Privacy Policy

Effective Date: October 26, 2026

Business Name: Data Waffle ("we", "our", "us")

Domain: datawaffleleads.com

Contact Email: santino@datawaffleleads.com

1. Overview & Scope

Data Waffle operates a business-to-business (B2B) sales intelligence and market data subscription platform. We aggregate, filter, and enrich publicly available business records to deliver weekly B2B lead feeds to commercial suppliers and service providers.

We are committed to processing data responsibly and in full compliance with the UK Data Protection Act 2018, the UK General Data Protection Regulation (UK GDPR), and the Privacy and Electronic Communications Regulations (PECR).

2. Lawful Basis for Processing (UK GDPR)

We process business data under the lawful basis of Legitimate Interests (Article 6(1)(f) of the UK GDPR).

Our legitimate business interest is providing commercial market intelligence to help UK businesses identify and connect with newly registered commercial venues. We ensure that our processing activities are balanced, strictly limited to corporate data, and do not override the fundamental rights and freedoms of data subjects.

3. Categories of Data We Collect & Process

We strictly process public business records and corporate data points. This includes:

Public Entity Details: Business trading names, commercial addresses, postcodes, local authority food hygiene registration IDs (FHRSID), and public registration dates.

Corporate Register Matches: Matched Companies House entity names, registered office addresses, company status, and primary activity (SIC classification).

Public Officer Information: Active company director names and appointment roles as published on the official Companies House public register.

Subscriber Account Data: Customer contact names, business email addresses, and billing information collected via our payment processor (Stripe) during subscription signup.

We do not collect, store, or process sensitive personal data, consumer financial details, or non-commercial private personal information.

4. How Data Is Sourced

All data points supplied in Data Waffle lead feeds are sourced directly from public UK government registries and open data portals, including:

The UK Food Standards Agency (FSA) public food hygiene register.

The UK Companies House REST API and public registers.

5. B2B Direct Marketing & PECR Compliance

Data Waffle provides intelligence exclusively for B2B commercial outreach. Under PECR regulations:

Corporate entities (Limited Companies, PLCs, LLPs) may be contacted with relevant commercial offers.

Recipients of direct marketing must always be provided with a simple, clear mechanism to opt out or unsubscribe from future communications.

Subscribers using Data Waffle lead feeds are required under our Terms of Service to conduct all outbound marketing responsibly and in accordance with UK data protection laws.

6. Data Storage & Security

We implement strict technical and organizational measures to secure customer data and database infrastructure. Subscriber transaction details are processed securely via Stripe; Data Waffle does not store raw credit card or bank account details on its servers.

7. Your Data Protection Rights

Under UK data protection law, individuals and corporate officers have rights regarding their data, including:

Right of Access: Request copies of any personal/director details held.

Right to Rectification: Request correction of inaccurate public data.

Right to Erasure / Objection: Request the removal or restriction of your details from our enrichment feeds.

To exercise any of these rights, please contact our Data Lead at santino@datawaffleleads.com. Requests are processed within 30 days without charge.