Privacy Policy
Last updated: 26 August 2026
1. Who we are
PrediabetesBasket is an independent educational food-shopping guidance service.
PrediabetesBasket is operated by Jeremy Fuller trading as PrediabetesBasket.
Business correspondence address:
Jeremy Fuller
PrediabetesBasket
32 John Spare Court
Whitefield Road
Tunbridge Wells
Kent
TN4 9TG
United Kingdom
Business correspondence address only. PrediabetesBasket does not provide services to visitors at this address.
General enquiries:
email@emailsforprediabetesbasket.co.uk
PrediabetesBasket is the data controller for personal information processed in connection with the service where it decides how and why that information is used.
2. What PrediabetesBasket does
PrediabetesBasket is designed for eligible UK adults who want educational guidance about their supermarket shopping.
Users can forward an eligible online supermarket receipt or order confirmation. PrediabetesBasket then uses automated processing to produce educational guidance about relevant food and drink in that shop.
The service may provide:
- a Basket Score
- Green, Amber and Red guidance
- information about choices that appear to be going well
- areas that may be worth considering
- practical swap suggestions
- ideas for a future shop
- comparison with recent analysed baskets where available
PrediabetesBasket provides educational guidance only. It does not provide medical advice, diagnosis, treatment or medical monitoring.
3. Personal information we may process
Depending on how you use PrediabetesBasket, we may process the following types of information.
Account and contact information
This may include:
- your email address
- account identifiers
- authentication information
- account and membership status
- information needed to operate and secure your account
- communications you send to us
Eligibility and onboarding information
This may include information you provide so that PrediabetesBasket can determine whether the personalised service is appropriate for you.
It may include:
- confirmation relating to prediabetes
- eligibility and safety-screening responses
- dietary preferences
- foods you do not want suggested as swaps
- dietary exclusions
- other information you choose to provide during onboarding
Health and other sensitive information
Some information supplied during onboarding may relate to health.
Some dietary information may also reveal other sensitive information, including information connected with religious dietary choices.
Under UK data-protection law, health information and certain other information can constitute special category personal data and receive additional protection.
PrediabetesBasket aims to collect only information reasonably necessary to provide and operate the service.
Supermarket receipt and order information
When you forward an eligible online supermarket receipt or order confirmation, we may process information including:
- supermarket name
- product and food names
- quantities
- order or receipt dates
- information contained in the forwarded order or receipt
- the email address used to forward it
A retailer email may also contain incidental information that is not needed for food analysis, such as an order reference, loyalty information or delivery-related information.
PrediabetesBasket aims to use only information reasonably needed to provide and operate the service.
Basket analysis and history
We may process:
- your Basket Reviews
- Basket Scores
- Green, Amber and Red classifications
- educational suggestions
- recent basket comparisons
- your latest five analysed receipts used as rolling recent reference data
For paid members, the latest five analysed receipts may be used as recent reference information when creating future educational guidance.
When a new analysed receipt moves the recent-reference set beyond five, the oldest receipt leaves that recent-reference set.
Leaving the latest-five reference set does not necessarily mean that every copy of the information is immediately removed from operational records, backups or information that must be retained for legitimate legal, security or administrative purposes.
Subscription and payment information
Payments are handled by Stripe.
PrediabetesBasket may receive information such as:
- subscription status
- payment status
- billing identifiers
- membership type
- limited transaction information
PrediabetesBasket does not need to receive or store your complete payment-card details where those details are processed directly by the payment provider.
Technical and security information
We may process limited technical information reasonably required to operate and protect the service, including:
- device or browser information
- IP address
- security information
- error or diagnostic information
- records relating to misuse, fraud prevention or account security
Website click counts
We count how often visitors click the links to our app. These counts are anonymous and aggregated only — we record the button, the page, the date and, where present, the campaign label from the link used. No cookies, identifiers or personal information are stored.
4. Why we use personal information
We may use personal information to:
- create and manage accounts
- authenticate users
- check eligibility and safety-screening responses
- receive and process eligible supermarket receipts and orders
- produce Basket Reviews
- personalise educational suggestions
- provide recent-basket comparisons
- apply free and paid service limits
- administer memberships and payments
- respond to customer enquiries
- prevent fraud or misuse
- maintain service security
- diagnose technical problems
- comply with legal, accounting and regulatory requirements
- establish, exercise or defend legal rights where necessary
PrediabetesBasket does not use this information to diagnose, treat or medically monitor a health condition.
5. Lawful bases for processing
Under UK data-protection law, PrediabetesBasket must have a lawful basis for processing personal information.
Depending on the information and purpose, the bases we may rely on include:
Contract
Where processing is necessary to create or administer your account, provide the service you requested or administer your membership.
Steps before entering a contract
Where you ask us to take steps before you purchase a paid membership, including providing an eligible free introductory basket analysis.
Legal obligation
Where processing is necessary to comply with legal, tax, accounting, consumer-protection or regulatory obligations.
Legitimate interests
Where reasonably necessary to operate, secure, troubleshoot and protect PrediabetesBasket, provided those interests are not overridden by your rights and interests.
Consent
Where the law requires consent for a particular activity.
6. Special category information
Health information and some other sensitive information may be special category data under the UK GDPR and require an additional lawful condition for processing.
PrediabetesBasket will only process special category information where an appropriate condition under UK data-protection law applies.
Where explicit consent is relied upon, that consent must be clear, specific and capable of being withdrawn.
