At Three Good Things LTD, trading as Tiny Budget Cooking, we respect your privacy and are committed to protecting the personal data that we obtain.
The Digital Service is operated by Three Good Things LTD (we, us, our, Tiny Budget Cooking), a company incorporated in England & Wales with company number 10510186 and registered office at 15 Upper Close, Forest Row, East Sussex, RH18 5DS. Where we decide the purpose or means for the processing of the personal data that you provide via our Digital Service, we are the "data controller". As data controller, we will comply with all applicable data protection laws.
This policy should be read together with our:
This policy explains the following:
what information we may collect about you
how we will use information we collect about you
whether we will disclose your details to anyone else
your choices and rights regarding the personal information you provide to us
Our Digital Service may contain hyperlinks to third party websites including the website of our partner networks, advertisers and affiliates. These websites operate fully independently from us, and we cannot accept any responsibility or liability for the privacy practices of such third parties nor the availability of these external sites or resources. The appearance of such links on our website is not an endorsement. Should you use any of these websites, such use is at your own risk and we would advise that you review their respective privacy policies.
1. WHAT INFORMATION DO WE COLLECT AND HOW IS IT USED?
In order to provide our online services and other related business activities, including delivery of our individually tailored mealplans, recipes, personalised nutrition information and online support and community group chat feature, we will need to collect and process information about you.
When you use our Digital Services, whether for browsing, interactive group chats, freemium content, to make an online purchase from our e-shop, or to sign up to our mealplans, you may be asked to fill in forms to create your own account. We will ask you to provide us with the following information:
your name (first name and surname)
your email address
If you decide to use our meal planning service, in order to tailor content to your individual needs we will ask you to provide us with:
your responses to a health and lifestyle questionnaire
your response to a grocery shopping questionnaire
your response to a food preference questionnaire
To complete your online purchase you will also be asked to provide our third party payment service provider with:
your billing address
your shipping address (if different)
your payment details (e.g. credit card details)
We may also obtain additional personal data, which could include special categories of personal data (i.e. personal data of a more sensitive nature), when you voluntarily supply information through our website, such as via our support and Live Chat feature or our Facebook community group.
By interacting with us on social media platforms by way of "liking", "following", commenting, "retweeting" or "sharing", you understand that you are consenting for our interaction with you.
1.1 WEBSITE ANALYTICS AND TARGETED MARKETING
1.1.1 WEBSITE ANALYTICS
We use website analytics to evaluate and improve our Website and to offer the best, most accessible service possible to all of our customers. For example, we utilise third party data analytics service providers (such as Google Analytics) to improve our visibility and to monitor website browser behaviour and navigation across the Website.
These third party data analytics service providers collect this information on our behalf in accordance with our instructions and in line with their own privacy policies. When you visit our Website, our service providers may collect the following data, which will almost always be anonymised and aggregated before reporting back to us:
number of visitors to our Website
pages visited while at the Website and time spent per page
page interaction information, such as scrolling, clicks and browsing methods
websites where visitors have come from and where they go afterwards
page response times and any download errors
other technical information relating to end user device, such as IP address or browser plug-in
1.1.2 TARGETED MARKETING
We use the information that we collect about you to serve you targeted advertisement in order to provide you with more relevant advertising content. The targeted marketing is accomplished via our own channels (i.e. our websites, display advertising, and apps) and third party channels, including across multiple devices or browsers, using the following platforms:
2. HOW DO WE USE YOUR PERSONAL DATA AND ON WHAT BASIS?
When you visit our Digital Service, whether to browse our content, to contact us about our services or to make a purchase, we (or our third party service providers acting on our behalf) may use the personal information that you provide for the following purposes:
2.1 PROVIDING OUR PRODUCTS AND SERVICES
entering into an agreement with you to provide our services or products and in the provision of those services and products.
logging and processing your order in our information systems
providing physical delivery by couriers of products ordered online
providing a platform via which you may access our online support and dedicated Live Chat system and join our Facebook community group
2.2 CUSTOMER SERVICES & ENQUIRIES
replying to your enquiries or responding to concerns or complaints
providing you with information about the services we offer, including our e-newsletter, important announcements about your account, updates about our services, or offers and money off vouchers for our products and plans.
If you contact us to make an enquiry or to raise a concern about our website or any aspect of our online services, we aim to respond to you as promptly as possible and we do so on the basis that we have a legitimate interest in replying to you.
If you have opted-in to receiving e-newsletters or other marketing materials sent via email, you may opt-out at any time via the unsubscribe feature that appears in our emails or by emailing email@example.com
You may also be asked to opt- in to receive updates, information or promotional material including vouchers or discount offers and other similar services from our network of recommended suppliers from us or directly from these suppliers.
2.3 TAX & OTHER LEGAL OBLIGATIONS
reporting VAT and other company tax reporting purposes (as required by law)
complying with regulators, law enforcement agencies or in relation to any claims that may arise
We process personal information for the legitimate interests and under the legal obligation of ensuring that use of the Website and e-shop (i) is lawful and non-fraudulent, (ii) does not disrupt the operation of our services, (iii) does not harass our staff or other individuals, and (iv) to enforce our legal rights and comply with our legal obligations.
In accordance with our legal obligations, we may disclose your information to the extent required by law which may include for financial accounting and taxation purposes with our auditors, regulators or other government bodies such as HMRC. We may also disclose your information to third parties in order to enforce or apply our contractual terms, to investigate potential breaches, to protect the rights and freedoms, property or safety of our business or those of our customers and other individuals.
