← Back to MIGHTY

Privacy Policy

Last updated: 20 May 2026

This Privacy Policy explains how AJ Food Brands Ltd (“MIGHTY”, “we”, “us”, or “our”) collects, uses, and protects your personal data when you sign up to our waitlist or otherwise interact with us at get-mighty.co.uk.

We are the data controller for the personal data we collect about you. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

AJ Food Brands Ltd is a private limited company registered in England and Wales.

2. What data we collect

When you sign up to the MIGHTY waitlist, we collect:

  • Your email address — to send you waitlist confirmation, product updates, and (eventually) launch communications.
  • Signup source — which page or referral link you came from, so we understand which channels are working.
  • A referral code assigned to you, plus any code used to refer you, so we can track our referral programme.
  • Your IP address and basic browser information (captured automatically) — used for fraud prevention and to detect abuse of the signup form.
  • Tier assignment (e.g. Founding 100, Founding 200) — based on the order in which you signed up.

We do not currently collect your name, phone number, address, or any sensitive personal data through the waitlist form. We will update this policy if that changes.

3. How we use your data

We use your personal data to:

  • Send you a confirmation email when you join the waitlist (transactional).
  • Send you updates about MIGHTY, including product news, behind-the-scenes content, and launch announcements (marketing).
  • Show you ads about MIGHTY on third-party platforms including Meta (Facebook and Instagram) and Google, where your email address has been matched to an account you hold on those platforms. We never share the content of your communications with us with these platforms; we share only a securely hashed version of your email address for matching.
  • Detect and prevent abuse of our signup form (e.g. bots, fake signups).
  • Improve our website and understand which marketing channels are effective.

4. Legal basis for processing

We rely on the following legal bases under UK GDPR:

  • Consent — when you sign up to the waitlist, you consent to us using your email address for the purposes described in this policy.
  • Legitimate interests — for fraud prevention, service security, and understanding the performance of our marketing channels in aggregate.

You can withdraw your consent at any time by clicking the unsubscribe link in any marketing email, or by emailing hello@get-mighty.co.uk.

5. Who we share your data with

We use the following trusted service providers (data processors) to run our service. Each processes your data on our instructions and under contractual data-protection obligations:

  • Supabase Inc. (United States) — stores the waitlist database. Supabase relies on Standard Contractual Clauses and the UK Data Bridge for international transfers. Supabase privacy policy.
  • Postmark / ActiveCampaign LLC (United States) — sends our transactional and broadcast emails. Postmark privacy policy.
  • Vercel Inc. (United States) — hosts our website. Vercel privacy policy.
  • Meta Platforms, Inc. (United States) — for ad targeting via Custom Audiences and Lookalike Audiences, and for conversion measurement. Meta privacy policy.
  • Cloudinary (United States) — hosts our images and video. Cloudinary privacy policy.

We do not sell your personal data, and we do not share it with any third party for their own independent marketing purposes.

6. How long we keep your data

We keep your waitlist data for as long as you remain subscribed. When you unsubscribe, we retain a minimal record of your email address on a suppression list so we don't accidentally email you again. We will delete this record on request.

7. Your rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you.
  • Rectify inaccurate or incomplete data.
  • Eraseyour data (“right to be forgotten”).
  • Restrict or object to our processing.
  • Withdraw consent at any time.
  • Lodge a complaintwith the UK Information Commissioner's Office (ICO) at ico.org.uk if you believe we've mishandled your data.

To exercise any of these rights, email hello@get-mighty.co.uk and we'll respond within 30 days.

8. Cookies and tracking

We use essential cookies for site functionality. We may also use the Meta Pixel for conversion tracking and to enable ad targeting via Meta Custom Audiences, and Google Analyticsfor understanding site usage. You can opt out of Meta and Google tracking in your browser or via the respective platforms' ad-preferences settings.

9. International transfers

Several of our processors (Supabase, Postmark, Vercel, Meta, Cloudinary) are based in the United States. We rely on the UK Data Bridge (where applicable) and on Standard Contractual Clauses to ensure your data is protected to UK GDPR standards when transferred outside the UK.

10. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page shows when it was most recently changed. For significant changes affecting how we use your data, we will notify you by email.

11. Contact

If you have any questions about this Privacy Policy or how we handle your data, email hello@get-mighty.co.uk.