Last Updated: January 2025

At Nursery Meals by Ready Eats, we are committed to protecting your privacy. This policy outlines how we collect, use, and protect your personal information when you visit our website, request a price list, or use our nursery meal delivery services.

This Privacy Policy tells you what to expect us to do with your personal information.

• Who we are and contact details
• What information we collect, use, and why
• Lawful bases
• Data protection rights
• Where we get personal information from
• How long we keep information
• Who we share information with
• How to complain

Ready Eats Limited trading as Nursery Meals by Ready Eats.

We are the data controller responsible for your personal information under this policy.

Contact details:
Address: Unit 4/5 Windover Court, Windover Road, Huntingdon PE29 7EA

Email address: sales@readyeats.co.uk

Phone number: 07723627500

ICO Registration Number: ZA646934

• Names and contact details
• Nursery name and address
• Postcode and delivery location
• Number of children
• Dietary requirements and allergen information
• Meal preferences and ordering history
• Payment details (for bank transfers)
• Website user information (including user journeys and cookie tracking)
• Information relating to compliments or complaints

• Names and contact details
• Nursery name and location
• Email address and phone number
• Number of children
• Current meal service arrangements
• Dietary requirements needed
• How you heard about us

• Names and contact details
• Nursery name and email address
• Marketing preferences
• Purchase or inquiry history
• Website user journey information

• Names and contact details
• Nursery address
• Order history
• Delivery information
• Communication records

Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website.

Our lawful bases for collecting or using personal information to provide nursery meal delivery services are:

· Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.

· Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.

· Legal obligation – we have to collect or use your information so we can comply with the law (e.g., food safety traceability requirements, accounting and tax obligations). All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

· Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:

• Following up on enquiries and quotes
• Keeping records of orders to improve services
• Managing customer relationships
• Improving our website and services

Our lawful bases for collecting or using personal information for responding to enquiries and quotes are:

· Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.

· Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:

• Responding to your enquiry
• Providing you with pricing information
• Following up on the quotes provided

Our lawful bases for collecting or using personal information for service updates or marketing purposes are:

· Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.

Our lawful bases for collecting or using personal information for dealing with queries, complaints or service issues are:

· Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.

· Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.

· Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:

• Resolving service issues
• Improving our nursery meal services
• Maintaining service quality

Which lawful basis we rely on may affect your data protection rights which are in brief set out below.

· Your right of access – You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. There are some exemptions which means you may not receive all the information you ask for.

· Your right to rectification – You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete.

· Your right to erasure – You have the right to ask us to delete your personal information.

· Your right to restriction of processing – You have the right to ask us to limit how we can use your personal information.

· Your right to object to processing – You have the right to object to the processing of your personal data.

· Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you.

· Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent at any time.

If you make a request, we must respond to you without undue delay and in any event within one month.

To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.

· Directly from you (through our website contact form, email, or phone)

· Your nursery settings (when placing orders or providing delivery information)

· Our website analytics (anonymised usage data through Google Analytics)

We only retain your data for as long as necessary to fulfil the purposes outlined in this policy, including legal or accounting obligations.

Our data retention periods:

Data Type	Retention Period	Reason
Enquiry forms (no quote provided)	2 years from last contact	To follow up on potential interest and maintain business records
Quotes provided	3 years from quote date	Business records and potential contract discussions
Active customer accounts	Duration of relationship + 6 years	UK accounting and tax law requirements
Invoices and financial records	6 years from end of financial year	UK tax and accounting legal requirements
Marketing consent records	Until consent is withdrawn + 3 years	To prove compliance with marketing regulations
Website analytics	26 months	Google Analytics retention period

After these periods, we will securely delete or anonymise your information unless we are legally required to keep it longer.

We work with the following data processors who handle your personal information on our behalf:

Google Analytics (Google LLC)
This data processor does the following activities for us: website analytics (anonymised data only)

Cloudflare
This data processor does the following activities for us: website security and performance

All data processors are required to comply with UK GDPR and have appropriate data processing agreements in place.

· Organisations we’re legally obliged to share personal information with (e.g., HMRC, food safety authorities)

· Professional advisors (accountants, lawyers) when necessary for business operations

· Sell or rent your personal information to third parties

· Share your data with advertisers

· Transfer your data outside the UK/EEA without appropriate safeguards

If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.

If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.

The ICO’s address:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113

Website: https://www.ico.org.uk/make-a-complaint

We use cookies on our website. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

Our website and services are intended for childcare professionals and business users. We do not knowingly collect personal information from children under 16.

We may update this Privacy Policy from time to time to reflect changes in our data practices or legal requirements. When we make significant changes, we will update this page and notify active customers by email.

Our website may contain links to other websites (e.g., Ready Eats main site). This Privacy Policy only applies to our website. We are not responsible for the privacy practices of other websites.