A Waqif project

Privacy notice

What we do with the details you give us when you register your interest in becoming a community grocery member — in plain English.

Last updated: 10 August 2026

Who we are

This website is run by Waqif, a not-for-profit registered in England and Wales, company number 13129605. Waqif is the data controller for the information described here — meaning we are the ones responsible for it.

If you want to talk to us about your information, email admin@waqif.org.uk.

What we collect

If you fill in the register your interest form, we collect:

  • your name
  • your mobile number
  • your email address
  • the date and time you submitted the form, and a record that you ticked the consent box

We also keep any notes we write ourselves after speaking to you — for example "called Tuesday, wants to join at launch" — and a marker for whether we have contacted you yet.

Our hosting provider records the usual technical information about requests to the site, including IP addresses, as part of running and protecting the service. We use that to stop automated abuse of the form. We don't use it to build any profile of you, and we don't link it to your registration.

That's everything. There is no other form on this site, and we don't ask for anything we don't need.

What we don't do

  • We don't sell your details, and we never will.
  • We don't pass them to other charities, advertisers or list brokers.
  • We don't use analytics, advertising trackers or social media pixels on this site.
  • The public pages set no cookies at all. There's nothing to consent to, which is why you weren't shown a cookie banner. (Waqif staff signing in to our private admin page get one login cookie — that's for us, not for visitors.)
  • We don't make any automated decision about you.

Why we collect it, and our lawful basis

We use your details for one purpose only: to contact you about community grocery membership — mainly to let you know when membership opens, and to answer any questions you have about it.

Our lawful basis under UK GDPR is your consent, which you gave by ticking the box on the form. That means:

  • You can withdraw it at any time, and we'll stop.
  • Withdrawing is as easy as giving it — one email to admin@waqif.org.uk.
  • Registering your interest is not a commitment to join, and involves no payment.

We won't use your details for anything else. If we ever want to, we'll ask you first.

Who else handles your information

We're a small organisation and we use established service providers to run the website rather than operating our own servers. They process your information on our instructions only, and are not allowed to use it for their own purposes.

ProviderWhat they doWhere
Supabase Stores the database of registrations We've chosen their London region, so the records themselves are held in the United Kingdom
Vercel Hosts the website and runs the form The form is processed in their London region. Pages are served from whichever of their global locations is nearest you. The company itself is based in the United States.
Resend Sends us the notification email when you register We've chosen their Ireland region, so the email is processed in the EU. The company itself is based in the United States.
Hostinger Provides our @waqif.org.uk email, where that notification arrives European Union

Where a provider lets us choose where your information is handled, we've chosen the UK or the EU — the database is in London and the email is processed in Ireland. Some of these companies are nonetheless based in the United States, so a copy of your details may still be transferred outside the UK in the course of running the site. Where that happens we rely on the data protection terms in our agreements with those providers, including standard contractual clauses, to keep your information protected to a UK standard.

How long we keep it

We keep your registration for up to 24 months from the day you submit the form.

If you become a member in that time, your details move into our membership records and are kept for as long as you're a member. If you don't, we delete your registration at the end of the 24 months — and if we're going to be much slower than expected to open, we'll get back in touch rather than sit on your details indefinitely.

You don't have to wait for any of that. Ask us and we'll delete it straight away.

Your rights

Under UK data protection law you have the right to:

  • Ask what we hold about you, and get a copy of it.
  • Have mistakes corrected — a misspelled name or an old phone number.
  • Have it deleted. We can do this, and we do mean delete, not hide.
  • Withdraw your consent, which stops us contacting you.
  • Object to or restrict what we do with it.
  • Ask for it in a portable form you can take elsewhere.

To use any of these, email admin@waqif.org.uk. Just tell us what you want — you don't need to quote any law at us. We'll respond within one month, and it's free.

If you're unhappy with us

Please tell us first — email admin@waqif.org.uk and we'll try to put it right.

You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office, at any time. You don't need our permission and you don't have to come to us first.

Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113
ico.org.uk/make-a-complaint

Changes to this notice

If we change how we use your information, we'll update this page and change the date at the top. If it's a significant change and we still hold your details, we'll email you about it rather than expect you to check back here.