iCook Ltd Personal Data Processing Policy

iCook Ltd, mobile app for menu planning and grocery shopping

United Kingdom

Effective Date: 08.07.2024

This Personal Data Processing Policy of visitors to the website https://www.icook.health/ (hereinafter referred to as the Policy) determines the procedure for processing and protecting personal information about individuals (hereinafter - Users), which may be obtained by the company iCook Ltd, registered under the laws of England with a registered office at The Old Town Hall, 4 Queens Road, Wimbledon, London, England, SW19 8YB, registered in the Companies House with Company number 12611772, 0AG, when using services provided through the services, programs, and software owned by iCook Ltd and hosted on the website at https://www.icook.health/. (hereinafter - the Site), including subdomains.

Using the Site's services implies the User's unconditional consent to this Policy and the terms of processing their personal information specified herein; if the User disagrees with these conditions, they must refrain from using the services.

This Policy determines the procedure for processing personal data and measures to ensure the security of Users' personal data to protect human and citizen rights and freedoms during the processing of their personal data, including protecting the right to privacy, personal and family secrets.

The Operator does not verify the accuracy of the personal data provided by the Users and does not control their legal capacity, assuming that the User provides accurate and sufficient personal information on the issues proposed in the registration form and keeps this information up-to-date.

The text of the Policy is available to Users on the Internet at: https://www.icook.health/terms-policy

Terms and definitions

Personal Data - Any information relating directly or indirectly to a specific or identifiable individual (User).

‍Site Administrator - iCook Ltd, registered under the laws of England with a registered office at The Old Town Hall, 4 Queens Road, Wimbledon, London, England, SW19 8YB, registered in the Companies House with Company number 12611772, 0AG, processing personal data.

‍User - Any legally capable individual using the Site's services and providing the Site Administrator with their personal data necessary for using such services.

‍Personal Data Processing - Any action or set of actions performed with personal data using automation tools, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (distribution, provision, access), anonymization, blocking, deletion, destruction of personal data.

‍Personal Data Distribution - Actions aimed at disclosing personal data to an indefinite number of persons.

‍Personal Data Provision - Actions aimed at disclosing personal data to a specific person or a specific circle of persons.

‍Personal Data Blocking - Temporary suspension of personal data processing (except in cases where processing is necessary to clarify personal data).

‍Personal Data Use - Actions (operations) with personal data performed by the Site Administrator for decision-making or other actions that produce legal consequences concerning the subject of personal data or other persons or otherwise affect the rights and freedoms of the subject of personal data or other persons.

‍Personal Data Destruction - Actions resulting in the impossibility to restore the content of personal data in the personal data information system and/or actions resulting in the destruction of tangible media of personal data.

‍Personal Data Anonymization - Actions resulting in the impossibility to determine the ownership of personal data to a specific subject of personal data without using additional information.

‍Site - An Internet resource owned by iCook Ltd, intended for providing the User with informational materials to offer informational and consulting services, training services, and other services to the User, located at https://www.icook.health/.

Other terms not defined in the "Terms and Definitions" section may be used in this document, in which case one should be guided by the interpretation of terms established on the Internet.

1. General provisions

1.1. Under this Policy, the User's personal information includes: 1.1.1. Personal information that the User provides about themselves independently during registration on the Site (creating an account) or while using iCook Ltd's services, including the User's personal data. Information required for the provision of services is specially marked. Other information is provided by the User at their discretion. 1.1.2. Data automatically transmitted to the Site's services during their use through software installed on the User's device, including IP address, cookie data, information about the User's browser (or other program used to access the services), technical characteristics of the equipment and software used by the User, date and time of access to the services, addresses of requested pages, and other similar information. 1.1.3. Other information about the User, the processing of which is provided for by this Policy. 1.1.4. This Policy applies only to the Site. The Site Administrator does not control and is not responsible for third-party websites to which the User can follow links available on the Site. 1.1.5. All Users can visit the Site without disclosing any personal data. However, not providing the necessary information requested in the relevant input sections and other parts of the site may result in the Operator's inability to provide certain services to the User.

1.2. The User agrees to the terms of the Policy and gives the Site Administrator specific and informed consent to process their personal data under the conditions provided by the Policy and the Federal Law of 27.07.2006 N 152-FZ (as amended on 29.07.2017) "On Personal Data":

When filling out the feedback form - for personal data that the User provides to the Site Administrator when filling out the feedback form located on the Internet at https://www.icook.health/. The User is considered to have consented to the processing of their personal data entered into the fields of the feedback form at the moment of ticking the box "I agree to the processing of my personal data under the Privacy Policy and accept the terms."

‍

2. Subject of the privacy policy

2.1. This Policy establishes the Site Administrator's obligations for non-disclosure and ensuring the confidentiality of personal data that the User provides upon the Site Administrator's request during registration on the Site or when submitting a service request.

2.2. Personal data allowed for processing under this Policy is provided by the User by filling out the registration form on the Site and includes (may include in whole or in part) the following information: • User's last name, first name, and patronymic; • Contact information (phone, e-mail, Skype); • Links to social media accounts; • Bank details provided when paying for services; • User's image; • Date of birth; • User's place of residence.

2.3. The Site Administrator protects data automatically transmitted during viewing advertising blocks and visiting pages where a statistical script system ("pixel") is installed: • IP address; • Information from cookies; • Information about the browser (or another program that provides access to ad display); • Access time; • The address of the page where the ad block is located; • Referrer (address of the previous page).

2.3.1. Disabling cookies may result in the inability to access parts of the site requiring authorization.

2.3.2. The Site Administrator collects statistics about the IP addresses of its visitors. This information is used to identify and resolve technical issues.

2.4. Any other personal information not specified above (browsers and operating systems used, etc.) is subject to secure storage and non-disclosure, except as provided in section 4 of this Policy.

