Privacy Policy
1. Who we are
1.1This Privacy Policy explains how [ATHLEATS CATERING LLC], licensed in [Dubai], United Arab Emirates (trade licence 2874838 trading as “Matter Nutrition” (“Matter”, “we”, “us”, “our”), collects, uses, shares, and protects your personal data when you use our website, apps, WhatsApp ordering, and related services (the “Services”).
1.2For the purposes of applicable UAE data protection law, we are the controller of your personal data. This Policy should be read together with our Terms & Conditions.
2. The personal data we collect
We collect the following categories of personal data:
Data you give us:
–Account and contact details: name, email, phone number, password, and social login identifiers if you sign in with Apple, Google, or Facebook.
–Order and delivery details: delivery address, order history, meal selections, preferences, and delivery notes.
–Payment information: processed by our payment providers; we do not store full card numbers ourselves.
–Health-related data: dietary requirements, allergies and intolerances, and body metrics and goals (such as height, weight, and target outcomes) that you choose to provide so we can tailor your plan. See section 4.
–Communications: messages you send us by email, WhatsApp, phone, social media, or chat, and your feedback or reviews.
Data we collect automatically:
–Device and usage data: IP address, device and browser type, pages viewed, and how you interact with the Services.
–Cookies and similar technologies: including the Meta (Facebook) Pixel – see section 7.
Data from third parties:
–social login providers (Apple, Google, Facebook), payment providers, and delivery partners, where you use or interact with them in connection with the Services.
3. How we use your data and our legal bases
We use your personal data for the following purposes, relying on the legal bases shown:
–To provide the Services and fulfil your orders: performance of our contract with you.
–To personalise your meal plan, including for allergies and goals: your explicit consent (for health-related data) – see section 4.
–To process payments and prevent fraud: performance of our contract and our legitimate interest in protecting the Services.
–To communicate with you about your account and orders: performance of our contract.
–To send marketing by email, SMS, and WhatsApp: your consent, which you can withdraw at any time.
–To improve and secure the Services and understand how they are used: our legitimate interests, balanced against your rights.
–To comply with legal, tax, and regulatory obligations: compliance with a legal obligation.
4. Health-related (sensitive) data
4.1Allergy, dietary, and body-metric information is sensitive personal data. We collect it only where you choose to provide it, and we use it solely to prepare and tailor your meals and plan, to flag allergens, and to support you in reaching your goals.
4.2We process this data on the basis of your explicit consent. You can withdraw that consent at any time by contacting us or updating your account, although this may limit our ability to tailor your plan. We do not use your health-related data for marketing or share it with advertising or analytics tools.
5. Marketing and communications
5.1With your consent, we may send you marketing about our plans, offers, and content by email, SMS, and WhatsApp. You can opt out at any time using the unsubscribe link, by replying to opt out, or by contacting us.
5.2Service and transactional messages (such as order confirmations, delivery updates, and account notices) are not marketing and are necessary to provide the Services, so you may continue to receive these even if you opt out of marketing.
6. Cookies and tracking
6.1We use cookies and similar technologies to operate the Services, remember your preferences, measure performance, and support marketing. Non-essential cookies and trackers are used only with your consent, which you can manage through our cookie banner or your browser settings.
6.2We use the Meta (Facebook) Pixel to measure and target advertising. This may share limited information about your activity on our website with Meta. [We do not transmit your health-related data, allergies, or body metrics to the Meta Pixel or any other advertising tool.]
7. How we share your data
7.1We share personal data only as needed, with: (a) service providers who process data on our behalf, such as payment processors, delivery partners, hosting and IT providers, and email/SMS/WhatsApp communication providers; (b) advertising and measurement partners (such as Meta) for non-sensitive data, with your consent; (c) professional advisers, regulators, and authorities where required by law; and (d) a buyer or successor in the event of a business sale or reorganisation.
7.2We require our service providers to protect your data and to use it only for the purposes we specify. We do not sell your personal data.
8. International transfers
8.1Some of our providers may process your data outside the UAE. Where we transfer personal data internationally, we take steps to ensure an adequate level of protection in accordance with applicable UAE data protection law [including the requirements of the PDPL and any guidance issued by the UAE Data Office].
9. How long we keep your data
9.1We keep personal data only as long as necessary for the purposes set out in this Policy, including to provide the Services, comply with legal and tax obligations, resolve disputes, and enforce our agreements. Retention periods vary by data type [for example, order and tax records may be kept for [5] years as required under UAE law]; we then delete or anonymise the data.
10. How we protect your data
10.1We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse, and we limit access to those who need it. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
11. Your rights
Subject to applicable UAE data protection law, you have the right to:
–access the personal data we hold about you and receive a copy;
–correct inaccurate or incomplete data;
–request deletion of your data in certain circumstances;
–restrict or object to certain processing;
–request transfer of certain data (portability);
–withdraw consent at any time, without affecting processing already carried out; and
–lodge a complaint with the relevant UAE data protection authority [the UAE Data Office].
11.1To exercise any of these rights, contact us using the details in section 14. We may need to verify your identity before responding, and we will respond within the timeframes required by law.
12. Children
12.1Our Services are intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, please contact us and we will take appropriate steps to delete it.
13. Third-party links and changes
13.1Our Services may link to third-party websites or services that we do not control and that have their own privacy practices. This Policy does not apply to them.
13.2We may update this Policy from time to time. We will post the updated version with a revised “Last updated” date and, where changes are material, take reasonable steps to notify you.
14. How to contact us
For any privacy questions or to exercise your rights, contact us:
Email: you@matternutrition.xyz
WhatsApp / Phone: +971 52 891 3398