Privacy Notice

Last updated: 27 August 2026

This notice explains how Toki Birch trading as Her Energy Lab handles personal information when you visit our website, sign up for communications, buy or use one of our digital tools, or contact us.

1. Who we are

The controller responsible for the information covered by this notice is Toki Birch trading as Her Energy Lab.

Piccadilly Business Centre
Unit C Aldow Enterprise Park
Manchester
M12 6AE

Email: hello@herenergylab.com

2. What this notice covers

It applies to the processing we control for Her Energy Lab and the digital tools we create or operate under that name, including TONIGHT. TONIGHT is the first tool covered by this notice. A future tool with materially different data uses may have additional in-product or tool-specific privacy information.

3. Information we may collect

name and email address;
information submitted through a form, free resource or email sign-up;
marketing preferences and consent or opt-out records;
account, login and access information;
order, payment-status, refund and transaction references;
support messages and correspondence;
information you choose to enter or select within a particular tool; and
technical information such as IP address, browser, device, security events and log information.

We do not need full card details for TONIGHT. Payment details are handled by the payment provider used at checkout.

4. TONIGHT and local device storage

TONIGHT currently asks only for food-planning preferences such as vegan, vegetarian or gluten-free. It does not provide fields for medical diagnoses, symptoms, medication, test results, allergies, intolerances or other free-text health information, and we do not use these selections to create a medical profile or infer a medical condition.

In the current TONIGHT design, selected food preferences, dinner choices, saved items and history are stored in the browser on your device and are not sent to or accessible by Her Energy Lab. This does not apply to account, authentication, access, payment, support or feedback information, which may be processed by Her Energy Lab and our service providers. If a future version uses a different arrangement, we will explain this in the relevant notice.

Please do not include medical or other sensitive information in support or feedback messages.

5. How we use information

to operate our website, forms and digital tools;
to provide requested resources and communications;
to take and manage orders and provide access;
to send order, access, security and support messages;
to answer questions and resolve problems;
to keep business, payment and tax records;
to protect accounts, prevent fraud and maintain security;
to maintain and improve our tools where permitted; and
to send marketing communications where permitted and where you have consented when consent is required.

Depending on the purpose, our lawful bases may include performance of a contract, legal obligation, legitimate interests in operating a secure service, and consent where required.

6. Suppliers

We may use suppliers to help operate Her Energy Lab, including:

Systeme.io for checkout, orders and customer communications;
Stripe for payment processing and refund evidence;
Supabase for account authentication and access checks;
Resend for TONIGHT account, authentication and security email;
Netlify for hosting and technical delivery;
Flodesk or another approved email provider for permitted marketing communications; and
professional, security, legal, accounting or support providers where reasonably necessary.

We do not sell your personal information or provide your account or tool information to advertisers for their own use.

7. International transfers

Some suppliers may process information outside the United Kingdom. We will use an applicable adequacy decision, an appropriate safeguard such as the UK International Data Transfer Agreement or UK Addendum, or another lawful basis where applicable. Supplier privacy notices may provide further information about their own processing and sub-processors.

8. How long we keep information

We keep information only for as long as needed for the purpose collected, to provide the service, handle disputes, maintain security or meet legal and accounting duties. We use appropriate retention periods or criteria for order, account, support, security and marketing records, then delete or anonymise information securely where practical.

9. Cookies and similar storage

Our website uses the CookieYes consent banner. We may use essential cookies or similar storage needed for security, account sessions, consent preferences and basic operation. Non-essential analytics, advertising or marketing technologies will be described in our Cookie Policy and will require consent where required.

The Cookie Policy explains the cookies and similar technologies identified by our current scan, their purposes, providers and durations, and how to change your choices. The same principles apply to browser storage used by TONIGHT.

10. Automated suggestions

TONIGHT may use the food preferences you select to suggest dinner options. These suggestions are ordinary meal-planning assistance and are not used to make decisions about your legal rights or other similarly significant matters.

11. Your rights

Depending on the circumstances and lawful basis, you may have rights to access, correct, delete or restrict use of your information, object to certain processing, request portability, and withdraw consent where processing relies on consent. You can opt out of marketing using the unsubscribe link or by contacting hello@herenergylab.com. Service, security, order and account messages may still be sent when needed.

We may need to verify your identity before responding. We aim to respond within one month where the law requires.

12. Complaints

Please contact us first at hello@herenergylab.com. You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint.

13. Changes to this notice

We may update this notice when our processing changes or when the law requires it. We will publish the current version here and change the “Last updated” date. We will explain new uses of personal information before starting them where required.