Effective 17 April 2026
Privacy Policy
This Privacy Policy explains how we collect, use, and protect your personal data when you use this application.
Who we are
This application is operated by Red Oryx Ltd (the “Company”, “we”, “us”, or “our”), registered in the United Kingdom. If you have any questions about this policy, you can contact us at [email protected].
Information we collect
We may collect and process the following categories of data:
- Account information such as name, email address, login credentials, profile image, account preferences, address details, and business settings
- Business data entered into the platform, including recipes, recipe variants, ingredients, stock movement records, orders, customer details, and related operational notes
- Technical and security data such as IP address, browser information, device information, and session details used to help keep accounts secure
- Support or contact information if you email us directly
How we use your information
We use your data to:
- Provide and operate the application
- Manage user accounts and authentication
- Send password reset emails and other essential account communications
- Provide customer support
- Improve and maintain the performance and security of the service
- Communicate important service updates
Operational access
Access to personal data is limited to people who need it to operate, support, secure, or maintain the service. This may include authorised internal administrators where such access is necessary for those purposes.
Legal basis for processing
Under UK GDPR, we rely on the following legal bases:
- Contract: to provide the service you have signed up for
- Legitimate interests: to improve and secure the application
- Legal obligations: where we are required to comply with law
- Consent: where consent is required for a specific activity
Data sharing
We do not sell your personal data. We may share data with trusted third-party providers where necessary to operate the service, such as hosting providers, infrastructure providers, file storage providers, and email delivery services. Where we use third-party processors, they process data on our instructions and under appropriate contractual safeguards.
Data retention
We retain personal data only for as long as necessary to provide the service, comply with legal obligations, resolve disputes, and enforce our agreements.
In practice, this means account and bakery workspace data may be retained for the duration of an active account and for a reasonable period afterwards where needed for security, support, record-keeping, or legal compliance.
Data security
We implement reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. However, no system can be guaranteed to be completely secure.
International transfers
Some of our service providers may process data outside the United Kingdom. Where that happens, we take steps to ensure appropriate safeguards are in place, such as contractual protections or other lawful transfer mechanisms.
Your rights
Under UK GDPR, you have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion of your data
- Restrict or object to processing
- Request data portability
To exercise these rights, contact us at [email protected].
Customer data entered by users
If you use the platform to store information about your own customers, you are responsible for ensuring you have a lawful basis to collect and process that data, and for providing any required privacy notices to your customers.
Cookies
We use cookies and similar technologies where needed to operate the service, including signed authentication cookies that keep users signed in securely. We may also use browser storage to preserve in-progress form data during certain workflows, for example when you leave a form temporarily to add supporting data and then return.
Please see our Cookie Policy for more detail.
If additional non-essential cookies or analytics tools are introduced later, this policy and the Cookie Policy will be updated accordingly.
Complaints
If you have concerns about how we handle personal data, please contact us first and we will try to resolve the issue. You also have the right to complain to the UK Information Commissioner’s Office (ICO).
Changes to this policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date.