can see and change what was entered from their own dashboard, and can ask their coordinator to remove it. The coordinator can do that the same day from the application itself, once the application is no longer taking part in a season that is running, which means straight away if the booth is canceled. It is removed automatically 18 months after market day in any case.
Contact your market's coordinator first: they can see, change, and remove your application. For anything they cannot resolve, or a question about the platform itself, email privacy@boothandbanner.com.