1.Who is responsible for your information
Digital Crown Ltd, trading as Food Made Clear, is the data controller for the personal information described on this page. Company number 16376887; registered office 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom.
For anything about your information, email support@foodmadeclear.co.uk with “Privacy” in the subject line, or call +44 20 3953 5727.
We follow the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2.What we collect and why
| When | What | Why, and our lawful basis |
|---|---|---|
| You buy a guide | Email address, the guide you chose, amount paid, the country of your card and a payment reference from Stripe. We never receive your card number. | To deliver your order, send your receipt and download link, and keep accounting records. Basis: performance of a contract; legal obligation (tax records). |
| You build a guide | The conditions you manage, your kidney-disease stage where relevant, and any food allergies. | To generate a guide that matches you. This is health information: see section 3. Basis: your explicit consent. |
| You join the list or ask for the free sheet | Email address, and the condition you were interested in. | To send you what you asked for and occasional tips. Basis: consent, withdrawn by unsubscribing. |
| You ask to be told when a guide launches | Email address and the conditions you asked about. | To email you once when that guide is available. Basis: consent. |
| You contact us | Whatever you include in your message, and our replies. | To answer you and keep a record of what was agreed. Basis: legitimate interests (running our business well). |
| You browse the site | Anonymous page-view counts and funnel events (for example “checkout started”), the page you arrived on and any campaign tags in the link you followed. No cookies, no profile. See our cookie policy. | To see which pages help people and fix what does not. Basis: legitimate interests; the data cannot identify you. |
We do not buy data about you, we do not build advertising profiles, and we never sell personal information.
3.Your health information
What we collect. To build your guide we ask which conditions you are managing (and, for kidney disease, the stage) and whether you have any food allergies. This is special category data (health data) under the UK GDPR, so we treat it with extra care.
Lawful basis. We process it only with your explicit consent, which you give by ticking the consent box at checkout (Article 9(2)(a) UK GDPR). We record the time of your consent with your order. You can withdraw consent at any time by emailing us; we then stop processing and delete the information, although we may be unable to rebuild your guide afterwards.
What we do with it. It is used for one purpose: generating your guide, Fridge Finder and food lookup. It is not used for marketing, profiling or decisions about you, and it is never sold or shared for anyone else’s purposes.
Buying for someone else. If you give us another person’s conditions or allergies, for example when buying a gift, you confirm that you have their permission. We treat their information exactly as described here.
Retention. The conditions, stage and allergies you entered are removed from our records 90 days after your guide is generated. The generated files, the order record and the key that identifies which version of our data your guide was built from are kept for as long as you are entitled to download them and for our accounting obligations (see section 5).
4.Who we share information with
We use a small number of specialist companies to run the service. Each acts on our instructions under a written contract and may not use your information for its own purposes.
| Provider | What it does | Where |
|---|---|---|
| Stripe Payments UK Ltd | Takes your payment and carries your order details in the payment session. Stripe is also a controller for the fraud checks it runs on card payments; see Stripe’s privacy policy. | UK and EU, with some processing in the United States |
| Supabase | Our database and the secure storage for your generated files. | European Union |
| Google Cloud | Runs the service that generates Build My Guide bundles. | London (europe-west2) |
| Resend | Sends our emails, including your download link. | United States |
| Vercel | Hosts this website and provides the anonymous page statistics. | Global edge network; statistics in the United States |
Where a provider processes information outside the United Kingdom we rely on the UK Government’s adequacy regulations, the UK–US Data Bridge, or the UK International Data Transfer Addendum to the EU standard contractual clauses, so that your information keeps the same protection.
We will also disclose information where the law requires it, for example to HMRC, or to a court or regulator, and to our professional advisers where necessary.
5.How long we keep information
- Health information (conditions, stage, allergies): deleted 90 days after your guide is generated.
- Order records (email, product, amount, payment reference): 6 years after the end of the tax year of purchase, as HMRC requires.
- Generated guide files: for as long as your download link is valid plus a short grace period so we can re-issue a lost link, then deleted.
- Mailing list and launch notifications: until you unsubscribe or ask us to delete you, or 2 years after you last opened one of our emails.
- Support correspondence: 2 years after the matter is closed.
6.Your rights
You have the right to:
- access the personal information we hold about you and receive a copy;
- correct information that is wrong or incomplete;
- erase your information where we no longer need it or you withdraw consent;
- restrict or object to processing based on legitimate interests;
- port information you gave us to another provider in a machine-readable format;
- withdraw consent at any time, without affecting what was done before;
- not be subject to automated decisions with legal or similarly significant effects. Generating a guide from the conditions you chose is an automated process, but it only produces educational content and makes no decision about you.
To use any of these rights, email support@foodmadeclear.co.uk. We reply within one month and never charge for a first request. We may ask you to confirm your identity, usually by replying from the email address on your order.
If you are unhappy with how we have handled your information you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put things right first: see our complaints page.
7.How we protect your information
All traffic to this website is encrypted (HTTPS). Payments are handled entirely on Stripe’s secure pages. Your generated files sit in private storage that is only reachable through a time-limited, single-order download link. Access to our systems is restricted to the people who need it and protected by multi-factor authentication. Health information is held separately from marketing data and deleted on a schedule.
No system is perfectly secure. If we ever discover a breach that is likely to affect your rights, we will tell you and the ICO as the law requires.
8.Children
Our guides are written for adults managing their own conditions or caring for others. We do not knowingly collect information from anyone under 18. Parents and carers buying a guide for a child’s household should enter only the information needed for the guide.
9.Changes to this policy
We will update this page when our processing changes, and show the new date at the top. If a change materially affects how we use information you have already given us, we will email you before it takes effect.
How to contact us
Food Made Clear is a trading name of Digital Crown Ltd, company number 16376887, registered in England and Wales.
- Emailsupport@foodmadeclear.co.uk
- Phone+44 20 3953 5727020 7167 9518
- Registered office71-75 Shelton StreetCovent GardenLondon WC2H 9JQUnited Kingdom