Privacy Notice

This Privacy Notice explains how John Roper, trading as "MakrPrep" ("MakrPrep", "we", "us"), collects and uses personal data when you use the MakrPrep application and website at makrprep.com. John Roper is the data controller for the personal data described here.

1. Personal data we collect

• Account data: your email address, name (if provided), business name (if provided), hashed password, and marketing consent status.
• Application data: the recipes, ingredients, customers, orders and other business records you enter into MakrPrep.
• Support data: messages, feedback and screenshots you send us.
• Technical data: IP address, device and browser information, and basic usage/telemetry needed to operate and secure the service.

Payment details (card numbers, billing address, tax IDs) are collected and stored by Paddle when you subscribe. We never receive or store your full card details.

2. Why we use it and legal bases

• Providing the service: creating your account, storing your data, running the application. Legal basis: performance of the contract.
• Billing and tax: sharing the minimum data needed with Paddle so they can take payment, issue invoices and remit sales taxes. Legal basis: performance of the contract and legal obligation.
• Security and fraud prevention: detecting misuse, protecting accounts, keeping logs. Legal basis: legitimate interests.
• Customer support: responding to your questions. Legal basis: performance of the contract / legitimate interests.
• Product improvement: understanding how MakrPrep is used in aggregate. Legal basis: legitimate interests.
• Marketing emails: only if you opt in. Legal basis: consent, which you can withdraw at any time in Settings.

3. Who we share it with

• Paddle.com Market Limited: our Merchant of Record. Paddle handles all payments, subscription management, tax compliance, invoicing, refunds and buyer support for MakrPrep. See Paddle's Privacy Notice.
• Supabase: our database, authentication and hosting provider.
• Cloudflare: infrastructure, edge delivery and email routing.
• Termly: our consent management provider for the cookie banner.
• Professional advisers: legal and accounting advisers where necessary.
• Authorities: where required by law or to protect our rights.

We do not sell personal data.

4. International transfers

Some of our providers process data outside the UK/EEA. Where they do, we rely on adequacy decisions or Standard Contractual Clauses to protect the transfer.

5. Retention

We keep account and application data for as long as your account is active. When you delete your account we delete or anonymise your data within 30 days, except where we are required to keep records for legal or tax reasons. To prevent trial abuse we keep a one-way salted hash of the email address of accounts that have used a free trial; the original email cannot be recovered from this hash.

6. Your rights

Under UK/EU data protection law you have the right to access, rectify, erase, restrict or port your personal data, to object to certain processing, and to withdraw consent at any time. You can exercise most of these rights from Settings or by emailing hello@makrprep.com. We will respond within one month. You also have the right to complain to a supervisory authority. In the UK, the Information Commissioner's Office (ico.org.uk).

7. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, encrypted storage, access controls, row-level database security and audit logging.

8. Cookies

MakrPrep uses strictly-necessary cookies for authentication and session management, and, subject to your consent, analytics cookies to help us improve the service. You can manage your preferences at any time via the "Consent Preferences" link in the footer. See our Cookie Policy for details.

9. Contact

Data controller: John Roper, trading as MakrPrep, United Kingdom. Email: hello@makrprep.com.