Privacy Policy

1. Contact details

Data controller / developer: HK3D
Contact email: admin@hk3d.co.uk
Website: https://hk3d.co.uk/work/kitchen/policy

If you have questions about privacy, data access, correction, or deletion, contact us using the email above.

2. What Carvery Efficiency does

Carvery Efficiency is a business operations app for carvery and kitchen teams. It helps authorised users manage site setup, forecasts, daily meat loading, carry-over, waste, yields, team access, and reporting.

3. Information we collect

Depending on how the app is used, we may collect and process the following categories of information:

• Account and identity data, such as email address, display name, user ID, and login/session information.
• Site and kitchen setup data, such as kitchen name, site number, site name, and kitchen membership/role data.
• Operational business data, such as forecasts, expected covers, loads, carry-over meat, yields, cooked weights, waste, joint checks, settings, and efficiency metrics.
• Technical and usage data, such as device/app logs, crash information, timestamps, and security/authentication events needed to operate and secure the service.
• Support communications if you contact us directly.

We do not intentionally collect special category personal data through the normal use of the app.

4. How we collect information

• Directly from users when they create an account, sign in, join a site, edit their profile, or enter operational data.
• Automatically through the app and backend services when users authenticate, save records, export data, or use app features.
• From authorised administrators or site operators who manage site access, site numbers, and team permissions.

5. Why we use information

We use the information described above to:

• provide, maintain, and improve Carvery Efficiency;
• authenticate users and manage account access;
• link users to the correct kitchen or site;
• store and display forecasts, loads, yields, carry-over, waste, and other operational records;
• generate reports, exports, and internal analytics;
• support future product development and operational analysis;
• protect the security and integrity of the service;
• respond to support requests and legal obligations.

6. Legal basis for processing

Where applicable under data protection law, we rely on one or more of the following legal bases:

• performance of a contract or taking steps requested before entering into a contract;
• our legitimate interests in operating, securing, supporting, and improving the service;
• compliance with legal obligations;
• consent, where consent is specifically requested.

7. Who we share information with

We may share information with the following categories of recipients:

• Service providers and infrastructure providers that help us host, authenticate, store, secure, and support the app.
• Supabase, which is used for app backend services such as database, authentication, and storage.
• Google Play / Android platform services, where necessary for app distribution, updates, and platform security.
• Authorised administrators or site managers, but only within the access rights and roles configured for the service.
• Legal or regulatory authorities, where required by law or to protect rights, safety, and security.

We do not sell personal information. We do not share personal information with third parties for their own independent marketing purposes.

8. Data security

We use reasonable technical and organisational measures to protect information, including:

• authenticated access controls and role-based permissions;
• encryption in transit using HTTPS/TLS;
• backend security controls provided by our hosting and database providers;
• restricted administrative access where appropriate;
• logging and monitoring for security and operational support.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Data retention

We retain data only for as long as reasonably necessary for the purposes described in this policy, including to provide the service, maintain business records, support legitimate development and analytics work, comply with legal obligations, resolve disputes, and enforce agreements.

In practice, retention periods may vary by data type:

• Account data is retained while the account remains active and for a reasonable period afterwards for security, recovery, or compliance.
• Operational site data may be retained longer because it forms part of business records, reporting history, and future product development.
• Technical logs are typically retained for shorter periods unless needed for security or troubleshooting.

10. Data deletion and account requests

Users or customers may request access, correction, or deletion of personal information by contacting admin@hk3d.co.uk.

We may delete or anonymise personal data where appropriate, but some information may be retained where necessary for legal, security, contractual, audit, or legitimate business record purposes.

If operational data is associated with a site or business account, deletion may need to be handled at the organisation or site administrator level rather than by an individual end user.

11. International data transfers

Depending on the location of our service providers and infrastructure, information may be processed in countries other than the country where a user is located. Where required, we take reasonable steps intended to ensure an appropriate level of protection for such transfers.

12. Children

Carvery Efficiency is intended for business and workplace use and is not directed to children. We do not knowingly collect personal information from children.

13. Third-party services

The app may rely on third-party services or platform features for hosting, authentication, analytics, storage, file sharing, or app distribution. Those third parties may process information in accordance with their own privacy notices and contractual terms.

14. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the "Last updated" date above. Material changes may also be communicated within the app or through other appropriate channels where required.

15. Contact us

For privacy questions, data requests, or complaints, contact:
HK3D
admin@hk3d.co.uk