Privacy Policy

Last updated: 23 October 2026

Who we are

Courtney's Meal Preps ("we", "us") is responsible for the personal information collected through this website. Courtney's Meal Preps is run by Courtney Turner, a sole trader. Correspondence address: 136 Hall Street, Stockport, SK1 4HE. This is a postal address only, not a collection point.

What we collect

When you sign in to order: your email address, so we can send you a secure sign-in link.
Your name, email address and mobile number, so we can take your order, hand it over at collection and contact you if there's a problem with your collection. We won't use your number for marketing.
When you place an order: the meals you choose, your collection location and day, the order total and whether it has been paid.
When you pay: you enter your card details on Stripe's secure payment page. We never see or store your full card details. Stripe tells us whether your payment succeeded and may share your name and email address with us for your receipt.
If you email us or message us on Instagram: your name, contact details and anything you choose to tell us.
Basic technical information needed to keep the site secure and working, such as your IP address and browser type, handled by our hosting provider.

We don't ask for health information through this website. If you choose to tell us about an allergy or dietary need, we'll only use it to answer you and to make your order safely, and we'll delete it when it's no longer needed.

Why we use it and our lawful basis

To sign you in, take your order, prepare it, arrange collection and contact you about it. Lawful basis: contract (UK GDPR Article 6(1)(b)).
To keep records we have to keep by law, such as tax and accounting records. Lawful basis: legal obligation (Article 6(1)(c)).
To keep the website secure, count visits and keep sensible business records. Lawful basis: our legitimate interests (Article 6(1)(f)) in running a secure website and business.

We won't add you to a mailing list or send you marketing unless you've asked us to.

If you don't give us your details

You don't have to give us any information, but we need your email address to sign you in and take an order.

Automated decisions

We don't make any decisions about you using only automated processing, and we don't profile you.

Who we share it with

We only share your information where we need to, and we never sell it. The people and services we use are:

Bee Motion Marketing Ltd, which builds and looks after this website.
Lovable, which hosts this website, stores customer accounts and orders, and sends sign-in emails.
Stripe, which processes card payments.
Our email provider, which stores the emails we receive.
Instagram (Meta), only if you choose to message us there.
Our accountants, insurers, professional advisers, and the police or other authorities where the law requires it.

Transfers outside the UK

Some of these providers store or process information outside the UK, including in the United States and the European Economic Area. When that happens we make sure it's protected by one of the safeguards UK law allows: a UK adequacy decision (including the UK Extension to the EU-US Data Privacy Framework, where the provider is certified under it), or the ICO's International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. Contact us if you'd like more detail about the safeguard used for a particular provider.

How long we keep it

Your sign-in account: until you ask us to delete it.
Order and payment records: six years after the end of the tax year the order was in, because we have to keep financial records. We keep these even if you delete your account.
Emails and messages that don't lead to an order: up to 12 months after our last contact, then deleted.

Cookies and similar technology

This website doesn't use advertising cookies. We use:

your browser's local storage to remember your basket and keep you signed in. This is strictly necessary for the site to work, so it doesn't need your consent.
visitor statistics built into our hosting (Lovable), which set a short-lived cookie called session-id, lasting 30 minutes, to count visits. It doesn't track you across other websites.

When you pay, Stripe's payment page sets its own cookies to process your payment and prevent fraud. Stripe's privacy policy explains how it uses them.

Your rights

You have the right to:

ask for a copy of the information we hold about you (access)
ask us to correct anything that's wrong (rectification)
ask us to delete your information (erasure)
ask us to limit how we use it (restriction)
object to us using it where we rely on legitimate interests (objection)
ask us to give you your information in a common electronic format, or send it to someone else, where we're using it under a contract or with your consent (data portability)
withdraw your consent at any time, where we rely on consent.

To use any of these rights, contact us at hello@courtneysmealpreps.co.uk. We'll respond within one month. There's usually no charge.

Complaints

If you're unhappy with how we've used your information, please tell us first at hello@courtneysmealpreps.co.uk. We'll acknowledge your complaint within 30 days and look into it without undue delay, then let you know the outcome.

If you're still not happy, you can also complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed.