ShiftEATS Privacy Policy

1. Who We Are

ShiftEATS is a meal planning service for shift workers, operated as a small UK-based business. For any data-related queries, please contact us at: support@shifteats.co.uk

2. What Data We Collect

We collect the following information when you use ShiftEATS:

• Account information: Email address, first name, last name (provided via login)
• Meal preferences: Diet type, protein preferences, dietary restrictions you select
• Shift pattern: The work days you enter to generate your meal plan
• Payment status: Whether you have purchased access (we do not store card details)

3. Why We Collect Your Data

We use your data to:

• Provide the service: Generate personalised meal plans based on your preferences
• Verify purchases: Confirm you have paid for access
• Provide support: Respond to queries you send to us

We do not use your data for marketing, sell it to third parties, or share it with advertisers.

4. How We Store Your Data

Your data is stored securely on servers provided by Replit, a US-based platform that complies with industry-standard security practices. Your meal preferences are also stored locally in your browser.

We retain your account data for as long as you have an active account. If you request deletion, we will remove your data within 30 days.

5. Third Parties

We use the following third-party services:

• Resend: We use Resend to send magic link login emails to your address. Your email is shared with Resend solely for the purpose of delivering these emails.
• Shopify: Processes payments. We verify your purchase using the email you provide. Your payment details are handled entirely by Shopify and are not stored by ShiftEATS.

6. Your Rights (UK GDPR)

Under UK data protection law, you have the right to:

• Access: Request a copy of the data we hold about you
• Correction: Ask us to correct inaccurate data
• Deletion: Request that we delete your data
• Portability: Request your data in a portable format
• Object: Object to processing of your data

To exercise any of these rights, email us at support@shifteats.co.uk. We will respond within 30 days.

7. Cookies & Local Storage

ShiftEATS uses browser local storage to save your meal preferences and progress through the wizard. This data stays on your device and is not sent to external servers.

We use a session cookie to keep you logged in for up to 30 days after you sign in via magic link. This is an essential cookie for authentication purposes only. We do not use tracking cookies or third-party analytics.

8. Children's Privacy

ShiftEATS is not intended for use by children under 16. We do not knowingly collect data from anyone under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

9. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated date. We encourage you to review this policy periodically.

10. Contact Us

If you have any questions about this privacy policy or how we handle your data, please contact us at: support@shifteats.co.uk

If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk