Privacy Policy
Last updated:
This policy explains what personal data Healthy Foodie ("we", "us") collects when you use healthyfoodie.online, why, and the choices you have. We keep it short and collect as little as we can.
1.Who we are
Healthy Foodie is an online recipe and nutrition service operated from the United Kingdom. We are the data controller for the personal data described here, under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Contact for anything about privacy: info@healthyfoodie.online
2.What we collect
- Account details: your email address and, if you give it, your name. If you sign in with Google, we receive your name and email from Google.
- Your account activity: recipes you save, your language preference and your Premium status.
- Payment details: subscriptions are processed by Stripe. We receive a customer and subscription reference and the plan you chose; we never see or store your full card number.
- Messages you send us by email or through our Instagram or Facebook pages.
- Technical data needed to run the site securely, such as IP address, browser type and server logs, kept for a short time. We also use these logs to count visits in aggregate (for example, visitors per country and most-read pages); no cookies or third-party trackers are used for this.
Some features keep data only on your own device and never send it to us: recipe comments, the photos you add to share a dish you cooked, cooking timers, the theme (light or dark) and other preferences. Clearing your browser data deletes them.
3.Why we use it (legal bases)
- To create and run your account and provide Premium: performance of our contract with you.
- To take payments and keep tax and accounting records: contract and legal obligation.
- To keep the site secure, prevent abuse and fix problems: our legitimate interests.
- To answer your messages: our legitimate interests, or your request.
We do not sell your personal data, we do not show third-party advertising on the site, and we do not use advertising or tracking cookies.
4.Cookies and browser storage
We only use storage that is strictly necessary for the site to work: keeping you signed in (authentication tokens), remembering your language, theme and cooking-mode settings. Because these are essential, they do not need consent. You can remove them at any time in your browser settings; you will be signed out.
5.Who we share it with
We use trusted service providers who process data on our behalf, only to run Healthy Foodie:
- Amazon Web Services (hosting, sign-in, database and image delivery).
- Stripe (payments; Stripe also acts as an independent controller for fraud prevention and legal duties).
- Google (only if you choose "Sign in with Google").
- Zoho (our email).
- Meta (Instagram and Facebook) and ManyChat, when you message or comment on our social pages.
We may also disclose data if the law requires it or to protect our rights and users.
6.International transfers
Some providers, including Amazon Web Services and Stripe, store data in the United States. Where data leaves the UK, it is protected by the UK–US Data Bridge or by the UK International Data Transfer Agreement / Addendum to the EU Standard Contractual Clauses.
7.How long we keep it
- Account data: for as long as your account is open. When you delete your account, we delete it within 30 days.
- Payment and invoice records: 6 years, as UK tax law requires.
- Messages: up to 2 years after our last exchange.
- Server logs: up to 90 days.
8.Your rights
You can ask to access, correct, delete or receive a copy of your data, and to object to or restrict how we use it. Email info@healthyfoodie.online and we will reply within one month. You can also cancel Premium and delete your account at any time.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ico.org.uk). We would appreciate the chance to fix it first.
9.Children
Accounts are for people aged 16 or over. Foodie Mini is a section for parents and carers of young children: we do not knowingly collect data from children, and you should not create an account for a child. If you believe a child has given us personal data, contact us and we will delete it.
10.Security
Data is encrypted in transit (HTTPS) and at rest, access is limited to what is needed, and Premium status can only be changed by our payment system. No service is perfectly secure, so please use a strong, unique password.
11.Changes
We will update this page if anything changes and show the new date at the top. For important changes we will tell signed-in users by email or on the site.