Privacy Policy

Last updated: 17 August 2026

1. About This Privacy Policy

This Privacy Policy explains how You Are What You Eat (“we”, “us”, or “our”) collects, uses, stores and protects your personal information when you use our mobile application, website and related services. You Are What You Eat is operated as a sole trader business. We are committed to protecting your personal information and handling it fairly, securely and transparently.

2. Who We Are

You Are What You Eat 22 Redworth Road Shildon County Durham DL4 2JF United Kingdom Email: info@youarewhatyoueat.uk For privacy and data protection enquiries, please contact us using the email address above.

3. Information We Collect

We only collect information that is reasonably necessary to provide and operate our services.

Account information

When you create or use an account, we may collect:
  • Your name
  • Email address
  • Telephone number
  • Account authentication information
  • Your unique account identifier

Delivery information

When you place a delivery order, we collect information necessary to deliver your order, including:
  • Delivery address
  • Town/city
  • Postcode
  • Delivery instructions, where provided
The app does not use GPS or continuously track your location. Your delivery area is determined using the postcode you provide.

Order information

When you place an order, we may collect:
  • Items ordered
  • Quantities
  • Prices
  • Portion selections
  • Discounts
  • Delivery charges
  • Order total
  • Order notes
  • Order status
  • Delivery status
  • Payment method
  • Payment status
  • Order date and time
  • Information required to fulfil and manage your order
Please do not enter sensitive personal information into an order note.

Payment information

Payments made through the app may be processed by Stripe. We do not store your complete payment card details on our own systems. Payment information is processed by Stripe in accordance with Stripe’s security and privacy practices. We may receive information about your transaction, such as whether a payment was successful, so that we can process and fulfil your order.

4. How We Use Your Information

We use your information to:
  • Create and manage your account
  • Process your orders
  • Prepare and fulfil orders
  • Arrange delivery
  • Provide your delivery details to the person responsible for delivering your order
  • Communicate with you about your orders
  • Process and confirm payments
  • Provide customer support
  • Maintain records of orders and transactions
  • Prevent fraud and misuse
  • Maintain the security of our services
  • Improve and maintain the app
  • Comply with legal and regulatory requirements
  • Protect our business, customers and services
We do not use your information for marketing or advertising purposes. We do not sell your personal information.

5. Our Lawful Bases for Processing

Under UK data protection law, we rely on the following lawful bases depending on how your information is used.

Contract

We process information that is necessary to provide the services you request. For example, we need your name, contact information and delivery address to process and deliver an order.

Legal obligation

We may process and retain information where necessary to comply with legal, accounting, tax or other regulatory obligations.

Legitimate interests

We may process information where this is necessary for our legitimate interests, including:
  • Maintaining the security of our systems
  • Preventing fraud and abuse
  • Protecting our business and customers
  • Resolving disputes
  • Maintaining and improving our services
When relying on legitimate interests, we consider your rights and interests before processing your information.

Consent

Where we rely on consent for a particular use of your information, we will ask for your consent where required. You can withdraw consent where processing is based on consent.

6. Services and Third Parties

We use trusted third-party technology providers to operate parts of our service.

Firebase / Google

We use Firebase services to support functions such as:
  • User authentication
  • Database services
  • Secure storage and retrieval of application information
  • Operating parts of the app’s backend
Firebase may process personal information on our behalf as necessary to provide these services.

Stripe

We use Stripe to process payments. Stripe processes payment information and transaction information in order to provide payment processing services.

Delivery personnel

When necessary to fulfil an order, relevant information may be provided to the person responsible for delivering your order. This may include:
  • Your name
  • Telephone number
  • Delivery address
  • Postcode
  • Delivery instructions
Only information reasonably necessary to fulfil the delivery should be provided.

7. International Data Transfers

Some of the service providers we use may process personal information outside the United Kingdom. Where personal information is transferred internationally, appropriate safeguards will be used where required by applicable data protection law. These safeguards may include an adequacy decision or appropriate contractual or other legally recognised safeguards.

