Who is who
The claimed organisation that runs the allotment site is the controller for waiting-list applications. AllotSpot stores that list only for that site and that verified claim, as a processor. Other operators cannot see it. Search stays anonymous and does not require an account.
What is processed
Name, address, postcode, and email, plus optional phone, preferred plot size, and notes. We do not collect date of birth, disability status, or other special-category data. Missing facts stay unknown — we do not invent emails or wait counts.
Sub-processors
Neon hosts the production database and operator authentication (Neon Auth). Resend sends transactional email when that service is configured. Local development may log that a template was sent without recording the recipient.
Retention
Closed records (withdrawn, declined, or stale) can be anonymised after 90 days. People still queued, offered, or accepted are not swept away automatically. The operator can export or remove personal details for this listing.
Operator acknowledgement
Before enabling intake or importing a CSV, the operator must confirm they have read this template. Ticking that box records an acknowledgement timestamp. It does not replace a parish solicitor’s review if they want one.