Privacy Notice

What we collect and why

• Your contact details: name, email address and phone number, so we can arrange your cooking visits and you can sign in.
• Food allergies, dietary needs and dislikes: so meals are safe and suit you. Allergy information is health information, so we only collect it with your consent and check any changes with you before cooking.
• Your meals and visits: menus, the dishes cooked for you (your Meal History), favourites, feedback and upcoming visits.
• Messages and photos you send to Chef through the portal.

We use this information only to provide your in-home cooking service. We ask for your separate consent before keeping allergy and health-related dietary information. You can withdraw that consent at any time by messaging Chef, but without it we may not be able to prepare some meals safely.

Who can see it

• In the portal, only you and Chef. Other clients can never see your information.
• The companies that run the portal’s systems (Google Firebase and Netlify) may have limited technical access where needed to keep those systems working and secure.
• Chef may keep short private working notes about your meals (for example, preferred containers).
• Your password is yours alone. You choose it, Chef never sees it, and it is stored only in a scrambled, unreadable form.

Where it is stored and how it is protected

• Your meals, allergies, messages, photos and visits are stored on Google Cloud (Firebase) servers in Sydney, Australia.
• Sign-in details (your email address and the scrambled form of your password) are handled by Google's Firebase sign-in service, which may store them outside Australia.
• Information is encrypted while it travels over the internet and while it is stored.
• Security rules on the server stop anyone other than you and Chef from reading your records.
• The website itself is hosted by Netlify. Your profile, allergies and messages are not stored there, but like most websites Netlify keeps visitor logs with technical details such as your IP address and browser type, to deliver and protect the site.
• When Chef sends you a message, you may get a short email alert. It is sent through EmailJS (based overseas) and contains only your first name, your email address and a link to the portal, never the message itself.
• If you use the Speak (voice typing) button, your browser's own speech service (Google or Apple) turns your voice into text. Recordings are not saved by Nourishing Kitchen; only the text you choose to send is kept.

We never sell or share it

Your information is never sold, rented or shared for marketing or advertising. We only share it if the law requires us to.

How long we keep it

• We keep your information while you are a client, so your meals stay safe and suited to you.
• When you stop using the service, or ask us to, we delete your portal account and records, including your sign-in. Any backup copy Chef has downloaded is deleted too.
• Google may take up to about six months to clear deleted information from its own internal backups. It cannot be viewed or used during that time.
• Records we must keep by law, such as invoices, are kept separately for as long as the law requires.

Seeing, correcting or deleting your information

• You can view and update your profile, allergies and preferences at any time in My Profile.
• To get a copy of your information, correct something, or have your account and all your details deleted, just ask Chef through Messages, reply to any Nourishing Kitchen email, or use the contact details at nourishingkitchen.com.au.

Questions or complaints

For any question or complaint about your privacy, email davidrgoddardgc@gmail.com or message Chef in the portal. Tell us what happened and what you would like us to do. We will reply within 30 days.

If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

We may update this notice from time to time. If the changes are significant, we will let you know in the portal.