Privacy Policy

Effective date: June 2026

Introduction

Your privacy matters to us. Not as a legal formality, not as a box to be checked before we get on with the more interesting work — but genuinely, as a reflection of the kind of company we are trying to be. The same care we put into every meal we cook, we extend to the way we handle the information you trust us with.

This Privacy Policy explains what personal data On My Plate collects when you visit our website at onmyplateuk.shop or place an order with us, how we use it, how we protect it, and what rights you have in relation to it. We have written it to be read, not merely acknowledged. Please take a moment with it.

By using our website or placing an order, you agree to the collection and use of your information in accordance with this policy.

For any questions or concerns about how your data is handled, you may contact us at any time:

📧 onmyplate20@gmail.com

1. Who We Are

On My Plate is a home-cooked food delivery service based in London, operating exclusively through our website at onmyplateuk.shop. We deliver freshly prepared meals across London and Greater London.

For the purposes of this Privacy Policy, On My Plate is the data controller — meaning we are responsible for deciding how and why your personal data is collected and used.

2. What Information We Collect

We collect only the information that is necessary to provide you with our service and to communicate with you effectively. The categories of personal data we may collect include:

2.1 Information You Provide Directly

When you place an order or get in touch with us, you may provide us with:

• Your full name — to identify your order and address you appropriately.
• Your email address — to send order confirmations and respond to any enquiries.
• Your delivery address — to ensure your meal reaches you correctly.
• Your phone number — where provided, to contact you in connection with your delivery if necessary.
• Your payment information — processed securely through our payment provider. We do not store your full card details.
• Any message or communication you send us — including complaints, questions, or requests submitted via email.

2.2 Information Collected Automatically

When you visit our website, certain technical information may be collected automatically. This may include:

• Your IP address — to help us understand where our visitors are coming from and to detect unusual or potentially harmful activity.
• Browser type and version — to help us ensure our website works correctly across different devices.
• Pages visited and time spent — to help us understand how people use our website and where improvements can be made.
• Referring URL — the address of the page, if any, that linked you to our website.

This information is collected through standard web technologies including cookies and similar tracking tools, described in more detail in Section 7 of this policy.

2.3 Information We Do Not Collect

We do not knowingly collect personal data from children under the age of 13. We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data. We do not collect more information than we need.

3. How We Use Your Information

We use the personal data we collect for specific, legitimate purposes only. We do not use your data in ways you would not reasonably expect. The purposes for which we use your information are as follows:

3.1 To Fulfil Your Order

The primary reason we collect your personal data is to process and deliver your order. This includes:

• Confirming your order and communicating any updates.
• Arranging delivery to your address.
• Contacting you in the event of an issue with your order or delivery.

This use of your data is necessary for the performance of a contract between you and On My Plate. Without it, we cannot fulfil your order.

3.2 To Respond to Your Enquiries

When you contact us — whether to ask a question, raise a concern, or request a cancellation — we use the information you provide to respond to you promptly and appropriately.

3.3 To Improve Our Service

We may use aggregated, anonymised data about how our website is used to identify areas for improvement, fix technical issues, and develop a better experience for our customers. This analysis does not involve identifying or profiling individual users.

3.4 To Comply With Legal Obligations

In certain circumstances, we may be required to process or retain your personal data in order to comply with a legal obligation. We will always handle such requirements with discretion and limit any disclosure strictly to what is required by law.

3.5 To Protect Our Business and Customers

We may use your information to detect and prevent fraud, misuse of our platform, or other harmful activity. This is in our legitimate interest as a business and in the interest of all customers who use our service.

4. Legal Basis for Processing

Under applicable data protection law, we are required to have a lawful basis for processing your personal data. Depending on the context, our legal bases are:

• Contractual necessity — processing that is required to fulfil your order or respond to a pre-contractual request you have made.
• Legitimate interests — processing carried out for the genuine operational needs of our business, provided those interests are not overridden by your rights. This includes fraud prevention, website improvement, and service communications.
• Legal obligation — processing required to comply with a legal duty to which we are subject.
• Consent — where we rely on your consent, such as for optional marketing communications, we will make this clear and you may withdraw your consent at any time.

5. How We Share Your Information

On My Plate does not sell, trade, or rent your personal data to third parties. Full stop.

