Privacy notice
Last updated 4 September 2026
This notice explains what personal data mamaPut collects through this website, why we collect it, who we share it with and what rights you have over it. It covers UK data protection law: the UK GDPR and the Data Protection Act 2018.
mamaPut is an early-stage business. Right now the site does two things: it takes applications from food vendors who want to join the platform, and it takes email addresses from people who want to know when we launch in their city. There is no ordering, no payment and no account system yet. When those arrive, this notice will be updated before they go live.
Who is responsible for your data
The data controller is MAMAPUT LTD, a company registered in England and Wales, company number 17432221, registered office Belmont House, St. Faiths Street, Maidstone, England, ME14 1LH. Our ICO registration number will be added here as soon as registration completes.
For anything to do with your data, email info@mamaput.app. We aim to reply within five working days and must respond to formal requests within one month.
What we collect, and why
| What | Why | Lawful basis |
|---|---|---|
| Vendor application Business name, your name, email, phone, city, cuisine, and your answers about how you take orders today. | To assess whether your kitchen is a fit, to contact you about it, and to understand what vendors need so we build the right thing. | Legitimate interests: you approached us about a commercial relationship and would reasonably expect us to reply. |
| Waitlist Email address, city, and optionally the dish you miss most. | To email you once when we launch in your city, and to decide which cities and which dishes to prioritise. | Consent: you asked us to tell you. Withdraw it at any time and we delete your entry. |
| Technical data IP address, country, browser user-agent, and the time of your request. | To keep the site up, to block automated abuse of the forms, and to know roughly where interest is coming from. | Legitimate interests: keeping a public form from being flooded with spam. |
We do not use advertising trackers, we do not build behavioural profiles, and we do not sell or rent your data to anyone. There is currently no analytics software on this site, which is why you have not been asked to accept cookies.
Cookies and similar technology
The public pages of this site set no cookies of their own. We use Cloudflare Turnstile on both forms to tell people from bots; it may store a short-lived value in your browser so you are not challenged repeatedly. Turnstile is designed not to track you across websites and does not build an advertising profile. Our internal admin area uses a session cookie, but only staff ever see it.
Who else handles your data
We keep the number of third parties deliberately small. Each of these is a processor acting on our instructions, under a data processing agreement.
- Cloudflare hosts the site and stores form submissions in a database located in Western Europe. Also provides Turnstile and routes email sent to our addresses.
- Brevo sends us a notification email when a vendor applies, and will send launch emails to the waitlist. Servers in the EU.
- Google, during our current transition, a copy of each vendor application is also written to a private Google Sheet as a backup. This mirror is temporary and will be switched off once we are confident in the primary store.
Some of these providers are US-headquartered. Where data leaves the UK it is transferred under the UK International Data Transfer Addendum or an adequacy decision.
How long we keep it
Vendor applications are kept for as long as we are considering or working with you, and for two years after our last contact if nothing comes of it, long enough to remember a conversation, short enough not to hoard. Waitlist entries are kept until you unsubscribe or until twelve months after we launch in your city, whichever comes first. Technical logs are kept for a short period, typically days rather than months.
Your rights
Under UK data protection law you can ask us to give you a copy of your data, correct it, delete it, restrict what we do with it, or object to our using it. You can also ask for it in a portable format, and where we rely on consent you can withdraw that consent at any time. Exercising any of these rights is free and we will not treat you differently for it.
Email info@mamaput.app and say what you want. We may ask you to confirm your identity first, so we do not hand your data to someone else.
Complaints
If you think we have handled your data badly, please tell us first so we can put it right. You also have the right to complain directly to the Information Commissioner’s Office at ico.org.uk/make-a-complaint, or by calling their helpline on 0303 123 1113.
Changes to this notice
We will update this page when what we do with data changes, in particular when ordering, payments and accounts arrive. The date at the top always reflects the current version. If a change materially affects you and we hold your email address, we will tell you.