Privacy Policy

1. Who We Are

Birthday Steak ("we", "us") operates the website birthdaysteak.co.uk. This Privacy Policy explains how we collect and use personal data in connection with our services. For any privacy queries, please contact hello@birthdaysteak.co.uk.

2. Data We Collect

When you purchase a voucher, we collect:

• Your name and email address (via Stripe checkout)
• Recipient name and email address
• Personal message content
• Payment information (processed and stored securely by Stripe — we do not store card details)
• Voucher usage data (redemption status, date)

3. How We Use Your Data

We use your personal data to:

• Process and deliver vouchers
• Send purchase confirmations
• Provide customer support
• Prevent fraud and verify redemptions
• Improve our services

We do not sell or share your personal data with third parties for marketing purposes.

4. Third-Party Processors

We use the following third-party services to operate our business:

• Stripe — payment processing (stripe.com/privacy)
• Supabase — database and authentication (supabase.com/privacy)
• Resend — email delivery (resend.com/privacy)
• Cloudflare — hosting and performance (cloudflare.com/privacypolicy)

5. Data Retention

We retain voucher data for up to 3 years to comply with financial record-keeping obligations. You may request deletion of your personal data by contacting us at hello@birthdaysteak.co.uk.

6. Your Rights

Under UK GDPR, you have the right to access, correct, or delete your personal data. To exercise these rights, please contact us at the address above.

7. Cookies

Our website uses essential cookies only. Please see our Cookie Policy for details.

8. Changes to This Policy

We may update this Privacy Policy from time to time. The most current version will always be available on this page.