Privacy

How we handle your data.

We collect the minimum we need, we never sell it, and we tell you plainly what happens to it. Last updated 28 May 2026.

Who we are

Grocery Insight Limited (company no. 07514588) is the data controller for the personal data described here. Registered at The Old Coach House, Rear of Eastville Terrace, Harrogate HG1 3HJ. For anything to do with your data, email [email protected].

What we collect, and why

Contact enquiries. When you use a contact form, we collect your name, work email, company and message so Steve can respond. Lawful basis: our legitimate interest in answering your enquiry. We don't add you to any marketing list unless you separately subscribe.

Newsletter. When you subscribe to our newsletter, we collect your email address (and your name, if you give it) to send you the weekly email and occasional related updates. If you take a paid subscription, our payment provider processes your payment details and we never see your full card number. Lawful basis: your consent, and for paid subscriptions, performance of a contract. You can unsubscribe at any time via the link in any issue, or by emailing us.

Email engagement. Our newsletter records opens and link clicks so we can see what readers find useful and improve the content.

Client image library. If you're given access to the clients area, we set one strictly necessary cookie to keep you signed in.

Who processes your data

We use a small number of trusted providers to run these services:

  • Substack — our newsletter platform (stores subscriber details, sends the newsletter, and runs subscriptions).
  • Stripe — processes payments for paid subscriptions.
  • Cloudflare — hosts the website, processes the sign-up form, and provides cookieless Web Analytics.
  • Google Workspace — our email inbox, where contact enquiries are received.

Some of these providers are based in the United States. Where your data is transferred outside the UK, it is protected by appropriate safeguards, such as the UK International Data Transfer Agreement or Standard Contractual Clauses.

Cookies and analytics

We keep cookies to the bare minimum and use no advertising or third-party tracking cookies — so there's no cookie banner to wade through.

  • Cloudflare Web Analytics — cookieless, and collects no personal data.
  • Client area login — one strictly necessary cookie (gi_clients_session) keeps you signed in to the clients library. It's essential to that area, so it needs no consent.
  • Client area activity — within the signed-in clients library we keep a first-party record of which galleries and images you view and for how long, so we can understand engagement and improve what we share. This stays on our own systems, involves no third-party trackers, and sets no additional cookies.
  • Newsletter sign-up and archive — hosted by Substack on read.groceryinsight.com, which may set its own cookies governed by Substack's privacy policy.

How long we keep it

We keep enquiry emails for as long as we need them to handle your query and for our business records. We keep newsletter subscriber data until you unsubscribe or ask us to delete it.

Your rights

You have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to how we use it, to data portability, and to withdraw consent at any time. To exercise any of these, email [email protected] and we'll deal with it promptly.

If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk — though we'd rather you came to us first so we can put it right.

Grocery Insight Limited · Reg 07514588 · VAT GB 163 8857 67 · The Old Coach House, Rear of Eastville Terrace, Harrogate HG1 3HJ.