This Privacy Policy explains how Anklebiokne (\u201cwe\u201d, \u201cus\u201d, \u201cour\u201d) collects, uses, shares and protects personal data when you visit our website, contact us, or use our weekly nutrition planning services. We have written it for a general audience and aim to keep it understandable.
1. Who we are
Anklebiokne is a small UK-based nutrition planning service operating from 36 St Mary At Hill, London EC3R 8DU, United Kingdom. We are the data controller for any personal information you share with us through this website or via our written correspondence.
2. What personal data we collect
We try to collect as little personal information as possible. The main categories include:
- Contact details you submit through our form, such as your name, email address and message contents.
- Account information if you choose to start a plan, including your delivery preferences and household size.
- Communication history such as previous emails or messages, kept so that we can give you a coherent reply.
- Technical information such as your browser type, approximate location at country level, and the pages you visit \u2014 collected via analytics in aggregate form.
3. How we use your information
We use your personal data for the following limited purposes:
- To respond to your enquiries and provide the information or service you have requested.
- To deliver and improve our weekly meal planning service, including sending you the weekly plan PDF.
- To keep records of payments, refunds and customer correspondence as required by UK law.
- To understand which pages on our website are useful and which can be improved.
- To meet our legal obligations under UK GDPR, the Data Protection Act 2018 and other applicable rules.
4. Legal basis for processing
We rely on the following legal bases:
- Consent \u2014 when you tick the consent box on our contact form or accept cookies.
- Contract \u2014 when we process information needed to deliver a plan you have ordered.
- Legitimate interests \u2014 for understanding website usage in aggregate and improving our service.
- Legal obligation \u2014 when we are required to keep records by tax, accounting or consumer protection law.
5. Cookies and analytics
We use a small number of cookies to keep the site working, to remember your privacy preferences, and to count visits in an anonymous, aggregated way. You can review and change your cookie choices at any time through the privacy popup or by clearing your browser storage. Detailed information is available in our Cookies Policy.
6. Sharing your data
We do not sell personal data. We only share information with trusted service providers who help us run the website and deliver our service, including hosting, email delivery and payment processing. These providers act on our instructions and are bound by appropriate data protection terms.
We may also disclose information where required by law, for example in response to a valid request from a UK regulator or court.
7. International transfers
Where our service providers operate outside the United Kingdom, we make sure appropriate safeguards are in place \u2014 such as the UK International Data Transfer Addendum or equivalent measures \u2014 so that your data remains protected.
8. How long we keep data
We keep personal data only for as long as we need it to fulfil the purpose it was collected for, plus any period required by law. Typical retention periods are:
- Contact form enquiries \u2014 up to 24 months from your last reply.
- Active customer accounts \u2014 for the lifetime of the account plus 12 months.
- Financial records \u2014 for at least 6 years, to comply with UK tax requirements.
9. Your rights
Under UK data protection law you have the right to:
- Request a copy of the personal data we hold about you.
- Ask us to correct inaccurate or incomplete information.
- Ask us to delete data we no longer need.
- Restrict or object to certain types of processing.
- Withdraw consent at any time, where consent is the basis for processing.
- Lodge a complaint with the Information Commissioner\u2019s Office (ICO).
To exercise any of these rights, please write to us using the details on the Contact page.
10. Security
We use commercially reasonable technical and organisational measures to protect your personal data against accidental loss, unauthorised access, alteration or disclosure. All information transmitted through our site is sent over HTTPS.
11. Changes to this policy
We may update this Privacy Policy from time to time. Any changes will appear on this page, with the \u201cLast updated\u201d date refreshed. Material changes will be communicated more visibly.
12. Contact
If you have any questions about this policy or about how we handle your data, please get in touch via the Contact page.