Privacy Policy

1.Who we are

Nourish is a trading name of Nourish Kitchen Ltd, a company registered in England and Wales under company number 16346490, with its registered office at 77 Petersfield Road, Birmingham, England, B28 0AU.

We’re the “controller” of the personal data described in this policy, which means we decide how and why it’s used. We’re responsible for it under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We are registered with the Information Commissioner’s Office (ICO) under registration number ZC266028.

If you have any questions about this policy or your data, email us at enquiries@nourishltd.com.

2.What we collect

Information you give us

• Account and order details: your name, email address, phone number, delivery address and billing address.
• Subscription details: your plan, meal choices, order history, and when you skip, pause or cancel.
• Payment details: handled directly by Stripe. We receive only limited information, such as the card type, the last four digits and whether a payment succeeded.
• Messages: anything you send us through our contact form, by email or on social media, including catering enquiries.
• Affiliate and ambassador details: if you apply or join our affiliate programme, your name, contact details, location, social media handles, information about you, and how often your codes are used.

Information about your health

We don’t ask for allergy or medical information when you order. If you choose to tell us about an allergy or health condition, for example when asking which meals are suitable, we’ll use it only to answer your question and help you choose suitable meals, and we won’t keep it longer than we need to. Because this is “special category” health data, we rely on your explicit consent to use it, which you give by sending it to us. You can withdraw that consent at any time.

Information collected automatically

When you visit our website, we and our service providers may collect technical information such as your IP address, browser and device type, the pages you visit and how you arrived at our website. Some of this is collected using cookies. See section 7.

3.How and why we use it

The law requires us to have a lawful basis for each way we use your data. Here’s what we use it for and why.

We don’t use automated decision-making that has legal or similarly significant effects on you.

4.Marketing emails

When you create an account with us, we’ll send you emails about our meals, new menus, offers and news, which we send using Mailchimp. You’ll be given the option to opt out when you create your account, and every marketing email includes an unsubscribe link.

You can stop marketing emails at any time by clicking “unsubscribe” in any email or by emailing enquiries@nourishltd.com. Unsubscribing won’t affect service messages about your orders, which we need to send to run your subscription.

We never sell your data or share it with other companies for their own marketing.

5.Who we share it with

We share your data only with trusted companies that help us run Nourish, and only as much as they need. They can use it only to provide their services to us, under contracts that require them to keep it secure.

We may also share your data:

• with our professional advisers, such as accountants and lawyers, where needed
• with the police, HMRC or other authorities where the law requires it, or to protect our rights or the safety of others
• with a buyer or investor if our business is sold or restructured, in which case your data would continue to be protected in line with this policy

6.International transfers

Some of our service providers, such as Vercel, Mailchimp and Stripe, are based in or process data in the United States or other countries outside the UK. When your data is transferred outside the UK, we make sure it’s protected to UK standards, for example by using providers certified under the UK Extension to the EU-US Data Privacy Framework, or by relying on the UK’s International Data Transfer Agreement or Addendum. You can ask us for more details.

7.Cookies

Cookies are small files stored on your device when you visit a website. We use essential cookies, which are needed for our website to work, such as keeping you logged in. These don’t need your consent.

We don’t currently use analytics or marketing cookies. If we add them in future, they’ll only be used if you agree to them, and you can change your choice at any time on our Cookie Settings page, which also lists every cookie we use. You can also block or delete cookies in your browser settings, although some parts of our website may not work properly without essential cookies.

8.How long we keep it

• Account, order and payment records: for as long as you have an account with us, and then for 6 years after you cancel or close your account. This is so we can meet our tax and accounting obligations and deal with any legal claims.
• Marketing: until you unsubscribe. After that, we keep your email address on a suppression list so we don’t email you again by mistake.
• Messages and enquiries: for as long as we need to deal with your query, and then in line with the periods above if they relate to an order.
• Health information you share with us: only for as long as we need to answer your question.

When we no longer need your data, we delete it or anonymise it.

9.Keeping it safe

We use appropriate technical and organisational measures to protect your data, including encrypted connections, access controls and reputable, secure service providers. Only people who need your data to do their job can access it. No online system is completely secure, but if a data breach ever puts your rights at risk, we’ll tell you and the Information Commissioner’s Office as the law requires.

10.Your rights

Under UK data protection law, you have the right to:

• Access: ask for a copy of the personal data we hold about you
• Correct: ask us to fix data that’s wrong or incomplete (you can update most details in your account)
• Erase: ask us to delete your data, unless we need to keep it, for example for tax records
• Restrict: ask us to limit how we use your data
• Object: object to us using your data based on our legitimate interests, including for marketing, which we’ll always stop
• Portability: ask for your data in a format you can move to another provider
• Withdraw consent: where we rely on your consent, withdraw it at any time

To use any of these rights, email enquiries@nourishltd.com. It’s free, and we’ll respond within one month. We may need to confirm your identity first.

11.Children

Our service is for people aged 18 and over. We don’t knowingly collect data from children. If you believe a child has given us their data, please contact us and we’ll delete it.

12.Complaints

If you’re unhappy with how we’ve used your data, please contact us first and we’ll try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator:

• Website: ico.org.uk/make-a-complaint
• Helpline: 0303 123 1113

13.Changes to this policy

We may update this policy from time to time, for example if we start using a new service provider. The latest version will always be on this page, with the date it was last updated. If we make significant changes, we’ll let you know by email or on our website.

14.Contact us

You can also reach us through our contact page.