For questions about the processing of health-related or other special category information, contact:
7. Automated and AI-assisted analysis
PrediabetesBasket uses automated technology, including AI-assisted processing, to help produce educational basket analysis.
This may assist with:
- understanding eligible supermarket products
- producing Basket Scores
- assigning Green, Amber and Red educational guidance
- generating educational suggestions
- comparing recent analysed baskets
Automated systems can make mistakes and retailer or product information may sometimes be incomplete or misunderstood.
The resulting guidance:
- does not diagnose a medical condition
- does not determine medical treatment
- does not decide access to healthcare or other essential services
- is not intended to produce legal or similarly significant effects
If you believe a product, receipt or result has been misunderstood, you can contact email@emailsforprediabetesbasket.co.uk.
8. Service providers
PrediabetesBasket uses third-party technology providers to operate different parts of the service.
Current providers may include:
- Lovable — public marketing website
- FlutterFlow — application front-end
- Mailgun — email processing
- n8n — workflow automation
- Hostinger — hosting infrastructure
- Supabase — database and backend services
- OpenAI — AI-assisted processing used to help produce educational basket analysis
- Stripe — subscription and payment processing
These providers may process personal information on behalf of PrediabetesBasket or as otherwise described in their applicable terms and privacy arrangements.
PrediabetesBasket does not sell personal information to advertisers.
9. International transfers
Some service providers may process or make personal information accessible outside the United Kingdom.
Where UK data-protection law requires safeguards for an international transfer, appropriate legal safeguards are used where applicable. These may include:
- UK adequacy regulations
- the UK International Data Transfer Agreement
- the UK Addendum to approved Standard Contractual Clauses
- another lawful transfer mechanism available under UK data-protection law
You may contact email@emailsforprediabetesbasket.co.uk for further information about international-transfer safeguards relevant to your information.
10. How long we keep information
PrediabetesBasket does not keep personal information for longer than reasonably necessary for the purpose for which it is held.
The period will depend on the type of information and why it is required.
Relevant factors include:
- whether your account remains active
- whether the information is needed to provide the service
- whether it forms part of your latest-five recent basket reference
- security and fraud-prevention requirements
- resolving complaints or disputes
- legal, tax and accounting requirements
- establishing, exercising or defending legal rights
- technical backup and recovery requirements
For the paid service, the latest five analysed receipts are used as rolling recent reference data.
When a new receipt moves that reference set beyond five, the oldest receipt leaves the recent-reference set.
Information that is no longer reasonably required will be deleted or anonymised where appropriate, unless it must be kept for a legitimate legal, regulatory, security or record-keeping reason.
PrediabetesBasket periodically reviews the information it retains and the reasons for retaining it.
11. Your data-protection rights
Depending on the circumstances and the lawful basis being used, UK data-protection law may give you rights including:
- the right to be informed
- the right of access
- the right to correct inaccurate information
- the right to erasure
- the right to restrict processing
- the right to data portability
- the right to object to certain processing
- rights relating to certain automated processing
- the right to withdraw consent where processing relies on consent
These rights are not absolute in every situation.
To make a privacy request, contact:
email@emailsforprediabetesbasket.co.uk
We may need to verify your identity before acting on a request.
12. Account deletion and withdrawal
You may request deletion of your account and personal information.
Deletion is subject to information that PrediabetesBasket is required or permitted to retain for legal, accounting, security, dispute-resolution or other lawful purposes.
If you withdraw consent to processing that is necessary to provide personalised analysis, PrediabetesBasket may no longer be able to provide that part of the service.
13. Security
PrediabetesBasket uses organisational and technical measures intended to protect personal information.
Access to information is limited where appropriate and service providers are selected to support the operation and security of the service.
No internet-based service can guarantee absolute security.
If PrediabetesBasket becomes aware of a personal-data breach, it will assess and handle the incident in accordance with applicable UK data-protection law.
14. Cookies and similar technologies
The public PrediabetesBasket marketing website currently does not use advertising trackers or non-essential analytics that require a consent banner.
The website may make requests needed to provide fonts and essential website functionality.
Please see the Cookie Policy for further information.
If PrediabetesBasket introduces non-essential analytics, advertising or similar technologies in future, appropriate consent controls will be implemented where required before those technologies are activated.
15. Marketing
PrediabetesBasket will not treat acceptance of this Privacy Policy, acceptance of Terms, health-data consent or cookie choices as consent to receive direct marketing.
Where consent is required for future electronic marketing, it will be requested separately.
16. Children
PrediabetesBasket is intended for adults aged 18 and over.
The service is not intended for children.
17. Complaints
If you have concerns about how PrediabetesBasket handles your personal information, please contact:
email@emailsforprediabetesbasket.co.uk
You also have the right to complain to the UK Information Commissioner’s Office. See the Information Commissioner’s Office complaints information.
18. Changes to this Privacy Policy
PrediabetesBasket may update this Privacy Policy when the service, technology providers, processing activities or legal obligations change.
The latest version and update date will be displayed on this page.
Where a change materially affects how personal information is used, additional notice will be provided where appropriate.
19. Contact
Privacy enquiries:
email@emailsforprediabetesbasket.co.uk
General enquiries:
email@emailsforprediabetesbasket.co.uk
Business correspondence:
Jeremy Fuller trading as PrediabetesBasket
32 John Spare Court
Whitefield Road
Tunbridge Wells
Kent
TN4 9TG
United Kingdom
Business correspondence address only. PrediabetesBasket does not provide services to visitors at this address.