Privacy Policy

Ferb Meal Plans is the trading name of the store at ferbmealplans.com, which sells digital PDF meal plans and recipe guides in the United Kingdom.

The owner and operator of the store is Lumevera Ltd, a private limited company registered in England and Wales.

The data controller is Lumevera Ltd.

For any privacy request, email info@ferbmealplans.com.

We process personal data in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).

• Account data: name, email address, password (stored in hashed form).
• Billing data: billing name, billing address and postcode, order history.
• Payment data: handled by our payment provider. We receive a payment reference and the last four digits of the card. We do not store full card numbers.
• Usage data: pages viewed, products viewed, downloads issued, referring pages.
• Technical data: IP address, browser type and version, device type, time zone, and cookie identifiers.
• Dietary preferences: only the answers you choose to give in the plan finder quiz, for example diet type, goal, cooking time and household size.
• Correspondence: messages you send us by the contact form or by email.

We do not ask for health data. If you volunteer health information in a message, we use it only to answer you and delete it once the query is closed.

• Supplying your PDFs, issuing download links and providing customer support. Lawful basis: performance of a contract.
• Taking payment and preventing fraud. Lawful basis: performance of a contract and our legitimate interests in secure trading.
• Keeping accounting and tax records. Lawful basis: compliance with a legal obligation.
• Improving the shop, our products and our page layouts. Lawful basis: legitimate interests in running and improving our business.
• Marketing emails, analytics cookies and marketing cookies. Lawful basis: your consent, which you can withdraw at any time.
• Plan finder quiz answers used to suggest products during your visit. Lawful basis: consent. These answers stay in your browser unless you choose to send them to us.
• Defending legal claims. Lawful basis: legitimate interests in protecting our rights.

• Order and transaction records: 6 years after the end of the tax year, as required by UK tax law.
• Account data: while your account is open, then 12 months after closure.
• Support correspondence: 24 months from the last message.
• Marketing consent records: 24 months from the last interaction, or until you withdraw consent.
• Analytics data: 14 months in an aggregated or pseudonymised form.
• Server logs: 90 days.

We share personal data only with processors acting on our instructions under a written contract. These are:

• Our payment provider, to take payment and handle refunds.
• Our hosting and content delivery provider, to serve the site and the PDF files.
• Our analytics provider, where you have consented to analytics cookies.
• Our email provider, to send order confirmations and, with consent, marketing emails.
• Our accountants and professional advisers, where required.

We may also disclose data where the law requires it, or to establish, exercise or defend legal claims. We never sell personal data.

Some providers process data outside the UK. Where that happens, we rely on UK adequacy regulations, or on the International Data Transfer Agreement, or the EU Standard Contractual Clauses with the UK Addendum, together with a transfer risk assessment and appropriate technical safeguards such as encryption in transit and at rest.

Non-essential cookies do not run before you consent. Our cookie banner lets you accept all, reject all, or manage preferences, and rejecting is exactly as easy as accepting. You can change your choice at any time by clearing site data in your browser and reloading the page.

• Strictly necessary: basket contents, security and load balancing. These are needed for the site to work and do not require consent.
• Analytics: anonymous or pseudonymised measurement of page use. Consent based, off by default.
• Marketing: measuring adverts and email campaigns. Consent based, off by default.

Under the UK GDPR you have the right to:

• Access a copy of your personal data.
• Have inaccurate data corrected.
• Have data erased, where the law allows.
• Restrict how we process your data.
• Receive your data in a portable, machine readable format.
• Object to processing based on our legitimate interests, and to direct marketing at any time.
• Withdraw consent at any time, without affecting processing done before withdrawal.

To exercise any right, email info@ferbmealplans.com. We reply within one month and may ask you to confirm your identity.

If you are unhappy with how we handle your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority, at ico.org.uk or on 0303 123 1113.

We use encryption in transit, access controls, hashed passwords and regular reviews of our providers. No system is perfectly secure, so please use a strong and unique password.

Our shop is intended for adults. We do not knowingly collect data from children under 16.

We may update this policy. The date at the top always shows the current version, and material changes will be highlighted on this page.