Privacy Policy

Last updated: August 2026

What we collect

When you create an account, we collect your name and email address. You may optionally add a location and health and dietary information — including allergens, dietary preferences, and medical conditions — to your profile. If you submit a review, we collect your name, email, review content, photos, and proof of visit (kept private and used only for moderation). If you join our waitlist, we collect your email address. If you claim a listing, we collect your role, contact email, and the proof of ownership you provide.

How health data is handled

Health and dietary data — and any medical conditions you add — is stored securely and used solely to improve your experience on the platform. This is special category data under UK GDPR. We process it on the basis of your explicit consent, which you give by ticking the consent box within the health profile form. You can update or delete this data at any time from your profile, and withdrawing consent is as simple as clearing those fields.

How we use your data

We use your data to: provide and improve the platform; moderate reviews; communicate with you about your account; develop future personalisation features. We do not sell your data to third parties.

Third-party processors

The Allergy Club is built on the Base44 platform, our hosting and application provider. We use Google services for authentication and email, and we store waitlist sign-up emails in a Google Sheet: email addresses you submit to the waitlist are transferred to and stored in that Sheet, accessible only to authorised administrators. If you sign in with a Google account, we receive your name and email from that provider. Each processor is bound by its own privacy policy.

Your rights under UK GDPR

You have the right to: access your personal data; correct inaccurate data; delete your data; restrict processing; data portability; withdraw consent at any time. To exercise any of these rights, contact us via our contact form.

Data retention

We retain your data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where we are required by law to retain it.

Contact

For any privacy-related queries, please use our contact form or email us directly.