What Can I Cook policies
Privacy Notice
Effective and last updated: 22 July 2026
What Can I Cook is the data controller for this service. Contact us through the contact page for privacy questions or rights requests. Health-profile fields are optional and are not used to make automated medical or safety decisions.
Data we collect
- Account details, sign-in records and preferences.
- Pantry items, shopping lists, meal plans, cooking sessions and feedback.
- Optional dietary preferences, allergen notes and nutrition targets.
- Recipes, comments, profile details and reports you choose to submit.
- Security, error and performance records. Request bodies, passwords and tokens are not intentionally logged.
- Optional product-analytics events only after consent; ingredients, allergies and health-profile values are excluded.
Why we use it
We process account and cooking data to provide the service and fulfil our contract with you. We use limited security and reliability records for our legitimate interests in protecting the service. Optional analytics and any optional processing of health-related fields rely on consent, which you can withdraw.
Sharing and international transfers
We share data only with service providers needed for hosting, storage, email, monitoring and consented analytics, under contractual safeguards. We do not sell personal data. Where a provider handles data outside the UK, we use an approved UK transfer mechanism and assess the destination safeguards.
Retention and security
Account content is kept while your account is active. Deleted-account data is removed or irreversibly anonymised after operational and backup retention periods, unless law requires longer retention. Security records are kept only as long as needed to detect abuse and investigate incidents. We use access controls, encryption in transit, secret management and tested backups, but no online service can promise absolute security.
Your UK data-protection rights
Depending on the circumstances, you can ask for access, correction, deletion, restriction, portability or an objection, and can withdraw consent at any time. We may need to verify your identity. You may also complain to the UK Information Commissioner's Office at ico.org.uk.
Children and changes
The service is not directed to children under 13. We will post material changes here and seek fresh consent where required. For cookie choices, see the Cookie Policy.