There are, however, limited circumstances in which your data may be shared:

5.1 Service Providers

We work with a small number of trusted third-party service providers who assist us in operating our website and processing orders. These may include our website hosting provider and our payment processor. These parties are permitted to access your personal data only to the extent necessary to perform their services, and are required to handle it in accordance with applicable data protection law.

5.2 Legal Requirements

We may disclose your personal data if required to do so by law, or in response to a valid request from a public authority such as a court or regulatory body. We will always aim to notify you of any such request where we are legally permitted to do so.

5.3 Business Continuity

In the event that On My Plate undergoes a significant change in ownership or structure, your personal data may be transferred as part of that process. We would notify you of any such change and ensure your data continues to be handled in accordance with this policy.

6. How Long We Keep Your Information

We retain your personal data only for as long as is necessary for the purposes described in this policy, or as required by law.

• Order information — retained for a reasonable period following your order to allow us to handle any queries, complaints, or legal obligations that may arise. We do not retain this information indefinitely.
• Communications — emails and messages are retained for the period reasonably necessary to resolve the matter at hand and for a short period thereafter.
• Website usage data — typically anonymised or deleted within a short period of collection.

When personal data is no longer required, we take reasonable steps to delete or anonymise it securely.

7. Cookies and Tracking Technologies

Our website uses cookies — small text files placed on your device — and similar technologies to support the functioning of the site and to gather usage information.

7.1 Types of Cookies We Use

• Essential cookies — necessary for the website to function correctly. These cannot be disabled without affecting the core operation of the site.
• Analytical cookies — used to understand how visitors interact with our website. The data collected is aggregated and does not personally identify individual users.
• Functional cookies — used to remember your preferences and improve your experience on return visits.

7.2 Managing Cookies

You have the right to accept or decline non-essential cookies. Most web browsers allow you to control cookie settings through your browser preferences. Please note that disabling certain cookies may affect the functionality of our website.

For more information on managing cookies, you may visit www.allaboutcookies.org.

8. Data Security

We take the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your information against unauthorised access, loss, misuse, disclosure, alteration, or destruction.

These measures include secure data transmission via HTTPS, restricted internal access to personal data, and the use of trusted, reputable service providers for payment processing and hosting.

However, no method of transmission over the internet and no method of electronic storage is completely secure. While we do everything reasonable to protect your data, we cannot guarantee its absolute security. In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will take appropriate steps to address it and notify affected individuals as required by law.

9. Your Rights

Under applicable data protection law, you have a number of rights in relation to your personal data. These rights include:

• The right to access — you may request a copy of the personal data we hold about you.
• The right to rectification — you may request that we correct any inaccurate or incomplete data we hold about you.
• The right to erasure — in certain circumstances, you may request that we delete your personal data. Also known as the right to be forgotten.
• The right to restrict processing — in certain circumstances, you may ask us to limit how we use your data.
• The right to data portability — where processing is based on your consent or a contract, you may request that we provide your data in a structured, commonly used, and machine-readable format.
• The right to object — you may object to certain types of processing, including processing based on legitimate interests.
• The right to withdraw consent — where we rely on your consent to process your data, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact us at onmyplate20@gmail.com. We will respond to all requests within one month of receipt, in accordance with our legal obligations. There is no charge for making a request, though we may charge a reasonable fee or decline to act where requests are manifestly unfounded or excessive.

10. Children’s Privacy

Our website and services are not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe that a child has provided us with personal data without appropriate consent, please contact us at onmyplate20@gmail.com and we will take steps to delete that information promptly.

11. Links to Third-Party Websites

Our website may contain links to external websites operated by third parties. This Privacy Policy applies only to onmyplateuk.shop. We are not responsible for the privacy practices of any third-party websites and encourage you to review their privacy policies independently before providing any personal information.

12. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the way we operate. Any changes will be published on this page with an updated effective date. We encourage you to review this policy periodically. Your continued use of our website following any update constitutes your acceptance of the revised policy.

13. Contact and Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the way we handle your personal data, please contact us:

📧 onmyplate20@gmail.com

We take all privacy concerns seriously and will respond with care and without delay.

We would always prefer the opportunity to resolve any concern directly before a formal complaint is made, and we welcome the chance to do so.

On My Plate — Good food, delivered straight to your door.