Privacy Notice

Who is responsible for your information?

TendrBox, operated by Lucky Odeh, is the data controller for the personal information described in this notice. You can contact us at hello@tendrbox.co.uk.

Information we collect

When you join the waitlist, we collect your name and email address. We may also collect your telephone number, UK region, relationship to the person in care, care-setting type, purchasing habits, likely interest, expected budget, delivery preference, frequently needed products and any comments you choose to provide.

Please avoid including medical records, diagnoses or other unnecessary sensitive information in the free-text fields.

How and why we use it

• To record and manage your place on the TendrBox Founding Family waitlist.
• To send the welcome email you expect after registering.
• To understand families' needs and help design and validate the planned TendrBox service.
• To respond when you contact us or express interest in a research interview.
• When you opt in, to send development updates, research invitations and launch information.
• To protect the form and supporting systems from misuse and maintain reliable records.

Our lawful bases

We rely on your consent for optional development and marketing emails. You can withdraw that consent at any time. We rely on our legitimate interests to maintain the waitlist, send the requested registration confirmation, respond to enquiries, understand demand and develop the proposed service. We consider these uses proportionate to your decision to register your interest.

Who processes the information?

We use Netlify to host the website and process the waitlist form, Supabase to securely store waitlist records, and Resend to send the welcome email. These providers process information on our behalf under their own security and data-protection commitments.

We do not sell your personal information. We may disclose information where required by law or where reasonably necessary to protect our legal rights.

International processing

Some service providers may process information outside the UK. Where this happens, we require an appropriate legal mechanism or safeguard for the transfer, such as UK adequacy regulations or approved contractual safeguards.

How long we keep it

We keep waitlist information while TendrBox is being researched and developed and for as long as it remains relevant to the reason you registered. We review the waitlist periodically and delete or anonymise information that is no longer needed. If you ask us to remove your information, we will do so unless we must retain limited information for a legal or security reason.

Analytics and cookies

With your permission, we use Google Analytics to understand visits to the website, such as which pages are viewed and how visitors find the site. Google Analytics may use cookies or similar technologies and process device, browser and usage information. Analytics storage is denied unless you select “Accept analytics”.

You can reject analytics without affecting the website or waitlist form. Your choice is stored on your device so we can remember it. You can change your choice by clearing this site's browser storage and revisiting the website.

Your choices and rights

Depending on the circumstances, you may ask us for access to your information, correction, deletion, restriction, portability or to object to how it is used. Where processing is based on consent, you can withdraw consent at any time without affecting earlier lawful processing.

If you have a concern, please contact us first so we can try to resolve it. You also have the right to complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint.

Security and updates

We use reasonable technical and organisational measures to protect waitlist information. No online system can be guaranteed completely secure. We may update this notice as TendrBox and its systems develop, and the latest version will be published on this page.