Privacy policy

This policy explains how Cook Local (“we”, “us”) processes personal data when you use the website and apps to discover kitchens, place orders, and manage your account. We are the data controller for platform services. Independent kitchens (“suppliers”) on Cook Local are separate controllers for their own use of your data in relation to preparing and fulfilling your order.

Who we are

The legal entity that operates Cook Local is named in our Terms and conditions. Contact: support@cooklocal.app.

Data we collect

• Account and profile: name, email address, phone number if you provide it, delivery or collection address details, and preferences you save in your account.
• Orders: basket contents, order history, messages between you and suppliers where the product allows it, and payment status (payments are processed by Stripe; we do not store full card numbers on our servers).
• Supplier accounts: business and contact details, Stripe Connect account identifiers, and information needed to operate your kitchen listing and payouts.
• Technical: IP address, device and browser type, and cookies as described in our Cookie policy.

Why we use your data

• To provide the service: accounts, search, carts, checkout, order updates, and customer support.
• To process payments and payouts via Stripe (including fraud prevention as required by payment rules).
• To send service emails and notifications you expect (e.g. order confirmations) and, where you opt in, marketing.
• To improve security, debug issues, and comply with law (including tax and food-safety obligations where applicable).

Legal bases (UK GDPR)

We rely on contract (providing the platform you asked for), legitimate interests (securing and improving the service, analytics where applicable), and consent where required (e.g. non-essential cookies or marketing). We rely on legal obligation where the law requires us to retain or disclose information.

Sharing your data

We share data with:

• Suppliers you order from — what they need to prepare and fulfil your order (e.g. name, contact, items, fulfilment details).
• Stripe (and, where used, Stripe Terminal) for payments and Connect payouts.
• Hosting, email, and infrastructure providers we use to run Cook Local (under contract and appropriate safeguards).

We do not sell your personal data.

International transfers

Where processors store data outside the UK/EEA, we ensure appropriate safeguards (such as UK-approved standard contractual clauses) where required.

Retention

We keep data only as long as needed for the purposes above, including legal, tax, and accounting requirements. Order and payment records may be retained for a number of years as required by law.

Your rights

Under UK data protection law you may have rights to access, rectify, erase, restrict, or object to certain processing, and to data portability. You may lodge a complaint with the ICO (ico.org.uk). To exercise your rights, contact us at support@cooklocal.app.

Changes

We may update this policy from time to time. We will post the new version on this page and, where changes are material, notify you by appropriate means (e.g. email or in-app notice).