Privacy notice

What we keep

• Your account: your name and email address. You sign in with a code we email you, or with Google if you choose it (Google tells us your name and confirms your email address; we don’t keep your Google picture). Each sign-in records the browser and IP address it came from, to keep your account secure.
• Your orders: the name, address, phone number and delivery note each order goes to, the plan and weeks, what you paid and any credit or refund. We keep your latest address for next time. If you send a gift, the recipient’s name, address and, if you give them, their phone number (for our driver) and email (for their tracking link).
• Payments: you pay by bank transfer. Our bank, Monzo, tells us the amount, the reference and the payer’s name so we can match it to your order. We never see or store card details.
• Your phone number, only if you give it, for delivery updates on WhatsApp. Giving it is how you say yes; reply STOP at any time, or remove it in your account.
• Allergies, only if you tick the box to let us keep them on your account. They are health information, so we never keep them without that. Without the tick, the allergies you choose at checkout are used only to warn you about that week’s dishes and aren’t saved. You can delete them in your account at any time.
• Delivery photos: on delivery mornings our driver photographs the bag at your door, so you can see it arrived. The photo is deleted after 30 days.
• Reviews: your stars, words and any photo you add. A review appears on the site only if you agreed to it and we approved it, and then only with your first name. Your stars count towards a dish’s average rating either way.
• Refer a friend: your friend code, the orders it was used on, and the bank details you give us for payouts. Bank details are stored encrypted and only our admins can see them, to send your money.
• Event bookings: the contact name, email, phone, address and notes you give us.
• Messages we send: a record of each email or WhatsApp message we sent you: which message, when, your address or number partly hidden, and what it said (such as your first name, order reference and amounts), so we can check what was sent. Sign-in codes and gift tracking links aren’t kept in it.
• Numbers that replied STOP on WhatsApp, so we never message them there again.

Why we use it

• To take and deliver your orders and run your account (our contract with you): matching payments, planning the delivery round, telling you when your food is on its way, refunds and credits.
• With your consent: keeping your allergies, sending WhatsApp updates, and showing your review on the site. You can withdraw consent at any time, and it doesn’t affect what we did before.
• In our legitimate interests: keeping the site secure and preventing misuse (for example limiting how often codes can be requested, and making sure first-order offers and friend codes are used once per person and home), delivering a gift someone sent you, and counting visits to our public pages without identifying anyone.
• Because the law says so: keeping business and accounting records.

We don’t sell your information, and we don’t use it for advertising.

Who helps us

These companies process information for us, under our instructions:

• Vercel: hosts the website, stores photos, and counts visits to public pages without cookies (never your account, tracking or payment pages).
• Neon: hosts our database.
• Resend: sends our emails.
• Meta (WhatsApp): sends delivery updates, only if you gave us your number.
• Google Maps: works out road distances from our kitchen and shows the delivery map. Your postcode’s location is sent to calculate the distance. When you watch a delivery live, the map loads from Google in your browser, so Google sees your IP address and the area on the map.
• Google sign-in, only if you choose it: Google confirms your email address to us.
• postcodes.io: turns a postcode into map coordinates.
• Monzo: our bank, which tells us about incoming transfers.
• OpenAI and Anthropic: help our team write dish descriptions and improve dish photos. They only ever see dish photos and dish names, never anything about customers.

Some of these providers process data outside the UK. Where they do, they’re bound by contracts with the safeguards UK law requires.

How long we keep it

• Delivery photos: 30 days.
• Road distances we’ve worked out for a postcode: 30 days (they aren’t linked to you).
• Records of messages we sent: 12 months.
• Sign-in records (browser and IP address): until you sign out, or 30 days after your last visit.
• Your account, phone number, saved address and allergies: until you delete your account. You can delete your allergies and phone number sooner in your account settings, and a new address replaces the saved one.
• Orders, payments, refunds and event bookings: kept as business records, as the law requires, even after an account is deleted. Deleting your account anonymises it and takes the phone number, delivery note, a gift recipient’s phone and email, and our notes off your past orders; each order keeps the name and address it went to.
• If an account that paid for an order is deleted, we keep a one-way code made from its email address and phone number. It can’t be turned back into them, and it’s used only to stop first-order offers being claimed twice. It’s kept as long as the order records.
• Reviews: until you delete your account, or ask us to remove one.
• Bank details for referral payouts: until you ask us to remove them, or delete your account.
• Numbers that replied STOP: for as long as we use WhatsApp, so the STOP keeps working.

Your rights

You can ask for a copy of what we hold about you, ask us to correct it, delete it, limit how we use it, or object to how we use it, and ask for a copy in a format you can take elsewhere. Some things you can do yourself in your account, including deleting your allergies and your account.

To ask, email hello@forenskitchen.co.uk, or write to Aldran Group Ltd, 53 Eden Crescent, Leeds, LS4 2TS.

If you’re unhappy with how we’ve handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

If someone sends you a gift

The person who ordered it gave us your name and address, and perhaps your email and phone number. We use them only to deliver the gift, in their and our legitimate interests: your email for a link to follow your deliveries (and a note if one can’t be made), your phone number only for our driver if they can’t find you. We don’t send you WhatsApp messages or marketing.

Your tracking link stops working once the last week of deliveries is over. The order is kept as the business record of the person who sent it. If you’d like your phone number or email taken off it, or to ask anything else, see Your rights above.

Cookies

We only use the cookies needed for signing in and keeping you signed in. See Cookies.

Changes

If this notice changes, we’ll update this page and the date at the top.

Who we are

Foren’s Kitchen is a trading name of Aldran Group Ltd, company number 16847513, registered in England and Wales. Registered office: 53 Eden Crescent, Leeds, LS4 2TS.