8. How Long We Keep Your Information

We keep personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

Account information

Your account information is retained while your account remains active. If you delete your account using the account deletion function in the app, we will delete or anonymise information that we no longer have a legitimate reason or legal obligation to retain.

Order information

Order and transaction information may be retained after account deletion where necessary for:
  • Accounting
  • Tax purposes
  • Legal obligations
  • Fraud prevention
  • Dispute resolution
  • Business records
Where information must be retained for these purposes, it will not be retained or used for unrelated purposes.

9. Deleting Your Account

You can delete your account directly through the app using the account deletion functionality. When your account is deleted, we will take reasonable steps to delete or anonymise personal information associated with your account, subject to information that we are legally required or otherwise permitted to retain. If you have difficulty deleting your account, contact: info@youarewhatyoueat.uk

10. Your Data Protection Rights

Under applicable UK data protection law, you may have the right to:
  • Request access to the personal information we hold about you
  • Request correction of inaccurate or incomplete information
  • Request deletion of your personal information
  • Request restriction of processing
  • Object to certain processing
  • Request portability of certain personal information
  • Withdraw consent where processing is based on consent
You can exercise your rights by contacting: info@youarewhatyoueat.uk We may need to verify your identity before responding to certain requests.

11. Your Right to Object

Where we process your personal information based on legitimate interests, you may have the right to object to that processing. If you object, we will consider your request and determine whether there are compelling legitimate grounds for continuing the processing or whether we need to stop processing your information.

12. Security

We take reasonable technical and organisational measures to protect your personal information against:
  • Unauthorised access
  • Unauthorised disclosure
  • Accidental loss
  • Destruction
  • Misuse
  • Unauthorised alteration
Our third-party service providers may also apply their own security measures to the information they process. However, no online service can be guaranteed to be completely secure.

13. Location Information

The app does not request or continuously track your device’s GPS location. For delivery purposes, you provide your delivery address and postcode. Your postcode may be used to determine whether delivery is available to your area and which delivery zone or delivery charge applies.

14. Marketing

We do not currently use customer information for marketing or advertising. We do not send promotional emails, marketing SMS messages or marketing push notifications. We may contact you where reasonably necessary to provide a service you have requested, such as information about an order or your account.

15. Analytics and Crash Reporting

At the time this Privacy Policy was prepared, we have not identified any separate analytics or crash-reporting service that we knowingly use to collect personal information from customers. If we introduce analytics, crash reporting or another service that involves collecting or processing personal information, we will update this Privacy Policy and any relevant privacy information before or when the new processing begins, where required.

16. Cookies and Similar Technologies

Our website may use cookies or similar technologies. Where cookies that are not strictly necessary are used, we will provide appropriate information and obtain consent where required. The mobile app may use technologies necessary for functions such as authentication, security and maintaining core app functionality.

17. Automated Decision-Making

We do not currently use solely automated decision-making or profiling that produces legal or similarly significant effects on you.

18. Children’s Privacy

Our services are not intended to knowingly collect personal information from children where they are not legally permitted to use the service. If you believe that a child has provided personal information to us inappropriately, please contact us at: info@youarewhatyoueat.uk We will investigate and take appropriate action.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes may be necessary if:
  • Our services change
  • We introduce new features
  • We introduce new third-party services
  • Data protection requirements change
  • The way we process personal information changes
The latest version of this Privacy Policy will be made available through our website and, where appropriate, the app. The date at the top of this Privacy Policy indicates when it was most recently updated.

20. Complaints

If you have concerns about how we use your personal information, please contact us first: info@youarewhatyoueat.uk You also have the right to complain to the UK’s data protection regulator: Information Commissioner’s Office (ICO) Website: https://ico.org.uk/ The ICO can provide further information about your data protection rights and how to make a complaint.

21. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal information, please contact: You Are What You Eat 22 Redworth Road Shildon County Durham DL4 2JF United Kingdom Email: info@youarewhatyoueat.uk
Last updated: 17 August 2026