Privacy Policy & Data Protection Declaration

Last Updated: May 2024

CLEANPREPKITCHEN LIMITED ("we", "our", or "us") is committed to protecting and respecting your privacy. This policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. We are the data controller for the purposes of the Data Protection Act 2018 (the "UK DPA") and the General Data Protection Regulation (EU 2016/679) ("GDPR"). Our registered office is at 3a Salters Road Newcastle Upon Tyne NE3 1DH United Kingdom.

1. Information We Collect

We may collect and process the following data about you: Information that you provide by filling in forms on our site (e.g., name, email, dietary preferences, physical address). This includes information provided at the time of registering to use our site, subscribing to our service, or requesting further services. We may also ask you for information when you report a problem with our site. If you contact us, we may keep a record of that correspondence. Details of transactions you carry out through our site and of the fulfillment of your orders. Details of your visits to our site including, but not limited to, traffic data, location data, weblogs, and other communication data.

2. Legal Basis for Processing

Under GDPR, we process your data based on: (a) Performance of a Contract: To deliver your meal plans. (b) Legal Obligation: For tax and health safety records. (c) Legitimate Interests: To improve our website and market relevant services to you, provided your rights are not overridden. (d) Consent: For marketing communications (which you can withdraw at any time).

3. Data Retention and Security

We implement rigorous technical and organizational measures to protect your data. This includes end-to-end encryption for payment processing and restricted access to database servers. We retain your personal data for no longer than is necessary for the purposes for which it was collected. Financial records are kept for 7 years to comply with UK HMRC regulations. Nutritional and delivery data is kept for 3 years to ensure quality control and handle any health-related inquiries. In the event of a data breach, we have a protocol to notify the Information Commissioner's Office (ICO) within 72 hours.

4. Your Rights

You have the following rights under UK law: The right to be informed about how your data is used. The right of access to your personal data. The right to rectification if your data is inaccurate. The right to erasure (the "right to be forgotten"). The right to restrict processing. The right to data portability. The right to object to processing based on legitimate interests. To exercise any of these rights, please contact our Data Protection Officer at info@stonewhisperer.sbs.

5. International Transfers

While our primary servers are located in the United Kingdom, some processing may occur via cloud service providers located in the EEA or countries with an adequacy decision from the UK government. We ensure all such transfers are protected by Standard Contractual Clauses (SCCs).

[... Content continues to 1200+ words including detailed sections on Third Party Disclosure, Children's Privacy, and Automated Decision Making ...]