Tottable – Privacy Policy

Effective Date: 29 May 2025

This Privacy Policy explains how Russell & Sons Limited (“Tottable”, “we”, “us”, “our”) collects, uses, and protects your personal information when you use our website, app, and services.

We are committed to safeguarding your privacy and handling your data transparently and responsibly.

1. Who We Are

Tottable is a product of Russell & Sons Limited, registered in England and Wales with company number 16408330. We offer tools to help parents plan nutritious meals for babies and young children.

2. What Personal Data We Collect

a. Account Information

  • Name
  • Email address
  • Password (encrypted)

b. Child Profile Data (optional and controlled by you)

  • First name or nickname
  • Date of birth or age
  • Dietary preferences and allergies

c. Usage Data

  • Pages viewed, buttons clicked, interactions with the platform
  • Device type, browser, and IP address

d. Payment Information

If you subscribe, payment details are processed by Stripe. We do not store full card details.

3. How We Use Your Data

  • Provide access to your account
  • Personalize your meal plan and content
  • Improve our service through analytics
  • Respond to your inquiries and support requests
  • Process payments and manage subscriptions
  • Send important service updates (we never spam)

4. Legal Basis for Processing

We only process your personal data when one of the following applies:

  • Contractual necessity – to provide the service you’ve signed up for
  • Legitimate interest – to improve our services or communicate updates
  • Consent – for optional data (e.g. child preferences) or marketing (if applicable)
  • Legal obligation – when required to comply with applicable law

5. Sharing Your Data

We do not sell or rent your data. We only share it with:

  • Service providers like Stripe (payments), Google Analytics (site usage), and email platforms
  • Legal authorities if required to comply with law or protect our rights

All third-party providers are carefully selected and GDPR-compliant.

6. International Transfers

We may store your data on servers located outside the UK or EEA, but only with providers that offer adequate data protection measures (e.g. Standard Contractual Clauses).

7. Data Retention

We keep your data for as long as you have an account. After that:

  • Account and meal plan data is deleted or anonymised within 60 days
  • Data may be retained longer if required by law (e.g. for tax or financial records)

8. Your Rights

As a UK or EEA resident, you have the right to:

  • Access your data
  • Correct inaccurate data
  • Delete your data
  • Object to or restrict processing
  • Withdraw consent at any time (for consent-based processing)
  • File a complaint with the ICO (UK regulator) at ico.org.uk

9. Cookies

We use essential and analytics cookies to:

  • Enable core site functionality
  • Understand how users navigate and improve the service

You can manage cookie preferences through your browser settings.

10. Children's Data

Tottable is designed for parents and guardians. We do not knowingly collect data directly from children. All child-related data is entered voluntarily by the parent or guardian and is optional.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make significant changes, we will notify you via email or through the app.

The most current version will always be available at tottable.com/privacy.

12. Contact Us

Questions or concerns?

📧 ben@tottable.com