Privacy notice

Who we are

EmpoweredFIT Liverpool Ltd, trading as Empowered Eats, is the controller of the personal information used for this ordering service.

Company number 15939617. Registered in England and Wales. Registered office: 23 Carruthers Street, Liverpool, L3 6BY. Contact: empoweredeatsuk@gmail.com.

What we collect

We collect your name, email address, mobile number, its normalised UK format where applicable, order contents, selected collection cafe or delivery slot, delivery address and instructions where relevant, discount-code eligibility and usage, payment and refund identifiers, delivery status information, and your recorded email and text-marketing choices. For reminder messages, we also keep the provider message identifier and available delivery, bounce, failure and email-click timestamps. We record distinct steps after a signed reminder link is used, including the link opening, basket restoration, checkout starting and a paid reorder, so a click alone is not treated as proof that another order was placed.

If you choose repeat orders, we also keep the chosen cadence, meal template, recurring amount, collection pattern, next charge and collection dates, Stripe customer/subscription references, repeat-message delivery and email-click status, and a record of skip, move, cancellation and payment-card actions you confirm. If you use the calorie calculator, the calculation uses the energy equation you select, age, height, current and goal weight, chosen weight unit, normal movement, goal, exercise types and weekly hours in your browser and again on our server when you request a results email. We send those inputs and the result in the requested email, but do not store the calculator inputs in our customer database. We keep a salted hash of the recipient and internet address for short-term rate limiting, plus the recorded Kajabi marketing choice where supplied. If you allow optional advertising measurement, we also record that choice and may use Meta browser identifiers, Google Analytics client and session identifiers, advertising click identifiers, your browser information and internet address to connect an order with an advert and website visit. Stripe processes and securely stores card or wallet details used for repeat payments; we do not receive your full card number.

Why we use it

• To take payment, prepare, collect or deliver your order and send service updates, because this is necessary to perform our contract with you.
• If you choose repeat orders, to arrange future payments and collections, send the required upcoming-order and payment emails, and apply a skip, slot move, cancellation or card update you request. These are operational messages needed to provide and manage the repeat service, not marketing.
• To keep tax, accounting, food-safety and transaction records where we have a legal obligation.
• To prevent fraud, secure the service, answer problems and improve operations where this is in our legitimate interests and does not override your rights.
• If you actively select “Allow us to email and text you” at checkout, to send one abandoned-basket email, email and text reorder reminders seven days after an order, and a 30-day email only when you have not placed another order. This processing relies on your consent.
• To verify whether an operational or consented reminder was sent, delivered, failed or clicked, and whether its secure link led to a restored basket, checkout or paid reorder. Email-security software can open or scan links automatically, so a delivery, click or link-open record is not treated as proof that you personally read the message or placed an order.
• To send the calorie and macro result you request. This is a one-off service email and does not itself subscribe you to marketing.
• If you separately select the EmpoweredEATS offers and nutrition-updates box at checkout, to submit your name and email to our Kajabi marketing form. Kajabi may use double opt-in before adding you as a subscriber. This processing relies on your consent.
• If you separately allow optional advertising measurement, to understand which Meta and Google Ads adverts and website journeys lead to checkout and paid orders and improve campaign performance. This processing relies on your consent.

The email-and-text reminder box and the separate Kajabi marketing box are optional and unticked by default. Asking for calculator results does not require Kajabi marketing consent. We record consent separately for each purpose and channel so each opt-out can be respected. Every marketing email includes a one-click email unsubscribe route. Reorder texts use the one-way sender EFGymsUK, say not to reply and include a secure web link where you can opt out of texts. You can also withdraw either choice by contacting us. We record the opt-out and cancel messages or queued transfers that can still be cancelled. A Kajabi transfer already in flight cannot be recalled; if it completes during withdrawal, we flag it for removal in Kajabi and you can also use Kajabi's unsubscribe link.

Who receives it

We share only what is needed with service providers that help us run the order and calculator: Stripe for one-off and repeat payments and its customer card-update portal, Stuart for delivery orders, our website and database hosting providers, Resend for receipts, repeat-service messages, requested calculator results and consented reminder emails, and TextMagic for consented reorder texts. Resend returns available delivery, bounce, failure and email-click status to us; TextMagic returns available text-delivery status. If you separately choose Kajabi marketing, we submit only your name and email to a dedicated Kajabi form; we do not send Kajabi your calculator measurements, result, order, address, notes or payment information. If you allow optional advertising measurement, we also send consented advertising events and matched identifiers to Meta, and website and paid-order events with Google Analytics client and session identifiers to Google. We may also share information with professional advisers, insurers, regulators or law enforcement where required.

Some providers may process data outside the UK. Where they do, we rely on an applicable adequacy decision or approved contractual safeguards. Contact us if you want more information about the safeguard used for your order.

How long we keep it

We keep confirmed order and payment records for as long as needed for customer service, food-safety, tax and accounting duties. Financial records may be retained for six years from the end of the relevant company financial year. Reminder-message delivery, failure, click, action and conversion records are kept with the related order for as long as needed to evidence consent, troubleshoot delivery and assess whether the reminder led to another order; we remove or anonymise them earlier where required. The calculator email ledger does not contain your raw email address or calculator inputs and is deleted after 30 days. After 30 days we remove queued names and email addresses from our local Kajabi queue, while retaining a keyed pseudonymous subscriber marker, consent-source reference and transfer outcome so the same consent is not submitted to Kajabi more than once. An order source reference remains linked to the retained order record for the same operational-record period. After a successful transfer, Kajabi keeps the name, email and consent record needed to manage your marketing subscription until you unsubscribe or ask us to remove it, subject to records needed to prove and respect the opt-out. If you withdraw Kajabi consent, we keep a minimal suppression and provider-removal status record until the contact has been confirmed removed or unsubscribed in Kajabi; the suppression then remains to prevent a later queued or recovered transfer unless fresh consent is reviewed. Kajabi manages the unsubscribe from Kajabi marketing; the separate Empowered Eats reorder-reminder unsubscribe continues to apply to those reminder messages. Raw Meta browser identifiers, Google Analytics client and session identifiers, advertising click identifiers, internet addresses, browser information and advertising event-delivery records held with an order are automatically deleted or anonymised once the related order is more than 90 days old. If you withdraw advertising consent on this device sooner, we remove those linked identifiers and suppress associated unsent or failed advertising events.

Your rights

Depending on the circumstances, you can ask us for access to your information, correction, deletion, restriction, portability or to object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it at any time.

Email empoweredeatsuk@gmail.com. You can also complain to the Information Commissioner's Office at ico.org.uk.

Cookies and payment

We use essential browser storage to keep an unfinished basket on this device for up to seven days after it was last used. It contains the menu version, save time, product and portion identifiers, and quantities. We recheck saved items against the current menu and prices whenever the basket is restored. When checkout starts, this browser tab also keeps a temporary Stripe checkout reference and a comparison of those basket identifiers and quantities, but never card details. If the same tab returns from a matching confirmed payment and the basket has not changed, it is cleared early; otherwise it remains until you empty it, it expires or you clear this site's browser data. We do not put your name, email, mobile number, address, notes, discount code, collection slot or repeat-order choice in this storage.

Optional Meta and Google Analytics advertising cookies and measurement stay off by default. If you choose “Accept optional cookies”, Meta's browser code may set identifiers such as _fbp and _fbc, and Google Analytics may set identifiers such as _ga. We may send matching checkout events to Meta and Google Analytics. After Stripe confirms payment, our server may also send a paid-order event containing the order identifier, value, currency and ordered items; no name, email address, mobile number, delivery address or Stripe session identifier is sent to Google Analytics.

Advertising browser code is limited to public, non-sensitive pages. It is not loaded on order-confirmation URLs containing a Stripe session identifier, signed reorder links, manager pages or opt-out pages. You can change or withdraw the choice at any time using “Cookie settings” at the bottom of the page. On this device, withdrawal disables Google measurement, removes the advertising cookies that this site can access and reloads the page without the optional measurement code. It also removes linked advertising identifiers held with orders and suppresses queued, failed or stale unsent server events. An event already delivered to Meta or Google, or already being transmitted when withdrawal reaches us, cannot be recalled. If you cleared this site's browser data, used another device or want help with previously sent information, contact us using the details above.

Stripe's secure checkout may use cookies and similar technology needed to prevent fraud and complete payment. These payment protections are separate from the optional advertising choice.