01Who is responsible
AISHWAA CONSULTING LTD, at 8 Clements Drive, Woburn Downs, Milton Keynes, United Kingdom, MK17 9GR, is the data controller for Plateplan. Questions and rights requests can be sent to support@aishwaaconsultt.shop or made by calling +44 7975106734.
02What we collect and collection sources
User input includes information you enter directly: account and contact details, household size, meal preferences, avoidances, ingredients to use, time and budget targets, saved lists, support messages and consent choices. We also process the plans, visual briefs and prep-film prompts produced from those inputs.
Our collection sources are you and your browser, our hosting and security services, payment providers, and other processors acting for us. Payment and subscription records can include the plan selected, amount, currency, checkout status, customer reference, invoices, refunds and disputes. Payment providers process full payment-card details; Plateplan does not receive or store full card numbers or card security codes.
Technical information can include IP address, browser and device type, request time, security logs, cookie choices and pages used. We receive it from your browser, our hosting and security services, and service providers acting for us.
The planner does not require a file upload. If you attach a file to a support request, we process the attachment only to answer that request. Preset prompt buttons use generic built-in text and do not contain another person's private data.
- Account, order and subscription data
- Household planning inputs and avoidances
- Generated plans, shopping lists, visual and video prompts
- Support communications and attachments
- Device, cookie, security and usage data
03Why we use it and legal bases
We process account, plan, generation and subscription data to perform our contract: create the requested week, deliver digital exports, manage access and provide billing support. We use consent where the user asks us to save a household brief or receive optional communications.
Our legitimate interests support fraud prevention, service security, troubleshooting, aggregated service measurement and the defence of legal claims. We process records when necessary to meet tax, accounting, consumer-protection and other legal obligations.
Where an avoidance or preference reveals health-related information, we rely on explicit user action and consent to process it for the requested planning function. It is not used to diagnose, profile a medical condition or make a solely automated decision with legal or similarly significant effect.
04User input, AI provider processing and generated results
User input and generated results are sent to a contracted AI provider only to complete the user's request, enforce safety and prevent abuse. We do not use household inputs, generated plans, support attachments or avoidances to train our own models, and we do not authorise an AI provider to train a general model on that content.
Plan data remains in the browser during the active session unless the user deliberately saves a brief, creates an account, exports it, or sends it to support. Generated media is retained only as needed to return and download the result, then removed under the applicable AI provider retention schedule.
Users can delete browser-held results by closing or refreshing the session. Saved briefs, account data and support attachments can be deleted by contacting us, subject to billing, fraud and legal retention duties.
05Who we share it with
We use processors for cloud hosting, database and storage, payment processing, email and customer support, digital content delivery, security monitoring, analytics where enabled, and AI text, image and video generation. They may access only the information needed for their function and must protect it under contract.
Stripe or PayPal may independently control information collected within their checkout, wallet or dispute services. Their privacy terms govern that information. Plateplan does not sell food, arrange grocery checkout, or share a shopping list with a supermarket.
We can disclose limited information to professional advisers, regulators, courts, law enforcement, or a successor business where lawfully required and appropriately protected.
06International transfers
Some processors may handle information outside the United Kingdom or European Economic Area. Where required, we use an adequacy regulation, the UK International Data Transfer Agreement or addendum, EU Standard Contractual Clauses, and supplementary security measures. Transfer information can be requested from our privacy contact.
07How long we keep it
Unsaved planner inputs are processed for the active request and are not intentionally retained by Plateplan as an account record. Saved household briefs and account-generated content are kept while the account is active and normally deleted within 30 days after a verified deletion request, unless a narrower or longer lawful period applies.
Support records are normally kept for 24 months after the case closes. Payment, invoice, refund and tax records are normally kept for 6 years. Security logs are normally kept for up to 12 months. Support attachments are removed when the case no longer needs them, normally within 90 days. Backups expire on their normal rotation.
08Security
We use access controls, encryption in transit, server-side secrets, signed payment webhooks, restricted administrator sessions, monitoring and processor review. No internet service is completely risk-free; users should keep account credentials private and avoid placing unnecessary sensitive information in a prompt.
09UK, EU and California rights
Depending on location, users may ask to access, correct, delete, restrict or port information; object to legitimate-interest processing; withdraw consent; or complain about automated processing. UK users may complain to the Information Commissioner's Office, and EEA users may contact their local supervisory authority.
California residents may request to know, correct or delete covered personal information and may exercise rights without discrimination. Plateplan does not sell personal information and does not share it for cross-context behavioural advertising. Therefore there is no sale or sharing to opt out of. An authorised agent may submit a verifiable request.
10Cookies and analytics
Strictly necessary cookies support administrator or account sessions, security and cookie choices. Optional analytics are used only where permitted and can be declined. The Cookie Policy gives categories, purposes, durations and controls.
11Automated decisions and children
Meal plans are automated suggestions but do not produce legal or similarly significant decisions. Users choose whether and how to use them. Plateplan is not for children under 13. Users aged 13–17 need a parent or guardian's permission.
12Contact and complaints
Send privacy requests to support@aishwaaconsultt.shop, call +44 7975106734, or write to AISHWAA CONSULTING LTD, 8 Clements Drive, Woburn Downs, Milton Keynes, United Kingdom, MK17 9GR. We may need to verify identity. Last updated: 21 July 2026.
