Privacy Policy

Everybody Eats Ltd 5 Merchant Square, London, W2 1AY Company Registration No: 14391694 ICO Registration No: C1890164

Last updated: 12 March 2026

1. Introduction

Everybody Eats Ltd ("we", "us", or "our") operates the website everybodyeats.dev. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website, use our services, or contact us.

We comply with the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR), and the Data Protection Act 2018.

We take your privacy seriously. This policy is written in plain language so you can easily understand what we do with your information and what rights you have.

2. Who We Are

Everybody Eats Ltd is the data controller for personal data collected through this website.

• Registered in England & Wales: No. 14391694
• Registered office: 5 Merchant Square, London, W2 1AY
• ICO registration: C1890164
• Privacy contact: privacy@everybodyeats.dev

Some services, including payment processing, may be supported by our US affiliate, Everybody Eats Original LLC (30 N Gould St STE R, Sheridan, Wyoming 82801), acting on behalf of Everybody Eats Ltd.

3. What Data We Collect

Information you provide to us

When you fill in our demo request form or contact us, we collect:

• First name and last name
• Company name
• Work email address
• Any message content you include

Information collected automatically

When you visit our website, we automatically collect:

• IP address (anonymised where possible)
• Browser type and version
• Device type and operating system
• Pages visited, time spent, and navigation path
• Referral source (how you found us)
• Approximate geographic location (derived from IP address)

This data is collected through cookies and Google Analytics. See our Cookie Policy for full details.

4. How We Use Your Data

We use your personal data for the following purposes:

Purpose	Legal Basis
Responding to your demo request or enquiry	Contract — to take steps at your request before entering a contract
Communicating with you about our services	Legitimate interests — to manage our client relationships
Improving our website and understanding how visitors use it	Consent — for analytics cookies (see Cookie Policy)
Ensuring website security and preventing abuse	Legitimate interests — to protect our website and users
Complying with legal and regulatory obligations	Legal obligation — where required by UK or EU law

We will never use your data for automated decision-making or profiling that produces legal effects concerning you.

5. Marketing Communications

We do not currently send marketing emails. If we introduce marketing communications in the future, we will only contact you with your explicit consent, and you will always be able to unsubscribe easily.

6. Who We Share Your Data With

We may share your personal data with the following categories of recipients:

• Hosting provider: Our website is hosted on WordPress infrastructure. The hosting provider processes data on our behalf to deliver the website.
• Analytics provider: Google Analytics collects anonymised website usage data to help us understand how visitors use our site. See our Cookie Policy for details and how to opt out.
• Everybody Eats Original LLC: Our US affiliate may support service delivery. Transfers are governed by our Intragroup Data Transfer Agreement and appropriate safeguards (see Section 8).
• Professional advisers: Such as legal counsel or auditors, where necessary.
• Law enforcement or regulators: Where we are required to do so by law.

We do not sell, rent, or trade your personal data to any third party.

7. How Long We Keep Your Data

Data Type	Retention Period
Demo request / contact form submissions	12 months
Website analytics data	Up to 24 months (Google Analytics default)
Client contact records (if you become a client)	Contract duration plus 2 years

After these periods, your data is securely deleted or anonymised. For full details, see our internal Personal Data Retention Schedule, available on request.

8. International Data Transfers

Your data may be transferred outside the UK or EEA in the following circumstances:

• Google Analytics: Google may process data in the US. Google participates in the EU-US Data Privacy Framework and provides Standard Contractual Clauses.
• Everybody Eats Original LLC (US): Transfers between our UK and US entities are governed by our Intragroup Data Transfer Agreement with appropriate safeguards in place.

We will not transfer your data to any country without ensuring adequate protection is in place, whether through an adequacy decision, Standard Contractual Clauses (SCCs), or another lawful mechanism.

9. How We Protect Your Data

We take appropriate technical and organisational measures to protect your personal data, including:

• Encryption of data in transit (TLS/HTTPS)
• Access controls limiting who can view personal data
• Regular security reviews and monitoring
• Secure deletion of data when no longer needed

10. Your Rights

Under UK GDPR, you have the following rights:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate or incomplete data
• Erasure — ask us to delete your personal data (in certain circumstances)
• Restriction — ask us to limit how we use your data
• Portability — receive your data in a structured, machine-readable format
• Objection — object to our processing of your data based on legitimate interests
• Withdraw consent — where we rely on your consent (e.g. analytics cookies), you can withdraw it at any time

To exercise any of these rights, contact us at privacy@everybodyeats.dev. We will respond within one calendar month.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

11. Cookies

Our website uses cookies to function properly and to help us understand how visitors use the site. We use a cookie consent banner to give you control over non-essential cookies.

For full details about the cookies we use and how to manage your preferences, please see our Cookie Policy.

12. Third-Party Links

Our website may contain links to other websites. This Privacy Policy applies only to everybodyeats.dev. We are not responsible for the privacy practices of other websites and encourage you to read their privacy policies.

13. Children

Our website and services are not directed at anyone under 18 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us at privacy@everybodyeats.dev and we will delete it promptly.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page with a new "last updated" date. We will not reduce your rights under this policy without your explicit consent.

15. Contact Us

For any questions about this policy or your personal data:

• Email: privacy@everybodyeats.dev
• Post: Everybody Eats Ltd, 5 Merchant Square, London, W2 1AY

If you are not satisfied with our response, you can contact the Information Commissioner's Office (ICO) at ico.org.uk.