What we collect, and what we don't.

The site is a set of static pages. It sets no advertising cookies, runs no third-party analytics or tracking scripts, and builds no profile of you.

• If you send us a message, we receive what you typed: your name, business name, industry, work email, your mobile number if you give us one, and anything else you chose to write.
• If you choose to verify your work email, we email you a six-digit code. While it is live we hold a one-way hash of your address — never the address itself — together with a hash of the code, for ten minutes. Verifying deletes the code and leaves only a note that the address was confirmed, which expires within half an hour. Your mobile number is never verified and never used to contact you unless you ask us to.
• If you switch the site between light and dark, that preference is saved in your own browser. It never reaches us.
• Our host, Cloudflare, processes standard request information such as your IP address to serve the page and to protect the site from attack.

We read it and we reply. That is the whole purpose. Messages reach the people who build the product, not a sales pipeline.

We do not add you to a mailing list because you contacted us, we do not sell or rent your details to anyone, and we do not send you marketing you did not ask for. If we ever start a product newsletter, you will have to ask for it.

If you become a customer, your business's data is kept separate from every other business's.

The records you keep there — your customers, their addresses, deliveries and payments — belong to you. We process them to run the service for you and for no other purpose: we do not sell them, mine them for advertising, or use one customer's data to serve another.

Centrafeed records payments; it never processes them. No card number ever reaches our systems.

We keep the list of companies that can touch data short, and each one is there for a specific job:

• Cloudflare — serves this website and protects it.
• Our email provider — delivers the message you send through the contact form to our inbox.
• Our hosting and database providers — run the product itself for customers.
• Our error-reporting provider (Sentry) — receives crash reports from the Centrafeed console and the Centrafeed Tiffins mobile app, so we can fix what broke. Reports are stripped before they leave your device: no customer names, phone numbers, addresses, form contents or sign-in details, and no screen recordings. This website sends none.

The app is for kitchen staff and drivers of businesses that use Centrafeed. It is not for their customers, and nobody can create an account in it — a kitchen owner adds you.

It uses your work email and name to sign you in, and shows the kitchen's own records you have been given access to: for a driver, today's stops with each customer's first name, address, delivery notes and phone number. It keeps no customer data on the phone beyond the current day's route, which is encrypted and cleared when you sign out.

It does not track your location, read your contacts, or use advertising identifiers. Tapping Navigate or Call hands the address or number to your phone's own maps or dialler.

Enquiries stay in our inbox while a conversation is live and for as long as we may reasonably need the context afterwards. Ask us to delete yours and we will.

Customer workspace data is kept for the life of the agreement. On request we will export it to you, and on the end of an agreement we delete it on the schedule set out there.

Under Canadian privacy law (PIPEDA) you may ask what personal information we hold about you, ask us to correct it, and ask us to delete it. Write to us and we will answer — there is no form to fill in, and no charge.

If you are unhappy with how we have handled a request, you may complain to the Office of the Privacy Commissioner of Canada.

If this policy changes in a way that matters, we will change the effective date and say plainly what changed rather than quietly republishing it.