1. Who we are
Not In The Supermarket is building Britain’s Founding Community for Independent Food. The data controller for this website is Not In The Supermarket, of Banff Business Centre, 8 Low Street, Banff, Aberdeenshire, Scotland, AB45 1AS.
Privacy questions can be sent to legal@notinthesupermarket.info.
2. Information we collect
When you join the Founding Community, we may collect:
- your name, email address and outward postcode;
- whether you are joining as a shopper or producer;
- food interests, motivations, expected shopping frequency and preferred collection or delivery options;
- producer business details, product categories, website, online-selling status and available fulfilment capabilities;
- your email and optional research-consent choices, with the date and wording presented;
- basic source information such as the page, referral source and campaign parameters that led to your registration; and
- technical information needed to operate, secure and diagnose the website.
At this stage we ask for an outward postcode, such as BS6, rather than a full home address. This is enough to map regional demand while collecting less precise location information.
When you contact us
When you use our contact form, we collect your name and email address, whether you are contacting us as a shopper, producer or for another reason, the reason and content of your message, and your preferred reply method. A telephone number is collected only if you ask us to reply by phone. Business name and postcode area are collected only when relevant or volunteered.
3. Why we use it
Founding Community emails
We use your consent to send the launch information, producer stories, progress updates, research opportunities and occasional launch offers described beside the sign-up box. You may withdraw consent at any time through the unsubscribe link in an email or by contacting us.
Building and improving the service
We use aggregated registration and preference information to decide where to launch, which producers and categories to prioritise, and which collection and delivery options would be useful and viable. Our anticipated lawful basis is our legitimate interest in researching and developing a viable service, balanced against the limited and proportionate information collected.
Optional research participation
When you separately opt in to research invitations, we may contact you about interviews, workshops or product tests. Participation in any study is voluntary and may involve a separate information notice or consent process.
Security and administration
We may use information where necessary to prevent abuse, maintain records of consent and opt-outs, respond to requests, and comply with legal obligations.
Answering contact enquiries
We use contact-form information to receive, route, answer and keep an operational record of your enquiry. Our anticipated lawful basis is our legitimate interest in responding to people who contact us and operating the pre-launch service. Contacting us does not add you to a marketing list. The automatic receipt is a service message confirming that we received your enquiry.
4. Who processes the information
The website is hosted through GoDaddy. Registration and contact-enquiry information is stored in the associated MySQL database. Brevo processes registration emails, internal enquiry alerts and contact-form receipts when those integrations are enabled.
We do not sell personal information. We only share it with service providers acting on our instructions, professional advisers where necessary, or public authorities when legally required.
5. International transfers
Some service providers may process information outside the United Kingdom. Where this happens, we will use an appropriate UK transfer mechanism or rely on another lawful safeguard and document the decision before launch.
6. How long we keep information
We intend to keep active Founding Community records while the pre-launch community is operating and for no longer than 24 months after the last meaningful engagement, unless a longer period is necessary for legal or operational reasons. We may retain minimal suppression and consent records for as long as needed to respect unsubscribe requests and demonstrate compliance.
We intend to keep routine contact enquiries for no longer than 12 months after they are resolved. We may keep a particular record longer where it is needed for an ongoing relationship, complaint, legal obligation or the establishment, exercise or defence of legal claims.
7. Your choices and rights
Depending on the circumstances, you may ask us to access, correct, delete, restrict or transfer your personal information, object to certain uses, or withdraw consent. Contact us using the address above. We may need to verify your identity before acting.
You may also complain to the UK Information Commissioner’s Office. We would appreciate the opportunity to resolve the issue with you first.
8. Cookies and analytics
The site is designed to operate without non-essential cookies by default. It may retain campaign attribution temporarily in your browser’s session storage so that a registration can be linked to the campaign that generated it. Session storage is cleared by the browser after the session.
If privacy-friendly audience analytics are enabled, this notice will identify the provider and explain the data involved. Advertising or behavioural-tracking technologies will not be introduced without the appropriate notice and consent mechanism.
9. Children
The Founding Community is intended for adults. We do not knowingly seek registrations from children under 18.
10. Changes
We may update this notice as the platform and service providers develop. The latest version will always appear on this page with its update date.