PRIVACY POLICY

Last updated: 25 August 2026

1. Introduction

The Calorie Cook, based in Gelli, Rhondda, Wales, is the data controller for the personal information described in this policy. We process your data in line with UK GDPR and the Data Protection Act 2018.

2. What Information We Collect

  • Name, email address and phone number
  • Delivery address
  • Order and subscription history
  • Dietary requirements and allergen notes you give us
  • Account password (stored securely, never in plain text)

Payment card details are entered directly with our payment provider, Stripe, and are never seen or stored by us.

3. How We Use Your Information

  • To take, prepare and deliver your orders and manage your subscription
  • To send order confirmations, delivery updates and weekly meal reminders
  • To respond to your questions and provide customer support
  • To meet our legal, tax and accounting obligations

4. Legal Basis for Processing

We process most of your information because it's necessary to fulfil our contract with you (taking and delivering your order). Where we send you optional communications, such as reminder emails or WhatsApp messages, we rely on your consent, which you can withdraw at any time by contacting us.

5. Sharing Your Information

We share your information only with the third parties that help us run our service:

  • Stripe — payment processing
  • DPD — nationwide delivery
  • Supabase — secure database hosting
  • Resend — sending order and account emails

We never sell your personal information to third parties.

6. Data Retention

We keep your account and order information for as long as your account is active, and for a reasonable period afterwards to meet our legal and accounting requirements. You can ask us to delete your account at any time.

7. Your Rights

Under UK GDPR, you have the right to:

  • Access the personal information we hold about you
  • Ask us to correct inaccurate information
  • Ask us to delete your information
  • Object to or restrict certain processing
  • Request a copy of your data in a portable format

You can delete your account and order history yourself at any time from the “Danger Zone” in your account's My Details tab. For any other data request — including deleting data tied to an order you placed as a guest — email TheCalorieCook1@gmail.comand we'll action it within 30 days as required by law.

8. Cookies

We use a small number of cookies and browser storage to keep the site working properly (for example, to keep you logged in and to remember what's in your basket) and, where you accept them, to understand how our website is used. You can accept or decline non-essential cookies from the banner shown when you first visit the site.

9. Security

We use reasonable technical and organisational measures to protect your personal information, including secure hosting and encrypted connections.

10. Changes to This Policy

We may update this policy from time to time. The “last updated” date at the top of this page shows when it was last revised.

11. Contact Us

For any privacy questions or to exercise your rights, message us on WhatsApp, or use the contact details in the footer of this website.