Privacy policy

Who is responsible for your data

Rosemary Etukudo, trading as Pink Plate Planner, is the data controller for personal information processed to provide this meal-planning service. This notice explains our use of your information. Paddle acts as Merchant of Record for purchases and processes payment-related information under its own Privacy Policy.

You can reach us about your personal information at contactus@pinkplateplanner.com.

What we collect, why and our legal bases

Where UK GDPR or EU GDPR applies, we rely on the following Article 6 bases:

• Account information: name, email, date of birth and authentication information, including information supplied through Google sign-in if you choose it. We use this to create and manage your account and authenticate access (performance of a contract, Article 6(1)(b)).
• Your content: recipes, source links, uploaded photos, menus, shopping lists and AI prompts and outputs. We store and process these to deliver the features you request (contract, Article 6(1)(b)). Avoid putting unnecessary sensitive personal information into recipes or prompts.
• Membership and billing records: billing name and address, subscription status, transaction amounts, dates, order references and limited payment information such as the card’s last four digits where supplied. We use these to manage paid access (contract, Article 6(1)(b)) and meet tax and accounting duties (legal obligation, Article 6(1)(c)). We do not store full card numbers or card security codes.
• Technical and security information: IP addresses, device/browser information, service usage and diagnostic or error logs processed by our service providers. These help operate, secure and improve the service and prevent abuse (legitimate interests, Article 6(1)(f)). We balance these interests against your privacy rights.
• Correspondence: information you supply in support or privacy requests, used to respond and resolve issues (contract or legitimate interests, Articles 6(1)(b) and 6(1)(f)); handling legally required rights requests also relies on Article 6(1)(c).

If we introduce optional marketing or non-essential tracking that requires consent, we will ask first (Article 6(1)(a)). You can withdraw consent without affecting earlier lawful processing.

Data sharing

We do not sell your personal data. We share only what is needed with service providers supporting hosting, authentication, private photo storage, diagnostics and AI processing. When you use AI features, your request and necessary planning context are sent to the AI service provider to produce the requested response.

We share relevant customer and order information with Paddle, our reseller and Merchant of Record, for sales, subscription management, payments, tax compliance, invoicing and refunds. Paddle handles checkout and payment data directly.

We may also share information with professional advisers, including legal and accounting advisers, and authorities where required by law. Recipes or meal plans you choose to share with friends are disclosed at your direction.

International transfers

Our service providers may process information outside the UK or EEA. Where a transfer is subject to UK GDPR or EU GDPR, we require appropriate safeguards, such as an adequacy decision, Standard Contractual Clauses and, where relevant, the UK International Data Transfer Addendum or Agreement. You may request information about the safeguards relevant to your data.

Data retention

We keep your account information and saved content while your account remains open. Ending a paid subscription does not automatically close your account or delete your saved content. If you close your account, we delete your personal data within 30 days, except information we must retain for legal obligations, unresolved disputes or security needs.

We retain billing and transaction records for the period required by UK tax law, normally six years. Support correspondence and diagnostic records are kept only as long as necessary for their purpose. When information is no longer needed, it is deleted or anonymised; residual backups are removed through the provider’s backup lifecycle.

Security

We use appropriate technical and organisational measures to protect personal data, including encrypted HTTPS connections, authenticated access, account-level access controls for private records, private storage for uploaded recipe photos and time-limited links for displaying those photos. Payment card entry is handled by Paddle rather than stored by Pink Plate Planner. Access to information is limited to what is necessary to operate and support the service.

No online system is completely secure. Keep your account credentials confidential and do not share private photo links or personal meal-plan information unless you intend others to see them.

Cookies and browser storage

We use essential cookies or browser storage where needed to keep you signed in and operate account features. These are necessary for the service you request. This notice does not authorise analytics or marketing cookies: if we introduce them, we will provide information and obtain consent where required. You can remove or block cookies and local storage in your browser settings, but doing so may sign you out or prevent account features from working.

Your rights

Subject to applicable law, you can request access to, correction or erasure of your information, restriction of processing, data portability, or object to processing based on legitimate interests. You may withdraw consent at any time where we rely on it. You can update your personal and billing details on My account.

Rosemary Etukudo is responsible for handling privacy rights requests. We may need to verify your identity to protect your data. We normally respond within one month; if a lawful extension is needed because of complexity or volume, we will explain it within that month. You can complain to the UK Information Commissioner’s Office at ico.org.uk, or your local supervisory authority in the EEA.

Contacting us

Privacy rights requests, questions about this notice and complaints should be sent to Rosemary Etukudo at contactus@pinkplateplanner.com. Please include enough detail for us to identify your account and understand what you are asking for.

If your request concerns a specific payment or order, you may also contact Paddle directly, as described in our Refund policy.

Changes to this notice

We may update this notice as the service or legal requirements change. The date above shows the latest revision. We will notify you of material changes where required by law.