Privacy Policy
What personal information we collect, why, who processes it, and your rights under UK GDPR.
Summary
- We collect what we need to run orders, payments, deliveries and your account.
- Stripe takes card payments. We never see or store your card number.
- We don't sell personal information. You can see, correct or delete yours at any time.
Who we are
Hi-Eat Ltd ("Hi-Eat", "we") operates the Hi-Eat marketplace and is the data controller for the personal information described here. Contact us at hello@hi-eat.co.uk.
What we collect
| Information | What it covers |
|---|---|
| Account | Your name and email address, and a profile photo if you add one. |
| Orders | What you ordered, from which cook, delivery addresses you save, order history, and reviews you leave. |
| Payments | Card payments are taken by Stripe on its own secure page. We receive a payment reference and whether it succeeded; we never see or store your card number or CVC. |
| Phone number | If you give one, so couriers and kitchens can reach you about an order and, if you allow it, so we can text you order updates. |
| Location | Cook locations are shown at postcode-district level (for example "CV2" or "M1"), not full addresses. If you allow location access in the app, your phone's position is used to show cooks and food that can reach you, and is sent to us only to check the distance at that moment; we do not keep a history of where you have been. Saved address postcodes are turned into map positions using postcodes.io. On the website, your browser asks GeoJS for your approximate town so the home page shows the right place; we do not receive or store it. Couriers share their location while on a delivery. |
| Camera and photos | Only when you choose to use them: to scan Hi-Eat bags, take a doorstep photo when delivering, or add photos and videos to your kitchen, stories or reviews. |
| Messages | Chats between you and your courier about an order, kept with the order. |
| Notifications | If you allow notifications, a token from Apple or Google so we can send order updates to your phone. |
| Cooks | Onboarding details including address, and compliance documents uploaded during verification. |
| Errand runner applicants | Name, phone, postcode, transport and availability, plus photo ID and proof of address. |
| Stories and content | Photos and videos cooks post, and the dishes tagged in them. |
| Usage counts | The app sends an anonymous install code when it is open, and the website counts page visits on our server without setting any cookie. Each visitor is a code that changes every day and cannot identify you. We only look at totals. |
How we use it
- Showing cooks near you, and taking and fulfilling orders
- Running events
- Paying and supporting cooks
- Vetting cook and runner applications
- Moderating content
- Sending service emails: sign-in codes, order and application updates
- Keeping the platform safe
Who processes it for us
| Provider | What they do |
|---|---|
| Railway | Runs our application |
| Supabase | Database and file storage |
| Stripe | Card payments |
| Resend | Service emails |
| Twilio | Text messages |
| Expo, Apple and Google | Phone notifications |
| postcodes.io | Turns saved postcodes into map positions |
| GeoJS | Approximate town on the website, asked by your browser |
These providers process data on our behalf under their own security commitments.
How long we keep it
| Information | Kept for |
|---|---|
| Account and order records | While your account is active |
| Order and payment records | Longer where the law requires, for example for tax |
| Identity documents from cook and runner applicants | While the application and any resulting role is active. Deleted on request or when no longer needed. |
You can delete your account in the app (More → Account → Delete account) or by emailing hello@hi-eat.co.uk, which is also how to ask us to delete your documents.
Cookies and local storage
We use your browser's local storage for essentials: keeping you signed in, your basket, your favourites, and remembering your latest order so pages like tracking and confirmation work. We do not use third-party advertising cookies. The Cookie Policy lists everything.
Your rights
These are your rights under UK GDPR. Email hello@hi-eat.co.uk to use any of them.
Children
Hi-Eat is for adults. We do not knowingly collect information from anyone under 18.
Changes
We will update this policy as Hi-Eat develops; the date at the top shows the current version.
Hi-Shop
Kunle Kitchen