Legal

Privacy Policy

Last updated: 29 September 2026

This policy explains how Macevery Limited, trading as The Little London Vegan (“TLLV”, “we”, “us” or “our”), collects and uses personal information when you use our website, installable web app, membership services, newsletters or Step-member migration form. For UK data-protection purposes, Macevery Limited is the controller of that information.

1. Information we collect

• Account and profile information: identifiers supplied by the sign-in service, your email address and any preferences you add to your profile.
• Membership and payment information: your Stripe customer and subscription identifiers, plan, subscription status, trial and renewal dates, and limited billing information returned by Stripe. We do not receive or store your full card number.
• Your app activity: favourites, custom lists, saved plans, viewed or tried places and other history that you choose to save.
• Member Perks activity: the offer, venue or brand, date and time, unique reference, redemption status and your account identifier when you redeem an in-person perk. For online offers, we record that you selected the offer, the destination used and whether it was an affiliate link.
• Location: if you choose “Near Me” or a similar feature, your device may share its approximate or precise location for that request. We do not use location permission for advertising.
• Communications: messages, support requests and information supplied on the Step-member migration form, including the screenshot used to verify an existing membership.
• Technical and analytics information: IP address, device and browser type, pages or features used, approximate region, referring page, error and security logs, and cookie or similar-technology identifiers where applicable.

2. How and why we use information

We use personal information to provide accounts and Premium features, process and administer subscriptions, preserve favourites and plans, provide nearby-place features you request, administer Member Perks, enforce offer limits, measure redemptions and tracked offer clicks, answer support queries, prevent fraud, keep the service secure, diagnose faults and understand how the service is used.

Our main UK GDPR lawful bases are performance of our contract with you, compliance with legal obligations, and our legitimate interests in operating, protecting and improving TLLV. Where consent is required—particularly for optional email marketing or non-essential cookies—we rely on consent and you may withdraw it at any time.

3. Payments and service providers

Stripe processes payments, billing addresses and subscription management as our payment processor. Stripe handles card details under its own privacy information. We also use providers for hosting, authentication, maps and venue search, email delivery, file storage, security and analytics. They may process information only as needed to provide those services, subject to their contracts and applicable law.

Some providers may process information outside the UK. Where required, we use recognised safeguards such as UK adequacy regulations or approved contractual protections.

4. Member Perks and partner reporting

For an in-person perk, venue staff can visually inspect the redeemed screen on your device without having their own TLLV login. We do not give the venue your account profile through that screen. We may give a participating partner aggregated redemption or click totals. If a future commercial arrangement requires member-level reporting, we will update this policy and provide any notice or choice required by law before doing so.

When you open an online offer, the destination website receives the information normally sent by your browser and may recognise an affiliate or campaign reference in the link. That partner’s own privacy policy applies once you leave TLLV.

5. Location permission

Your browser or phone will ask before sharing location. If you agree, it is used to show nearby restaurants or calculate distance. You can refuse or withdraw permission in your browser or device settings. The rest of the guide remains available, although nearby features will not work.

6. Newsletter and marketing

Creating an account or buying Premium does not automatically subscribe you to marketing. We send newsletter or promotional emails only where you separately opt in or where another lawful permission applies. You can unsubscribe using the link in an email or by contacting us. Service messages about your account, security or subscription are not marketing.

7. Cookies, local storage and analytics

We use strictly necessary cookies and similar storage for sign-in, security, saved session settings and the installable app. These are needed for the service to work. If we use non-essential analytics cookies, we will ask for consent where UK law requires it. You can control cookies in your browser, but blocking necessary storage may stop sign-in or saved features working.

8. How long we keep information

We keep account and saved-app information while your account is active and for a limited period afterwards to handle restoration, disputes and security. Subscription, perk-redemption and relevant commercial reporting records may be kept for up to seven years where needed for tax, accounting, dispute or legal obligations. Offer-click data is kept only as long as reasonably needed for reporting, fraud prevention and partner reconciliation. Support and security logs are kept only as long as reasonably necessary. Step screenshots are normally deleted within 60 days after verification; migration details are normally deleted within 12 months after the move is completed unless needed for an active account, financial record or legal claim.

9. Your rights

Depending on the circumstances, UK data-protection law may give you rights to access, correct or erase your information; restrict or object to its use; receive certain information in a portable form; and withdraw consent. These rights are not absolute. You may also complain to the Information Commissioner’s Office at ico.org.uk.

10. Security and children

We use reasonable technical and organisational measures to protect information, but no internet service is completely secure. TLLV is intended for people aged 18 and over and is not directed at children.

11. Changes and contact

We may update this policy when the service or law changes. Material changes will be communicated appropriately. To ask a privacy question or exercise a right, email thelittlelondonvegan@outlook.com.