Privacy Policy

Who we are

ClickMeats (“we”, “us”, “our”) is a UK-based online marketplace connecting customers with independent butcher shops for click-and-collect orders. We are the data controller responsible for your personal data when you use our platform at clickmeats.co.uk (the “Service”).

Our full legal-entity details and correspondence address will be added to this page once formal registration is complete. Until then, a UK correspondence address available on request via admin@clickmeats.co.uk.

You can reach us about anything in this policy at admin@clickmeats.co.uk.

The data we collect

We only collect what we need to run the Service. The data falls into three categories:

Account data

• Email address — required to create an account, sign in, and receive order receipts.
• Phone number — required to contact you about collection orders (e.g. when your order is ready).
• Name — shown to the butcher you place an order with so they know who is collecting.

Order data

• Order history — the items, quantities, prices, and timestamps for every order you place. Linked to your account.
• Order status events — when your order moves through preparing / ready / collected stages.

Payment data

Card details are never stored on our servers. Payments are processed by Stripe Payments UK Limited (Stripe's Privacy Policy). We receive only the order amount, the timestamp, and Stripe's opaque reference id — never your full card number, CVV, or expiry.

Technical data

• Browser session data — IP address, user agent, basic interaction analytics. Collected via PostHog (PostHog's Privacy Policy). Data is stored in the EU.
• Error reports — when the Service hits an unexpected error, we send a stack trace to Sentry (Sentry's Privacy Policy). Reports are scrubbed of email addresses and personal identifiers before transmission.

How we use your data

We do not use your data for marketing without your explicit consent, and we do not sell, rent, or trade your data to third parties.

Automated decision-making

We do not make automated decisions that produce legal or similarly significant effects for you. Order routing, fraud screening (via Stripe Radar), and status updates are all deterministic — no profiling models decide whether to accept or refuse your business.

Who we share your data with

• The butcher you place an order with — your name, phone number, and order details (items, quantities, timestamps). The butcher cannot see your email, card details, or any other order you've placed with other butchers on the platform.
• Stripe — to process card payments and issue refunds.
• Amazon Web Services (AWS) and Vercel — our hosting providers. Both are GDPR-compliant. AWS hosts our application, database, and file storage in the London region (eu-west-2). Vercel serves the website via a global CDN; static assets may be cached close to your location, but personal data (orders, accounts) is only fetched from and written to AWS in the UK.
• Resend — our transactional email provider. They process the recipient email address to deliver the message.
• PostHog and Sentry — for product analytics and error reporting respectively (see “Technical data” above).
• Law enforcement or courts — only when required by valid legal process.

International data transfers

Most of your data stays within the UK and EEA. Some of our processors (Stripe, Sentry) may transfer limited data outside the UK — typically to the United States — for operational reasons. Where that happens we rely on the UK's adequacy decision for the EEA plus the International Data Transfer Addendum to the EU Standard Contractual Clauses to safeguard the transfer, in line with UK GDPR Article 46.

How long we keep your data

• Account data — for as long as your account is open, plus 30 days after deletion to honour recovery requests.
• Order data — 7 years from order date, to comply with UK tax record-keeping requirements (HMRC's VAT and record-keeping guidance under the Finance Act 2008).
• Analytics events — 12 months from collection.
• Error reports — 30 days from receipt.
• Support correspondence — up to 3 years after the issue is resolved.

Children's data

The Service is intended for adults aged 18 and over. We do not knowingly collect data from children under 13. If you believe a child has provided us with personal data, please contact us at admin@clickmeats.co.uk and we'll delete it.

Marketing communications

We send transactional emails (receipts, order ready notifications, refund confirmations, security alerts) as part of running your account — these are essential to performing our contract with you and cannot be turned off while you have an active account.

We do not send promotional or marketing emails as of this policy's effective date. If we introduce marketing communications in the future, we'll ask for your explicit opt-in first, and every marketing message will include a one-click unsubscribe link.

Data breaches

In the unlikely event of a personal-data breach that's likely to result in a risk to your rights and freedoms, we'll notify the UK Information Commissioner's Office within 72 hours and, where the risk is high, notify affected users directly by email.

Your rights

Under UK GDPR, you have the right to:

• Ask for a copy of the personal data we hold about you
• Ask us to correct inaccurate data
• Ask us to delete your data (subject to legal retention obligations such as the tax requirement above)
• Restrict or object to how we use your data
• Receive your data in a portable format
• Withdraw any consent you've previously given, at any time

To exercise any of these, email admin@clickmeats.co.uk. We'll respond within one calendar month.

If you're unhappy with how we've handled your data, you have the right to complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint or by calling 0303 123 1113.

Cookies and similar technologies

We use cookies in two ways:

• Strictly necessary — to keep you signed in (Cognito session token) and to remember your shopping cart. These cannot be turned off; the Service cannot work without them.
• Analytics — PostHog sets cookies to measure aggregate site usage. You can opt out by clearing cookies for our domain or by enabling “Do Not Track” in your browser.

Changes to this policy

We'll update the “Effective from” date at the top of this page when we make material changes. For substantive changes (new purposes, new third parties), we also email registered users at least 14 days before the change takes effect.

Contact

Questions, requests, or complaints: admin@clickmeats.co.uk.

See also our Terms of Service.