Privacy Notice
Last updated: May 23, 2026
Who we are
Provision Garden Menu ("we", "us") provides Provision Garden Menu, a weekly family meal planner. We are the data controller for personal data processed in connection with the Service.
Personal data we collect
- Account data: name, email address, login credentials.
- Profile / household data: dietary preferences, allergens, garden inventory you provide.
- Usage & telemetry: pages visited, features used, device identifiers, IP address, error logs.
- Support messages: any content you send when contacting support.
Payment-related data (card details, billing address, tax info) is collected directly by our Merchant of Record, Paddle, and is governed by Paddle's privacy notice.
Why we use it
- To create and operate your account (legal basis: contract performance).
- To provide meal-planning features and personalize recommendations (contract performance).
- To prevent fraud and secure the Service (legitimate interests).
- To improve the product and fix bugs (legitimate interests).
- To respond to support requests (contract performance / legitimate interests).
- To send service-related emails (contract performance).
- To send optional product updates (consent — you can unsubscribe at any time).
Who we share data with
- Service providers / subprocessors: hosting, database, analytics, and customer-support tooling, processing data only on our instructions.
- Merchant of Record (Paddle): for sale of subscriptions, payment processing, subscription management, tax compliance, and invoicing.
- Professional advisers: legal and accounting advisers when needed.
- Authorities: where we are legally required to disclose data.
Retention
We keep personal data for as long as your account is active and for a reasonable period afterwards to comply with legal, tax, and accounting obligations. Data that is no longer needed is deleted or anonymized.
Your rights
Depending on your location you may have the right to access, correct, delete, restrict, or port your personal data, to object to processing, and to withdraw consent. UK and EEA residents also have the right to lodge a complaint with their local supervisory authority. We will respond to verified requests within one month.
International transfers
Some of our service providers may be located outside your country. Where data leaves the UK or EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.
Security
We use appropriate technical and organisational measures, including encryption in transit, access controls, and audit logging, to protect personal data.
Cookies
We use essential cookies to keep you signed in and the Service functional. We may use analytics cookies to understand product usage; you can manage preferences through your browser settings.
Contact
For privacy questions, email us at support@provisiongarden.org.