Where we reasonably believe that you are or may be in breach of any of the applicable laws, we may use your personal information to inform relevant third parties such as your email/internet provider or law enforcement agencies about the content.
If we are involved in a merger, acquisition, or sale of all or a portion of our business or assets, the information we hold may be included as part of that sale, in which case you will be notified via email and/or a prominent notice on the Site of any changes in ownership or use of your information, and any choices you may have regarding that information.
2.4 COOKIES & WEBSITE ANALYTICS
Our Digital Services also uses Google analytics and you can find out more here:
How Google uses data when you use our partners' sites or apps.
To learn how to opt-out of Google analytics, please visit your Google Ads settings or: https://tools.google.com/dlpage/gaoptout/.
we process this information to understand how visitors use our Website and to compile statistical reports regarding that activity (for example, your IP address is used to approximate the country from which you access our Website, and we aggregate this information together so we know that, for example, most of the visitors to our Website come from England).
this processing is crucial to the running of our online business and we therefore undertake such monitoring in the pursuit of our legitimate interests in improving our website and providing a better service and source of information to visitors.
This information is not used to develop a personal profile of you.
2.5 FINANCIAL TRANSACTIONS
All financial transactions via our Digital Services are handled directly by our third party payment service provider. We will not share any personal information with this third party provider, nor will we receive any of the financial information that you provide to them.
3. DO WE SHARE YOUR PERSONAL INFORMATION WITH ANYONE ELSE?
3.1 PERSONNEL, SUPPLIERS AND SUBCONTRACTORS
By group company, we mean our subsidiaries, our ultimate holding company and its subsidiaries, as defined with reference to the definitions of "holding undertaking" and "subsidiary undertaking" in section 1162 of the UK Companies Act 2006.
We will not pass your information on to third parties for marketing purposes unless you have provided your consent, in which event the advertisements that appear when you visit our Website will be targeted to provide you with more relevant advertising content and you may receive communications from third parties offering similar or related services to us.
4. YOUR CHOICES AND RIGHTS IN RELATION TO PERSONAL DATA WHICH WE PROCESS RELATING TO YOU
You have the following rights over the way we process personal data relating to you. We aim to comply without undue delay, and within one month at the latest:
to ask for a copy of data we are processing about you and have inaccuracies corrected;
to ask us to restrict, stop processing, or to delete your personal data;
to request a machine readable copy of your personal data, which you can use with another service provider. Where it is technically feasible, you can ask us to send this information directly to another provider if you prefer; and
to make a complaint to a data protection regulator. You may contact them at: https://ico.org.uk/concerns/.
To make a request in relation to any of the aforementioned rights, please email us at firstname.lastname@example.org
If you are unhappy with the way that we are processing your personal data, please let us know. The best way to bring this to our attention is by emailing us at email@example.com
We do not knowingly use the Website to solicit data from or market to children under the age of 13.
If a parent or guardian becomes aware that his or her child has provided us with information or may be receiving communications from us without consent of a parent or guardian, we ask that this be brought to our immediate attention. We will make it our priority to address this situation and delete information relating to a child as soon as practicable. In such an event, please contact us at firstname.lastname@example.org
We will take commercially reasonable, appropriate technical and organisational measures to ensure a level of security appropriate to the risk that could be encountered via the use of our Digital Services, taking into account the likelihood and severity those risks might pose to the rights and freedoms of our customers and other individuals who might be impacted.
In particular, we will take precautions to protect against the accidental or unlawful destruction, loss, or alteration, and unauthorised disclosure of or access to the personal data transmitted, stored or otherwise processed by us.
Please be aware that, while we make the security of our Website and your personal information a high priority and we devote considerable time and resources to implementing and maintaining robust information technology security, no security system can prevent all security breaches. By choosing to share your personal information with us, you accept the aforesaid and provide your information at your own risk.
In accordance with data protection laws and good commercial practice, we do not retain data in a form that permits identification of the person(s) to whom it relates for any longer than is necessary. Once the purpose for which information has been collected has been fulfilled, we will either permanently delete your personal information or remove all identifiers within it so that it is no longer personal data. We may use such anonymised data for research and/or business analysis purposes.
Where you have provided us with personal information in order to purchase a mealplan and set up an account with us, we will retain those details for as long as your account remains active.
Where you have an account, your account will remain active for thirteen months from date of purchase, after which time all of your information will be removed from our system.
Where we obtain your personal data in relation to the use or purchase of our services or products, including VAT or invoicing information, we are obligated by law to keep this for a minimum of six years.
Where you engage in online discussions through the website, such as with our customer service, nutritionists and support team or via our Live Chat function on our Digital Service and log in area, this content will be kept on their servers indefinitely, to have this communication erased please contact email@example.com
INTERNATIONAL DATA TRANSFERS
Our servers are located in the European Union and the information that we collect directly from you will be stored in these servers. We may also transfer your personal data to our third party service providers, many of whom may be located outside of the EU, operate from multiple locations including non-EU based operations or engage sub-processors located outside the EU.
There are agreements in place to ensure that all of our third party service providers process personal information using appropriate safeguards that meet the requirements of EU data protection laws.
If you would like to find out more about these safeguards or if you have any other queries or comments in relation to this policy, please let us know by emailing us at firstname.lastname@example.org
Alternatively, you may address these to Limahl Asmall, Three Good Things LTD, 15 Upper Close, Forest Row, East Sussex, RH18 5DS