Privacy Notice — Forkable

This Privacy Notice explains how Forkable ("we", "us", "our") collects, uses, and protects personal data when you use our website and subscription service.

1. Who we are

Forkable is operated by Forkable. We act as the data controller for the personal data described in this notice. If you have any questions, contact us at hello@forkable.co.uk.

2. Personal data we collect

Account data: name, email address, login credentials.
Profile data: allergen preferences and settings you choose to save.
Support data: messages you send us and their contents.
Usage data: pages viewed, features used, approximate location (from IP), device and browser information.
Cookies and similar technologies: essential cookies to keep you signed in, and analytics cookies to understand aggregate use of the service.

Payment card details are collected and processed by our Merchant of Record, Paddle. Forkable does not store or have access to your full card details.

3. How and why we use your data

To create and maintain your account (contract).
To provide the directory, recipes, guidance and other subscriber features (contract).
To respond to support requests (legitimate interests / contract).
To detect and prevent fraud, abuse and security incidents (legitimate interests).
To improve the service and understand aggregate usage (legitimate interests).
To send service and billing communications (contract / legal obligation).
To send marketing about Forkable where you have opted in (consent).

4. Who we share data with

Service providers that host our infrastructure, database, email and analytics tooling.
Paddle, our Merchant of Record, for sale of the subscription, billing, tax compliance, and invoicing.
Professional advisers (legal, accounting) where reasonably necessary.
Authorities where we are required to do so by law.

5. International transfers

Some of our service providers may process data outside the UK/EEA. Where they do, we rely on appropriate safeguards such as the UK International Data Transfer Addendum or the European Commission's Standard Contractual Clauses.

6. Data retention

We keep account data for as long as your account is active and for a reasonable period afterwards to handle disputes, comply with legal obligations, and prevent fraud. When data is no longer needed we delete or anonymise it.

7. Your rights

Under UK GDPR you have the right to access your personal data, request correction or erasure, restrict or object to certain processing, request portability, withdraw consent where processing is based on consent, and complain to the Information Commissioner's Office (ico.org.uk). We respond to rights requests within one month.

8. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, and regular review of our providers. No online service can be guaranteed 100% secure, but we work to minimise risk.

9. Cookies

We use essential cookies to keep you signed in and to remember your preferences, and privacy- respecting analytics to understand aggregate use of the service. You can manage cookies in your browser settings.

10. Changes to this notice

We may update this notice from time to time. Material changes will be notified to you by email or by a prominent notice within the service.

11. Contact

Questions or requests: hello@forkable.co.uk.