Privacy Policy

This Privacy Policy explains how we collect, use, store and protect your personal data when you visit this website or enquire about / order our meal plans. We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. What personal data we collect

Depending on how you use our website and services, we may collect:

• Identity & contact data — name, phone number, email address, delivery address
• Order & preference data — meal plan selected, subscription period, dietary preferences, allergy information you choose to provide
• Communication data — messages, call-back requests and correspondence with our team
• Technical data — IP address, browser type, device information, pages visited and referral source
• Marketing preferences — whether you have consented to receive promotional communications

Please do not provide sensitive health information unless it is necessary for fulfilling your order (for example, allergies). If you do, we process it only with your consent and for that limited purpose.

2. How we collect your data

• Directly from you via order forms, call-back forms, email or phone
• Automatically via cookies and similar technologies (see our Cookie Policy)
• From advertising platforms when you interact with our ads (aggregated / pseudonymised where possible)

3. Why we use your data (lawful bases)

4. Who we share data with

We only share personal data where necessary with:

• Delivery and logistics partners
• IT, hosting, CRM, telephony and analytics providers acting as processors under contract
• Payment / billing providers (where payment is taken)
• Professional advisers and regulators where required by law

We do not sell your personal data.

5. International transfers

If any of our service providers process data outside the UK, we ensure appropriate safeguards are in place (for example, UK adequacy regulations or the UK International Data Transfer Agreement / Addendum).

6. How long we keep your data

We retain personal data only for as long as needed for the purposes above, including legal, tax and accounting requirements. Typical retention periods:

• Enquiry / call-back leads — up to 12 months if no order is placed
• Customer order records — up to 6 years after the end of the tax year (accounting)
• Marketing consent records — for the duration of consent + evidence period

7. Your rights

Under UK GDPR you have the right to:

• Access your personal data
• Rectify inaccurate data
• Request erasure (in certain circumstances)
• Restrict or object to processing
• Data portability (where applicable)
• Withdraw consent at any time (where processing is based on consent)

To exercise these rights, contact us at mealprep@nutritiondoneright.co.uk or call 07553 894501.

You also have the right to complain to the Information Commissioner’s Office (ICO): ico.org.uk.

8. Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse. No method of transmission over the internet is 100% secure, but we take reasonable steps to safeguard your information.

9. Children

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from children.

10. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will reflect the latest version.

11. Contact

For privacy questions, contact: