This Privacy Policy explains how EUSHOP LTD, a company registered in England and Wales with company number 12290096, whose registered office is at Brookfield Court, Selby Road, Garforth, Leeds, England, LS25 1NB (“GetMamas”, “we”, “us” or “our”), collects, uses, stores and protects personal data when you use getmamas.com and any related mobile applications and services (the “Platform”).
We are the data controller for the personal data described in this policy. We are committed to handling your data fairly, lawfully and transparently, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who this policy applies to
- Buyers who browse and order meals
- Sellers who register to sell home-cooked meals
- Creators who participate in our affiliate programme
- Visitors who browse the Platform without creating an account
2. The information we collect
2.1 Information you give us directly
- Account details: full name, email address, password, phone number, postcode, city and delivery address
- Seller information: cuisine type, cooking biography, years of experience, kitchen address, availability, maximum order capacity, total completed order count (used to determine commission tier), and bank account details for receiving payouts
- Seller compliance documents: council food business registration, food hygiene certificate, public liability insurance and supporting uploads
- Seller meal settings: whether a Seller has chosen to enable creator promotion on a particular meal listing
- Creator information: content platforms used, audience size and description, cumulative order value attributed to your referral link, and bank account details for affiliate payouts
- Order information: items ordered, delivery or collection preferences, special instructions and allergen-related notes
- Communications: messages sent through our in-app messaging system and customer support enquiries
- Reviews and content: star ratings, written reviews, and any photographs you upload
2.2 Information we collect automatically
- Device and usage information, including IP address (hashed for affiliate fraud prevention), browser type, device type, and pages visited
- Cookies and similar tracking technologies, including affiliate tracking cookies used to attribute orders to Creator referral links for 30 days
- Approximate location, where you provide a postcode to search for meals near you
2.3 Information from third parties
- Payment processors (Stripe), in connection with payments and payouts
- Google, if you choose to sign in or register using Google sign-in
- Communication providers (Twilio, Resend), for delivering SMS, WhatsApp and email notifications
3. How we use your information
3.1 To provide and operate the Platform (performance of a contract)
- Creating and managing your account
- Processing orders and payments between Buyers and Sellers
- Enabling communication between Buyers and Sellers regarding orders
- Calculating Seller commission tiers, processing Seller payouts, and calculating and paying Creator affiliate commission and milestone bonuses
- Reviewing Seller applications and compliance documents
3.2 To meet legal obligations
- Verifying Seller compliance with food safety and hygiene requirements
- Maintaining records required for tax, accounting and regulatory purposes
- Responding to lawful requests from regulators, courts or law enforcement
3.3 For our legitimate interests
- Preventing and investigating fraud, including suspicious affiliate referral activity
- Improving and developing the Platform
- Sending service-related notifications, such as order updates and document expiry reminders
- Maintaining the security of the Platform
3.4 With your consent
- Sending marketing communications, where you have opted in (you may withdraw consent at any time)
- Sending push notifications, where you have enabled them on your device
4. Who we share your information with
We do not sell your personal data. We share personal data only as follows:
- With Sellers and Buyers, to the extent necessary to fulfil an order
- With Creators and Sellers, to calculate and apply the additional Creator fee on a creator-attributed order
- With Stripe, to process payments and payouts (Stripe acts as an independent data controller for payment data)
- With Twilio (SMS, WhatsApp) and Resend (email) to deliver notifications on our behalf
- With our hosting and infrastructure providers (including Supabase) under contractual data processing terms
- With professional advisers, including accountants, auditors and lawyers, where necessary
- With regulators or law enforcement, where required by law
- With a buyer or seller of our business, in the event of a merger, acquisition or restructuring, subject to appropriate safeguards
5. Where we store your data and international transfers
We use third-party service providers, some of which may store or process data outside the UK. Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, such as the UK's International Data Transfer Agreement (IDTA) or adequacy regulations, in accordance with UK GDPR.
6. How long we keep your data
- Account information is retained while your account is active and for a reasonable period afterwards
- Order and transaction records, including Seller tier, commission applied and any Creator fee deducted, are retained for at least 6 years for UK tax and accounting obligations
- In-app messages between Buyers and Sellers are automatically deleted 30 days after the relevant order is completed
- Seller compliance documents are retained for the duration of the Seller's account and for a reasonable period afterwards
- Affiliate tracking data is retained for the 30-day attribution window plus a reasonable period for fraud investigation
7. Cookies
- Essential cookies, required for the Platform to function
- Affiliate tracking cookies, used to attribute orders to a Creator's referral link for 30 days
- Analytics cookies, used to understand how the Platform is used
You can control cookies through your browser settings. Disabling certain cookies may affect functionality, including affiliate attribution.
8. Your rights
- The right to be informed about how we use your data
- The right of access to the personal data we hold about you
- The right to rectification of inaccurate or incomplete data
- The right to erasure of your personal data in certain circumstances
- The right to restrict processing of your personal data in certain circumstances
- The right to data portability
- The right to object to processing based on legitimate interests or for direct marketing
- Rights related to automated decision-making, where applicable
To exercise any of these rights, contact us using the details in section 12. We will respond within one month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
9. Children
The Platform is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from children.
10. Data security
We take appropriate technical and organisational measures to protect personal data, including encrypted storage of sensitive information such as bank details, access controls, and secure processing of payment information through Stripe (PCI-DSS compliant). We never store full bank account or card details ourselves.
11. Changes to this policy
We may update this Privacy Policy from time to time. Where changes are material, we will notify you by email or via a notice on the Platform.
12. Contact us
- By email: info@getmamas.com
- By telephone: 07735 389614
- By post: EUSHOP LTD, Brookfield Court, Selby Road, Garforth, Leeds, England, LS25 1NB
- Company number: 12290096
UK supervisory authority: Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF — ico.org.uk