Privacy policy
Draft, 6 November 2026
This is a draft. It hasn’t been checked by a lawyer yet. The highlighted parts need confirming before Mizen starts taking payments.
Who we are
Mizen is a recipe and menu costing service for catering businesses. In this policy, “Mizen”, “we” and “us” mean [the legal name of the person or company that runs Mizen, and its address]. We’re the controller of the personal data described here.
If you have a question about your data, contact us.
What we collect
When you create an account
- Your name and email address, and a password. Passwords are stored as a secure hash, never as you typed them.
- Business details you add in Settings, such as your business name, and a profile photo if you add one.
What you put into Mizen
- Your ingredients, suppliers, prices, recipes, batch recipes, menu items and allergen details.
- Supplier invoices you scan: the photos or PDFs, and the lines read from them.
- Support tickets you raise in the app.
When you pay
Card payments are handled by Stripe. We never see or store your full card number. Stripe tells us which plan you’re on and whether payments have gone through.
When you contact us
Your name, email address, business name if you give it, and your message.
When you visit
The companies that host Mizen keep short-term server logs, including IP addresses and browser details, to keep the service secure and running. This website doesn’t use cookies or analytics. The Mizen app stores a sign-in token in your browser so you stay logged in.
How we use it
| What for | Lawful basis |
|---|---|
| Running your account and working out your costs, prices and allergens | Contract |
| Taking payment for your subscription | Contract |
| Sending emails you need, like sign-up confirmation, password resets and billing receipts | Contract |
| Replying to messages and support tickets | Legitimate interests |
| Keeping Mizen secure and preventing misuse | Legitimate interests |
| Keeping billing records | Legal obligation |
We don’t send marketing emails unless you’ve asked for them, and we don’t sell your data.
Who we share it with
We use these companies to run Mizen. They only use your data to provide their service to us.
- Supabase stores your account and everything you put into Mizen, in a database in London, and handles signing in and account emails.
- Vercel hosts this website and the Mizen app.
- Stripe takes card payments and manages subscriptions.
- Anthropic reads the supplier invoices you choose to scan, using AI. Only the invoice you’re scanning is sent. [Confirm Anthropic’s data retention terms.]
Data sent outside the UK
Some of these companies are based in the United States. Where your data leaves the UK, it’s protected by [the UK International Data Transfer Agreement, or the UK Extension to the EU-US Data Privacy Framework: confirm for each company].
How long we keep it
- Your account and what you’ve put into Mizen: while your account is open. When you close it, we delete it within [90 days].
- Billing records: [6 years], as the law requires.
- Messages from the contact form: [12 months] after we last reply.
Your rights
You can ask us to:
- give you a copy of your data
- correct anything that’s wrong
- delete your data
- stop or limit how we use it
- send your data to you or another service in a common format
Contact us to make a request. We’ll reply within one month. If you’re unhappy with how we’ve handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk.
Keeping it safe
Everything is sent over an encrypted connection. Each account can only see its own recipes, prices and invoices, and that’s enforced by the database itself, not just the app.
Children
Mizen is for businesses and isn’t meant for anyone under 18.
Changes to this policy
If we change this policy, we’ll update this page. If the change is significant, we’ll email account holders first.