Privacy Policy

1.Who we are

In short: Meatod is the data controller for your personal data.

Meatod Ltd (company number 13774414, registered office Unit 09, 1st Floor, 124 Whitechapel Road, London, England, E1 1JE) is the controller of the personal data described in this policy ("Meatod", "we", "us").

Questions about this policy or your data: contact@meatod.com.

2.The data we collect

In short: only what's needed to take, deliver, and support your order.

If you check out as a guest, we collect your name, phone number, email, and delivery address at checkout to fulfil that order.

3.Why we use your data

In short: to fulfil your orders, keep the Service secure, and meet our legal duties.

4.Who we share your data with

In short: our partner butcher sees only what's needed to pack and deliver — never your phone number, email, or payment details.

Partner butchers. To fulfil your order, our partner butcher receives your name, delivery address, order items, and delivery date only. We deliberately do not share your phone number, email address, prices paid, or payment information with partner butchers.

Service providers (processors). We use a small number of trusted providers to run the Service. They process data on our instructions and cannot use it for their own purposes:

• Payment processing — our payment provider(s) process your payment (e.g. Stripe);
• Database, authentication & storage — Supabase (order data, accounts, refund photos in a private storage area);
• Hosting — Vercel (serving the website/app);
• Transactional email — Resend (order emails and sign-in codes);
• Network security & DNS — Cloudflare.

Legal. We may disclose data where required by law, or to protect Meatod, our customers, or others (for example, sharing evidence of payment fraud with our payment provider or the authorities).

We do not sell your personal data.

5.International transfers

In short: some providers process data outside the UK, always with legal safeguards.

Some of our service providers process data outside the UK (for example, in the United States or the EEA). Where they do, the transfer is protected by UK-approved safeguards such as adequacy decisions, the UK Extension to the EU-US Data Privacy Framework, or the ICO's International Data Transfer Agreement / standard contractual clauses.

6.How long we keep your data

In short: as long as needed for the purpose — and no longer.

• Order and payment records — kept for 6 years after the end of the relevant financial year, as required for UK tax and accounting purposes.
• Refund-request photos — deleted automatically once the claim is resolved (approved or rejected).
• Account data — kept while your account is active. You can ask us to delete your account at any time; we will do so, subject to the legal retention above.
• Reviews — kept while they remain relevant to the Service; you can ask for yours to be removed.

7.Your rights

In short: your data, your rights — and the ICO if you're not happy with us.

Under UK GDPR you have the right to:

• Access the personal data we hold about you;
• Correct inaccurate data;
• Delete your data ("right to be forgotten"), subject to legal retention duties;
• Restrict or object to certain processing, including any direct marketing;
• Port your data to another provider in a machine-readable format;
• Withdraw consent at any time, where processing is based on consent.

To exercise any right, email contact@meatod.com. We respond within one month.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk. We would appreciate the chance to resolve your concern first.

8.Cookies and device storage

In short: we use essential storage only — no advertising cookies.

The Service stores a small amount of data on your device to function: your sign-in session, the contents of your bag, and any promo code you have applied. This is essential storage required to provide the Service. We do not use third-party advertising or cross-site tracking cookies.

9.How we protect your data

In short: encryption in transit, strict access controls, private storage for sensitive files.

All data is encrypted in transit (HTTPS). Access to personal data in our database is restricted by row-level security rules, so customers can only ever access their own records and administrative access is limited and authenticated. Refund photos are held in a private storage area that is not publicly accessible and are deleted when no longer needed.

10.Marketing

In short: marketing only with your permission, and you can stop it anytime.

We will only send you marketing messages (such as offers or new-product announcements) if you have opted in. Every marketing message includes a way to unsubscribe, and you can withdraw consent at any time by contacting us. Transactional messages about your orders (confirmations, delivery updates, sign-in codes) are not marketing and are sent as part of providing the Service.

11.Children

In short: Meatod is for adults.

The Service is intended for people aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

12.Changes to this policy

In short: check the date at the top.

We may update this policy as the Service evolves. Material changes will be highlighted on the Service. The "Last updated" date at the top shows the current version.

13.Contact us