Privacy Policy — Field House, Morpeth

This page explains what happens to your details when you join the Field House waitlist at fieldhousespaces.co.uk. It is short, because we ask for very little and do very little with it.

Field House is not open yet. This site is a waitlist page, this privacy page and a terms page, and nothing more.

Who we are

The data controller — the people who decide what happens to your details — is Rose Atelier Ltd, which operates Field House and this website.

Registered name: Rose Atelier Ltd
Registered in: England and Wales, company number 16953859
Registered office: 27 Cuthbert Way, Morpeth, NE61 2FQ, United Kingdom

Field House is not yet registered as a business in its own right. When it is, the controller may change. We will update this page and tell everyone on the waitlist before that takes effect, rather than after.

You can reach us about anything on this page at hello@fieldhousespaces.co.uk.

What the form collects

There is one form on this site. It asks for four things.

First name. Required.
Last name. Required.
Email address. Required.
What are you most interested in? Optional. One of exactly five choices: Coworking membership, Private booth, Corporate membership for my team, Events & private hire, or Just curious.

Along with those four values, the record stores the date and time our server received the form, and a note of which page it came from. At the moment that note is always the word landing, because only one page carries a form.

That is the whole record. There is no account, no login, no payment and no newsletter box. We do not track what you read and we do not build a profile of you.

When you press send, your IP address is passed to Cloudflare so it can check you are a person rather than a bot, and it is used briefly to limit how often the form can be submitted. It is not written into your waitlist record. We use it only for the moment it takes to run those checks. Cloudflare sets out what it does with that address in its own privacy policy.

Giving us your details is voluntary. If you would rather not, we cannot add you to the waitlist, and nothing else follows from it.

Our lawful basis: consent

We hold your details because you chose to give them to us. The lawful basis is consent, under Article 6(1)(a) of the UK GDPR. There is no other basis and no small print behind it.

You can withdraw that consent at any time, and it is as easy to withdraw as it was to give. Either:

reply to any email we send you and say you want to come off the list, or
email us at hello@fieldhousespaces.co.uk and say the same.

We then delete your record. You do not need to give a reason. Withdrawing does not make anything we did beforehand unlawful.

What we use it for

One thing: talking to you about Field House before it opens. In practice that means

telling you when early access opens,
inviting you to become a founding member and explaining what that involves,
news of the opening.

Nothing else. We do not advertise to you, here or anywhere else. Nothing about you is decided automatically. We do not sell, rent or share your details with anyone for their own purposes. The companies listed below handle your data to keep the site and the emails working.

Where it is stored

In Google Cloud Firestore, a database run by Google. Google Cloud is our processor for the database and for hosting.

The database sits in Google’s europe-west2 region, which is London. Your details stay in that UK region.

The form is handled by a Google Cloud Function, which writes the record into Firestore. The site itself is served from Firebase Hosting, which is also Google.

Cloudflare is a United States company, so the moment-long bot check on your IP address may be processed outside the UK. We have a data processing agreement in place with Cloudflare, and with Google, and those agreements carry the safeguards the UK GDPR requires for transferring personal data out of the UK. Resend is a United States company too, but as above it is not in use and receives nothing; we will have the same agreement in place with it before any email is sent.

Who else handles it

Two service providers handle parts of this today. A third is listed because we will use it when we start sending email.

Google: Hosts the website, runs the function behind the form, and stores the waitlist records in Firestore in the London region.
Cloudflare: Two separate jobs. Turnstile checks that a real person is filling in the form, and receives your IP address in order to do that. Web Analytics counts visits to the site; it is cookieless and stores nothing on your device.
Resend: The email provider we intend to use when we start sending email. It is not in use yet and has never received your details — nothing on this site sends email today. When that changes we will update this page first. Resend would then receive your email address and the content of the message, and nothing else from your record.

Cookies

This site sets no tracking cookies and no analytics cookies, and it uses no local storage. Nothing is kept on your device to follow you around afterwards. Cloudflare Web Analytics is cookieless, so we can count visits without storing anything on your device.

The single exception is Cloudflare Turnstile, which may set a short-lived token while you are using the form. It exists only to show that the submission is genuine. It is strictly necessary to provide the thing you asked for, so it is exempt from the consent requirement in the Privacy and Electronic Communications Regulations, and it is not used to track you.

That is why there is no cookie banner. A banner exists to ask permission for the cookies a site does not need. We do not set any, so there is nothing to ask you about, and we would rather not make you dismiss a box for nothing.

How long we keep it

Twenty-four months from the day you join the waitlist.

Twenty-four months is long enough to be useful to you while the waitlist is open, and short enough that your name is not still sitting in a database long after you have forgotten sending it.

At the end of the twenty-four months we delete the record from Firestore and keep no archive copy. We will email you once beforehand to ask whether you would like to stay on the list; if you say no, or do not reply, the record goes. If you ask to be removed earlier, we delete it when you ask. Sooner is always fine.

Your rights

Under the UK GDPR and the Data Protection Act 2018 you can ask us to

give you a copy of what we hold about you (access),
correct it if any of it is wrong, such as a misspelled name or an old email address (rectification),
delete it (erasure),
restrict what we do with it while a question about it is being settled,
stop using it in a particular way (objection). Because we rely on your consent rather than legitimate interests, withdrawing consent achieves the same thing, and we will treat an objection as a withdrawal and delete your record,
hand it over in a structured, commonly used, machine-readable form, to you or to someone else (portability),
act on your withdrawal of consent, at any time, which removes our basis for holding it at all.

Any of these is free, and we will answer within one month, which is the time the law allows.

If you think we have handled your details badly, you can complain to the Information Commissioner’s Office, the UK regulator, at ico.org.uk. We would rather you told us first so we can put it right, but you are under no obligation to.

How to ask for a copy or a deletion

Email hello@fieldhousespaces.co.uk. Give your name and the email address you used on the form, and tell us what you want: a copy, a correction, or deletion. Those two details are all we need to find your record.

We may ask one question to check the request came from you, and we will not ask for more than that.

Changes to this policy

Field House has not opened yet, and this policy describes a website that does one thing. When that changes, because we add services, a membership system, or anything else that means we hold more than the fields listed above, we will rewrite this page before the change goes live rather than after, and update the date below. If a change affects details you have already given us, we will email you, and ask for your consent again where the change requires it.

Last updated: 4 October 2026