Last Updated: 06/10/2026
Name, email address, and password (for account creation and authentication).
Business name, industry, and subscription plan details.
We use Vercel Web Analytics and Vercel Speed Insights to understand aggregate usage patterns, page visits, and site performance. These are privacy-preserving and cookieless: visitors are counted using a temporary identifier derived from the incoming request, which is discarded after 24 hours, and no identifier is stored that could follow you between sessions, devices, or other websites. On our website, analytics are only loaded after you have given cookie consent. In the Culinary Key mobile app — which shows only the sign-in screen and your own account area, never our public website — these cookieless analytics run without a separate banner, because nothing is stored on or read from your device.
We may collect device information, browser type, and IP address for security monitoring and analytics.
We use Stripe for secure payment processing. Culinary Key does not store credit or debit card details. All payment data is securely handled by Stripe in accordance with PCI-DSS standards.
We use cookies for essential platform functionality and user authentication. Our analytics do not use cookies at all. On our website, users can manage preferences via our cookie consent banner, and no analytics are loaded until consent is granted.
The Culinary Key mobile app uses a secure WebView to display the Culinary Key web platform within the app. All data processed within the mobile app follows the same rules and protections described in this Privacy Policy.
The mobile app does not collect any additional personal information beyond what is collected by the web platform.
If the app requests access to device features (such as the camera or file storage), this access will only be used to support platform functions such as uploading photos or documents. All permissions must be granted by the user.
If you take part in our referral and rewards programme, we keep a record of which account referred yours (an internal account identifier and the code used), the rewards each account has earned and how they were applied to its subscription, and the links to any social media posts you send us for a reward. When a new business signs up with a referral code, we compare its email address with those of the referring account's team, so that a business cannot refer itself. We do this on the basis of our legitimate interest in preventing fraud.
Account Management: To create, maintain, and secure your user account.
Subscription & Billing: To process payments and manage subscriptions via Stripe.
Platform Improvement: To analyse user behaviour and enhance the Culinary Key platform.
Marketing & Communication: To send service updates and emails about your account. Where you have opted in, we also send newsletters. As a customer, you may also receive occasional emails about our own offers and rewards connected to the service you use, such as our referral programme. Every promotional email includes an unsubscribe link, and you can opt out at any time.
Performance of a Contract: We process data necessary to provide our services.
Legitimate Interests: For analytics, fraud prevention, service improvement, and telling existing customers about our own offers and rewards connected to the service they use (you can opt out at any time).
Consent: For newsletters and non-essential cookies. You can withdraw consent at any time.
Legal Obligations: To comply with tax, legal, and regulatory requirements.
All data is securely stored in Google Firestore (Google Cloud), hosted within Google's secure infrastructure.
We employ encryption during data transmission. Users are responsible for securing their own account credentials.
Culinary Key uses the following Google Firebase services to operate the platform:
No Firebase service used by Culinary Key collects personal information for advertising or profiling.
Users can export audit records via the platform. Larger data exports can be arranged upon request to support@culinarykey.co.uk.
Users can request complete data deletion by contacting support or using the account deletion process in the app. Account-related data will be permanently deleted 90 days after account termination.
You may request a structured, machine-readable copy of your personal data at any time.
You can opt out of promotional emails at any time using the unsubscribe link in any of them, or by emailing support@culinarykey.co.uk. Opting out does not stop emails about your account, such as receipts, password resets and invitations. Cookie preferences can be adjusted via the cookie banner at any time.
We do not sell user data to third parties. We share data only with the following essential services:
Vercel: Used for hosting, and for aggregated, anonymised usage analytics and site performance measurement.
Stripe: Used for payment processing. Stripe processes billing data in accordance with its own privacy policy and PCI-DSS compliance.
Resend: Used to deliver our emails (welcome emails, password resets, invitations, account and reward notifications, and occasional offers to existing customers).
When using the mobile app, Google Play Services and Firebase may collect device identifiers such as the Android advertising ID or installation ID. These identifiers are used solely for analytics, diagnostics, and fraud prevention. Culinary Key does not use these identifiers for advertising, tracking, or profiling.
Our platform uses cookies for session management and personalisation. Our analytics are cookieless. On your first visit to our website you are presented with a cookie consent banner that allows you to accept or decline non-essential tracking.
On our website you may decline analytics via the cookie banner, in which case no analytics scripts are loaded at all. You can contact us at support@culinarykey.co.uk with any question about analytics tracking, including in the mobile app.
User data is retained for as long as necessary to provide services or meet legal obligations. Account data is deleted 90 days after account closure, unless legally required to retain it. If a deleted account was part of a referral, the other business's reward record keeps an internal account identifier for it, with no name or contact details, so that its reward history stays accurate.
We may update this Privacy Policy periodically. Users will be notified of significant changes, and continued use of our platform indicates acceptance of any updates.
For any privacy-related enquiries, please contact us at support@culinarykey.co.uk.
Culinary Key Ltd
Registered in England and Wales
Company No: 16256914
Registered Office: Available upon request
By using Culinary Key via the website or mobile app, you acknowledge that you have read and understood this Privacy Policy.