‍

3. Purposes of processing user personal information

3.1. The Site Administrator collects and stores only the personal information necessary for providing the Site's services or fulfilling agreements and contracts with the User, except when the law requires mandatory storage of personal information for a legally specified period.

3.2. The Site Administrator processes the User's personal information for the following purposes:

3.2.1. Identifying the User registered on the Site for providing services under an agreement concluded with the User.

3.2.2. Providing the User with access to personalized resources of the Site.

3.2.3. Establishing feedback with the User, including sending notifications, requests concerning the use of the Site, service provision, processing requests, and applications from the User.

3.2.4. Determining the User's location to ensure security, prevent fraud.

3.2.5. Confirming the accuracy and completeness of personal data provided by the User.

3.2.6. Creating an account for personalizing the User when they intend to conclude an agreement, use other Site services, if the User has consented to creating an account.

3.2.7. Notifying the User about changes and additions to services provided under an agreement with the User, including promotions, events, and special offers.

3.2.8. Providing effective customer and technical support to the User in case of problems related to the use of the Site.

3.2.9. Conducting advertising activities with the User's consent.

3.2.10. Posting User's comments in official groups on social networks and other communities of the Site Administrator on the Internet.

‍

4. Conditions for processing user personal information and its transfer to third parties

4.1. The User's personal data is processed by the Site Administrator using databases located in the United Kingdom.

4.2. The confidentiality of the User's personal information is preserved, except when the User voluntarily provides information about themselves for general access to an unlimited number of persons. When using certain Site services, the User agrees that a certain part of their personal information becomes publicly available.

4.3. The Site has the right to transfer the User's personal information to third parties in the following cases:

4.3.1. The User has expressed consent to such actions.

4.3.2. The transfer is necessary for the User to use a specific service or to fulfill a specific agreement or contract with the User.

4.3.3. The transfer is provided for by UK or other applicable legislation under the established procedure.

4.3.4. In case of sale or other transfer of the business (in whole or in part), the acquirer assumes all obligations to comply with the terms of this Policy regarding personal data received by the Site Administrator.

4.3.5. To protect the rights and legitimate interests of the Site Administrator or third parties in cases where the User violates the Site's Terms of Use or this Policy.

4.4. The User's personal data is processed for no longer than is necessary for the purposes of processing, except as provided by applicable legislation.

4.5. The processing of the User's personal data is carried out using automation tools and without using such tools. In the latter case, the procedure for processing personal data complies with the established requirements for ensuring the security of personal data and exclusion of unauthorized access to them.

4.6. The Site Administrator takes necessary and sufficient organizational and technical measures to protect the User's personal data from unauthorized or accidental access, destruction, modification, blocking, copying, distribution, and other unlawful actions of third parties.

4.7. The Site Administrator guarantees the confidentiality of the User's personal data, does not disclose personal data to third parties without the User's consent, except as provided by this Policy, and takes necessary measures to protect personal data from unauthorized access.

‍

5. Obligations of the parties

5.1. The User is obliged to: 5.1.1. Provide accurate and truthful information about themselves as required for using the Site's services.

5.1.2. Inform the Site Administrator about changes to their personal data.

5.2. The Site Administrator is obliged to: 5.2.1. Use the obtained information solely for the purposes specified in this Policy.

5.2.2. Ensure the confidentiality of personal data, not to disclose without the User's prior written consent, and not to sell, exchange, publish, or disclose the User's transferred personal data, except as provided in this Policy.

5.2.3. Take precautions to protect the confidentiality of the User's personal data under the procedure usually used to protect this kind of information.

5.2.4. Block personal data relating to the relevant User from the moment of application or request from the User, or their legal representative, or authorized body for the protection of personal data subjects for the period of verification, in case of revealing inaccurate personal data or unlawful actions.

‍

6. Responsibilities of the parties

6.1. The Site Administrator, who has not fulfilled its obligations, is liable for damages incurred by the User due to the unauthorized use of personal data under UK law, except as provided in section 4 of this Policy.

6.2. In case of loss or disclosure of Confidential Information, the Site Administrator is not responsible if this confidential information:

6.2.1. Became public before its loss or disclosure.

6.2.2. Was received from a third party before it was received by the Site Administrator.

6.2.3. Was disclosed with the User's consent.

‍

7. Dispute resolution

7.1. Before filing a lawsuit for disputes arising from the relationship between the Site User and the Site Administrator, it is mandatory to file a claim (a written proposal for voluntary dispute resolution).

7.2. The claim recipient shall notify the claimant in writing of the results of the claim consideration within 30 calendar days from the date of the claim receipt.

7.3. If the parties do not reach an agreement, the dispute will be referred to a judicial body under UK legislation.

7.4. This Policy and the relationship between the User and the Site Administrator are governed by the current legislation of the United Kingdom.

‍

8. Additional conditions

8.1. The Site Administrator has the right to make changes to this Policy without the User's consent.

8.2. The new Policy takes effect from the moment it is posted on the Site unless otherwise provided by the new Policy version.

8.3. All suggestions or questions regarding this Policy should be reported via e-mail to pr@icook.health.

8.4. The current Privacy Policy is available on the Internet at https://www.icook.health/terms-policy.

‍This Policy is an integral part of the Terms of Use of the Site and other agreements concluded with the User when providing services.

iCook Ltd is committed to ensuring the privacy and protection of our Users' personal data. We aim to provide a secure and trustworthy experience while using our services. Our Personal Data Processing Policy is designed to uphold the highest standards of confidentiality and transparency, ensuring that your data is processed in compliance with applicable laws and regulations.

If you have any questions or concerns about our Personal Data Processing Policy or any aspect of our data processing practices, please do not hesitate to contact us.

‍