Privacy Policy
Reko by Hollr Group Ltd
Last updated: January 2026
1. Introduction
Reko is operated by Hollr Group Ltd ("we", "us", "our"), a company registered in England and Wales. We are committed to protecting your privacy and handling your personal data responsibly.
This Privacy Policy explains how we collect, use, store and protect your information when you use our web application, mobile application and related services (collectively, "Reko" or the "Service").
By using Reko, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
2.1 Account Information
When you create an account, we collect:
- Name
- Email address
- Password (encrypted)
- Business name and address
- Business type (restaurant, café, pub, etc.)
2.2 Compliance Records
When you use Reko, you create and store:
- Temperature logs (fridge, freezer, cooking, cooling, delivery)
- Checklist completions
- Cleaning records
- Allergen information
- Supplier details
- Staff member names and roles
- Menu items and ingredients
- Food waste records
2.3 Usage Data
We automatically collect:
- Device information (type, operating system)
- IP address
- Pages visited and features used
- Time and date of access
- App performance data
2.4 Payment Information
If you subscribe to a paid plan, our payment processor (Stripe) collects payment card details. We do not store your full card number.
3. How We Use Your Information
We use your information to:
- Provide and maintain the Service
- Process your subscription payments
- Send service-related communications (account updates, security alerts)
- Improve and develop new features
- Provide customer support
- Comply with legal obligations
- Protect against fraud and abuse
We do not sell your personal data to third parties.
4. Legal Basis for Processing (UK GDPR)
We process your data under the following legal bases:
- Contract: To provide the Service you have subscribed to
- Legitimate interests: To improve our Service and protect against fraud
- Legal obligation: To comply with food safety record retention requirements
- Consent: For optional marketing communications (you can opt out anytime)
5. Data Sharing
We share your data only with:
- Service providers: Supabase (database hosting), Vercel (web hosting), Stripe (payments), Resend (email delivery)
- Legal requirements: If required by law, court order or government request
- Business transfer: If Hollr Group Ltd is acquired or merged
We do not share your compliance records with Environmental Health Officers or any regulatory body. You control when and how to share your records.
6. Data Retention
We retain your data for:
- Account data: Duration of your account plus 30 days after deletion
- Compliance records: According to your subscription tier (1 year for Core, 3 years for Pro, 5 years for Scale)
- Payment records: 7 years (legal requirement)
- Usage logs: 90 days
7. Data Security
We protect your data using:
- Encryption in transit (TLS/SSL)
- Encryption at rest
- Row-level security (users can only access their own data)
- Regular security audits
- Secure password hashing
8. Your Rights
Under UK GDPR, you have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate data
- Erasure: Request deletion of your data ("right to be forgotten")
- Portability: Receive your data in a structured format
- Object: Object to processing based on legitimate interests
- Restrict: Limit how we process your data
- Withdraw consent: For any processing based on consent
To exercise these rights, email privacy@tryreko.com.
10. Children's Privacy
Reko is not intended for use by anyone under 16. We do not knowingly collect data from children.
11. International Transfers
Your data is stored on servers in the UK/EU. If data is transferred outside the UK/EU, we ensure appropriate safeguards are in place.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification.
13. Contact Us
For privacy-related questions:
Email: privacy@tryreko.com
Post: Hollr Group Ltd, Norwich, UK
14. Complaints
If you're not satisfied with how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO):
Website: ico.org.uk
Phone: 0303 123 1113