Privacy Policy

Last updated 16 July 2026

1. Who we are

Hi-Eat Ltd ("Hi-Eat", "we") operates the Hi-Eat marketplace and is the data controller for the personal information described here. Contact us at hello@hi-eat.co.uk.

2. What we collect

• Account: your name and email address, and a profile photo if you add one.
• Orders: what you ordered, from which cook, delivery addresses you save, order history, and reviews you leave.
• Payments: the card brand and last four digits only, so you can recognise saved cards. We never store your full card number or CVC.
• Cooks: onboarding details including address, and compliance documents uploaded during verification.
• Errand runner applicants: name, phone, postcode, transport and availability, plus photo ID and proof of address documents submitted with your application.
• Stories and content: photos and videos cooks post, and the dishes tagged in them.
• Location: cook locations are stored at postcode-district level (for example "Coventry CV2"), not full addresses, for display to customers. If you allow location access when viewing stories, the distance to a cook is calculated on your own device and is not sent to our servers.

3. How we use it

To run the marketplace: showing cooks near you, taking and fulfilling orders, running events, paying and supporting cooks, vetting runner and cook applications, moderating content, sending service emails (sign-in codes, order and application updates), and keeping the platform safe.

4. Where it is stored and who processes it

Our application runs on Railway and our database and file storage are provided by Supabase. Service emails are sent through Resend. These providers process data on our behalf under their own security commitments.

5. How long we keep it

Account and order records are kept while your account is active. Identity documents submitted by runner and cook applicants are kept while the application and any resulting role is active, and are deleted on request or when no longer needed. Email hello@hi-eat.co.uk to request deletion of your documents or your account.

6. Who we share it with

Cooks see the order details needed to prepare and deliver your order. Event hosts see who has joined their tray and what was ordered for the event. We do not sell personal information.

7. Cookies and local storage

We use your browser's local storage for essentials: keeping you signed in, your basket, your favourites, and remembering your latest order so pages like tracking and confirmation work. We do not use third-party advertising cookies.

8. Your rights

Under UK GDPR you can ask for a copy of your data, ask us to correct or delete it, object to or restrict processing, and ask for your data in a portable format. Contact hello@hi-eat.co.uk to exercise any of these. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

9. Children

Hi-Eat is for adults. We do not knowingly collect information from anyone under 18.

10. Changes

We will update this policy as Hi-Eat develops; the date at the top shows the current version.