Last updated: 30 September 2026
This policy explains how I collect and use your personal data when you visit my site, become a member of The Secret Supper Society or take part in the community.
1. Who I am
I’m Jules, and I run The Secret Supper Society. The Secret Supper Society is a trading name of Grid24 Limited, a company registered in England and Wales (company registration number 04280083), registered office Lynwood House, 373/375 Station Road, Harrow, HA1 2AW, United Kingdom.
In this policy, “I”, “me” and “my” mean Grid24 Limited t/a The Secret Supper Society, which is the “controller” of your personal data. That means it decides how your data is used and is responsible for protecting it.
If you have any questions about this policy or your data, please email report@thesecretsuppersociety.com.
2. What I collect
When you register and manage your account: your name, email address, username, password (stored in encrypted form), confirmation that you are 18 or over, and your account settings.
When you use the community: your profile information (display name, profile and cover photos, and anything else you choose to add, such as a bio, interests or general location); your posts, comments, recipes, photos, videos and reactions; the groups you join and your friend connections; your chat messages; and any reports you make or reports made about your content.
When you contact me: your messages and my replies, including complaints.
When you visit my site: technical information such as your IP address, browser and device type, which my website host logs for security and to keep the site running. I also use Fathom Analytics to see which pages are popular. Fathom doesn’t use cookies and doesn’t collect or store information that identifies you.
For marketing: your email address and your preferences if you sign up to my newsletter.
Information you choose to share. I don’t ask for sensitive information, such as details about your health, religion or ethnicity. If you choose to share it in the community (for example, mentioning an allergy or medical condition in a post), it will be visible to other members in line with your settings. Please think carefully before sharing anything sensitive.
3. How I use your data and my legal reasons
| What I use it for | Legal basis |
|---|---|
| Creating and running your account and membership | Performing my contract with you |
| Providing community features (profile, posts, photos, groups, friends, chat) | Performing my contract with you |
| Sending essential account and service emails (e.g. password resets, changes to my terms) | Performing my contract with you |
| Moderating content, handling reports and complaints, and keeping members safe | My legitimate interests in running a safe community, and my legal obligations |
| Keeping my site secure and preventing misuse | My legitimate interests |
| Understanding how my site is used, through anonymous analytics (Fathom) | My legitimate interests |
| Sending newsletters and offers | Your consent (you can unsubscribe at any time) |
| Complying with the law and responding to lawful requests from the police or regulators | Legal obligation |
4. Who can see what you post
The community, and everything posted in it, can only be seen by logged-in members. It is not visible to the public or to search engines. Within the community, your profile and member content are visible to other members in line with your privacy settings, which you can change in your account settings.
Chat messages are visible to the people in the conversation. I don’t routinely read private messages, but I may review them if they are reported to me, or where I need to in order to investigate a breach of the Community Rules, protect someone’s safety or comply with the law.
Please remember that other members can see, and could screenshot, anything you share with them. I can’t control what they do with it.
5. Photos
Photos taken on phones and cameras can contain hidden information, such as the location where they were taken. I recommend turning off location tagging on your phone or camera, or removing location details from a photo, before uploading it to the community. Please only upload photos of other people with their permission, and follow the Community Rules on photos of children.
6. Who I share your data with
I never sell your personal data. I share it only with:
- service providers who help me run my site: my website host (WPX), which also sends account and service emails; Mailchimp, for my newsletters; Fathom Analytics, for anonymous website statistics; Adobe, which provides my website fonts; and YouTube, for embedded videos. They may only use your data to provide their services to me;
- my professional advisers, such as lawyers and accountants, where needed;
- the police, regulators or other authorities, where the law requires it or where I reasonably believe it is necessary to prevent harm or crime; and
- a buyer or successor, if my business is ever sold or reorganised, who would continue to use your data in line with this policy.
7. International transfers
Some of my service providers are based outside the UK, for example in the USA. Where your data is transferred outside the UK, I make sure appropriate safeguards are in place, such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or the UK-US Data Bridge.
8. How long I keep your data
Account and profile information: while your account is open, and deleted or anonymised within 30 days of it being closed.
Your posts, comments, photos and messages: until you delete them or close your account. Copies may remain in my hosting provider’s backups for a short time until they are overwritten. Content that other members have quoted or shared may remain.
Reports, moderation decisions and complaints: 12 months after the matter is closed, or longer if I need them for legal reasons.
Newsletter data: until you unsubscribe.
Emails with me: up to 2 years.
9. Your rights
Under UK data protection law, you have the right to:
- ask for a copy of the personal data I hold about you;
- ask me to correct data that is inaccurate or incomplete;
- ask me to delete your data;
- ask me to restrict how I use your data;
- object to me using your data where I rely on my legitimate interests;
- ask for your data in a portable format; and
- withdraw your consent at any time, where I rely on consent.
To use any of these rights, email report@thesecretsuppersociety.com. There is usually no charge, and I will respond within one month.
If you are unhappy with how I have handled your data, please contact me first so I can try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.
10. Cookies
Cookies are small files placed on your device.
Essential cookies keep you logged in, keep the site secure and remember your cookie choices. These don’t need your consent.
Analytics: Fathom Analytics works without cookies, so no analytics cookies are placed on your device.
Embedded videos: if you play a YouTube video on my site, YouTube may set cookies. These are only loaded with your consent.
Affiliate links: if you click an affiliate link, the retailer or affiliate network may set a cookie once you reach their site. Their own cookie and privacy policies apply.
You can change your cookie choices at any time through the “Cookie settings” link in my footer.
11. Keeping your data safe
I use appropriate technical and organisational measures to protect your data, including secure (HTTPS) connections, encrypted passwords, restricted admin access and regular updates to my software. No website can be completely secure, so please use a strong, unique password and keep it private.
12. Age
Membership and the community are only for people aged 18 and over. If I learn that I hold data about someone under 18 through the membership, I will close the account and delete the data.
13. Changes to this policy
I may update this policy from time to time. The date at the top shows when it was last changed, and I will tell members about any significant changes.