Legal
Privacy Notice
How Chefted collects, uses and protects personal data.
Last updated: 5 August 2026
Who controls your data
Chefted is the data controller for personal data we collect about visitors to our website and about the administrators who buy and manage subscriptions. Contact us at hello@chefted.co.uk.
For coaching content uploaded inside a customer's workspace — employee recordings, notes and assessments — the employing organisation is the controller and Chefted acts as processor on their instructions.
Personal data we collect
- Account data: name, work email, job title, venue, role and organisation.
- Coaching content: video recordings you submit, written notes, AI assessments, scores and manager feedback.
- Usage data: pages visited, features used, device and browser information, IP address.
- Communications: emails you send us and email delivery events such as bounces and unsubscribes.
- Billing data: subscription, plan and licence records. Card details are collected and held by Paddle, not by us.
Why we use it and our lawful bases
- To provide the platform and generate coaching feedback — performance of a contract.
- To secure the service, prevent abuse and keep audit logs — legitimate interests.
- To send service and account emails — performance of a contract; optional digests with consent.
- To meet tax, accounting and legal obligations — legal obligation.
Who we share data with
- Paddle.com — our Merchant of Record and payment processor, who handles checkout, tax and refunds.
- Supabase — database, authentication and encrypted storage hosting.
- AI model providers — process video frames and skill criteria to produce coaching feedback; they do not use your content to train their models.
- Resend — transactional email delivery.
- Professional advisers and authorities where required by law.
We never sell personal data or share it for third-party advertising.
Video recordings
Coaching videos are stored in a private bucket and are only accessible to the employee, their managers and administrators within the same organisation, via short-lived signed links. Recordings are deleted automatically after your organisation's retention period (30 days by default) unless retained for a manager review.
International transfers
Some processors operate outside the UK/EEA. Where that happens we rely on UK International Data Transfer Agreements or Standard Contractual Clauses with appropriate safeguards.
Retention
Account and coaching records are kept for the life of the subscription and up to 12 months afterwards, unless you ask us to delete them sooner. Billing records are kept for 7 years to meet tax law. Videos follow the retention setting described above.
Your rights
You have the right to access, correct, delete, restrict or object to processing of your personal data, to data portability, and to withdraw consent. Employees should contact their employer first, as controller of their coaching records; we will support them in responding. You can also complain to the UK Information Commissioner's Office at ico.org.uk.
Cookies
We use strictly necessary cookies for sign-in and session security, and Paddle sets cookies during checkout. We do not use advertising cookies.
Changes
We will update this notice as the service evolves and will notify you of material changes by email or in-app.