Privacy Notice

1. What Information We Collect

When you place an order or sign in, we collect only the details strictly necessary to fulfill your meal booking:

• Customer full name
• Email address (for authentication and order receipts)
• Contact telephone number (for pickup and dispatch notifications)
• Delivery drop location (break room, floor, or workplace address)
• Order records and meal preferences

2. Why We Collect It & Lawful Basis

We process your information on the basis of contract fulfillment (to cook, pack, dispatch, and notify you of your meal) and legitimate business administration. We do not sell or rent personal data to third parties.

3. Third-Party Service Providers

To provide secure ordering, data is shared with essential sub-processors under secure commercial agreements:

• Stripe: Payment processing (we do not store your payment card numbers).
• Supabase: Encrypted order and account database hosting.
• Resend: Transactional order confirmation email dispatch.

4. Your Rights

Under UK GDPR, you have the right to request access to your personal data, request rectification of inaccurate records, or request deletion of your account history where retention is no longer legally required. Contact support.annambox@gmail.com.