Privacy Policy Introduction

Welcome to Gastrolicious Ltd's Privacy Policy.

Gastrolicious Ltd respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website, mobile applications, products, and services, and informs you about your privacy rights and how the law protects you.

1. Important Information About Who We Are

Purpose of This Privacy Policy

This Privacy Policy aims to give you information on how Gastrolicious Ltd collects and processes your personal data through your use of our website, mobile applications, products, and services, including any information you may provide when creating an account, purchasing a meal plan, subscribing to marketing communications, participating in promotions, or otherwise interacting with us.

It is important that you read this Privacy Policy together with any other privacy notice we may provide on specific occasions so that you are fully aware of how and why we are using your data.

Controller

Gastrolicious Ltd is the data controller and is responsible for your personal data.

Throughout this Privacy Policy, references to "Gastro Meal Prep", "Gastro", "Gastrolicious", "we", "us", or "our" refer to Gastrolicious Ltd.

Contact Details

Legal Entity: Gastrolicious Ltd

Contact: Head of Customer Experience

Email: info@gastrolicious.co.uk

Postal Address:

Unit 509 Segro V Park
3 North Circular Road
London
United Kingdom
NW10 7UD

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK's independent authority for data protection and privacy rights.

We would appreciate the opportunity to address your concerns before you contact the ICO, so please contact us first.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any updates will be published on our website or mobile applications.

It is important that the personal data we hold about you remains accurate and current. Please inform us if your personal information changes during your relationship with us.

Third-Party Links

Our website and applications may contain links to third-party websites, services, or applications. We do not control these third parties and are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services you use.

2. The Data We Collect About You

Personal data means any information capable of identifying an individual.

We may collect, use, store, and transfer the following categories of personal data:

Identity Data

• First name
• Last name
• Username or account identifier

Contact Data

• Email address
• Telephone number
• Billing address
• Delivery address

Profile Data

• Account information
• Meal plan selections
• Purchase history
• Preferences
• Feedback
• Survey responses

Transaction Data

• Payment information
• Order history
• Subscription history
• Purchase records

Delivery Data

• Delivery addresses
• Delivery instructions
• Recipient details
• Delivery preferences

Technical Data

• IP address
• Device identifiers
• Browser type and version
• Operating system
• Mobile device information
• Application version information
• Login information
• Usage analytics

Usage Data

• Information about how you use our website, mobile applications, and services

Communication Data

• Emails
• Customer support enquiries
• Reviews
• Survey responses
• Social media interactions

Marketing and Communications Data

• Marketing preferences
• Communication preferences
• Promotion participation

We may also collect aggregated or anonymised statistical information which does not directly identify you.

We do not intentionally collect special category personal data unless voluntarily provided by you for customer service purposes.

If you do not provide information required for us to fulfil an order or provide services, we may be unable to provide those services.

3. How We Collect Your Personal Data

We collect personal data through:

Direct Interactions

When you:

• Create an account;
• Place an order;
• Purchase a meal plan;
• Subscribe to communications;
• Enter promotions;
• Contact customer support; or
• Submit feedback.

Automated Technologies

We do not currently use cookies, advertising cookies, tracking cookies, pixels, or similar technologies for advertising or behavioural tracking purposes.

Our website and mobile applications may collect limited technical information required for security, account authentication, fraud prevention, and the operation of our services.

Third Parties

We may receive information from:

• Payment service providers;
• Delivery partners;
• Advertising platforms where you interact with our advertisements;
• Social media platforms;
• Technology service providers; and
• Operational service providers.

4. How We Use Your Personal Data

We will only use your personal data when permitted by law.

Most commonly we use your personal data:

• To perform a contract with you;
• To comply with legal obligations;
• To pursue legitimate business interests; or
• Where you have provided consent.

We may use your information to:

• Create and manage your account;
• Process orders and subscriptions;
• Deliver products and services;
• Manage payments;
• Provide customer support;
• Improve our products and services;
• Conduct analytics and research;
• Prevent fraud and misuse;
• Comply with legal obligations;
• Send service communications; and
• Send marketing communications where permitted by law.

Marketing

You may receive marketing communications from us if you have purchased products or services from us, requested information from us, or otherwise consented to receive marketing.

You may opt out of marketing communications at any time.

Push Notifications

Where enabled, Gastrolicious may send push notifications through its mobile applications regarding orders, deliveries, account activity, service updates, promotions, and other relevant information.

You may disable push notifications through your device settings at any time.

5. Disclosures of Your Personal Data

We may share your personal data with:

• Delivery and logistics providers;
• Payment processing providers;
• Technology and software providers;
• Hosting providers;
• Customer support providers;
• Professional advisers including accountants, auditors, lawyers, and insurers;
• Government authorities, regulators, law enforcement agencies, and courts where required by law; and
• Potential purchasers, investors, or successor entities in connection with a business sale, merger, acquisition, or restructuring.

All third parties are required to process personal data in accordance with applicable data protection laws and only for authorised purposes.

6. International Transfers

Some suppliers, technology providers, and service providers may process personal data outside the United Kingdom.

Whenever personal data is transferred internationally, Gastrolicious will implement appropriate safeguards in accordance with UK data protection laws, including:

• Transfers to countries recognised as providing adequate protection;
• International Data Transfer Agreements (IDTAs);
• UK-approved contractual safeguards; and
• Other lawful transfer mechanisms recognised under UK law.

You may contact us for further information regarding international transfer safeguards.

7. Data Security

We have implemented appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, misuse, alteration, or disclosure.

Access to personal data is limited to authorised personnel and service providers who require access to perform their duties.

We maintain procedures for managing and responding to personal data breaches and will notify affected individuals and regulators where required by law.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected and to satisfy legal, regulatory, accounting, and reporting obligations.

Generally:

• Customer account information is retained while accounts remain active;
• Transaction and order records may be retained for up to seven (7) years;
• Marketing preferences are retained until consent is withdrawn or marketing is opted out of; and
• Customer service records may be retained where reasonably required for operational or legal purposes.

Where personal data is no longer required, it will be securely deleted, anonymised, or destroyed.

9. Your Legal Rights

Under UK data protection laws, you may have the right to:

• Access your personal data;
• Correct inaccurate personal data;
• Request deletion of personal data;
• Restrict processing;
• Object to processing;
• Request data portability; and
• Withdraw consent where processing is based on consent.

Requests may be submitted using the contact details provided in this Privacy Policy.

We may require proof of identity before fulfilling requests relating to personal data.

We aim to respond to valid requests within one month, although this period may be extended where permitted by law due to complexity or volume of requests.

Fees

You will not normally be charged for exercising your rights. However, we may charge a reasonable fee or refuse requests that are manifestly unfounded, repetitive, or excessive.

Contact Us

Head of Customer Experience

info@gastrolicious.co.uk

Gastrolicious Ltd
Unit 509 Segro V Park
3 North Circular Road
London
United Kingdom
NW10 7UD