Privacy Policy

Calories Wise (“we”, “us”) is based in Oxford, England, and is the data controller for the personal information described below. This policy explains what we collect, why, and what rights you have over it. If you have any questions, contact us at info@calorieswise.co.uk.

What we collect

When you place an order or create an account, we collect your name, email address, phone number, delivery address and postcode. If you create an account, we also store a securely hashed version of your password — we never store your password in readable form. We keep a record of your orders (items, quantities, prices and delivery details) so you can view your order history and so we can fulfil and support your orders.

We don't collect or store your card details — payment is processed entirely by Stripe, our payment provider, who handle your card data under their own security standards and privacy policy.

How we use it

We use your information to take and fulfil orders, process payments, arrange delivery, manage your account, send order-related emails (confirmations, delivery updates, subscription billing), verify your email address, and respond if you contact us. We don't use your data for advertising, and we don't sell your personal data to anyone.

Who we share it with

We share the minimum data necessary with the services that help us run Calories Wise: Stripe (payment processing), Resend (sending transactional emails like order confirmations), and our hosting and database providers, Vercel and Supabase. Each of these providers only receives what they need to perform their function, and is bound by their own data protection obligations.

Cookies and analytics

We use essential cookies to keep you signed in and your session secure — see our Cookie Policy for details. Our site analytics (Vercel Web Analytics) are cookieless and only ever report anonymous, aggregate traffic patterns — we can't identify you from them.

How long we keep it

We keep order records for as long as needed to meet our accounting and legal obligations. If you have an account, we keep your details for as long as your account is active. You can ask us to delete your account and associated personal data at any time, subject to records we're required to keep by law (such as order/payment records for tax purposes).

Your rights

Under UK GDPR, you have the right to access the personal data we hold about you, ask us to correct it, ask us to delete it, object to or restrict certain processing, and request a copy in a portable format. To exercise any of these rights, email info@calorieswise.co.uk. If you're unhappy with how we've handled your data, you also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO).

Security

We use industry-standard measures to protect your data, including encrypted connections (HTTPS), securely hashed passwords, and signed, httpOnly session cookies. No online service can guarantee perfect security, but we take reasonable steps to keep your information safe.

Changes to this policy

We may update this policy from time to time. The current version will always be posted here with its last-updated date above.