Privacy Policy
Last updated: 27 August 2026
1. The company behind my21reset
my21reset is how Rikian Capital Ltd trades. That company is registered in England and Wales as number 17349137. Its registered office is 66 Paul Street, London, England, United Kingdom, EC2A 4NA.
Rikian Capital Ltddecides how the information in this policy is used (the data controller). We appear on the Information Commissioner’s register. There is no Data Protection Officer. Email hello@my21reset.com and a human will answer.
2. Information we hold
A purchase leaves four kinds of record:
- First name and email are used to make the plan and to send it.
- Whatever you typed or selected on the order form: age, gender, foods you would rather skip, eating habits, daily times, household size, activity level and why you want the 21 days. Blank optional fields stay blank.
- Stripe’s payment record: success or failure, amount, last four card digits and country. The full card number never comes to us.
- The finished plan: PDF, shopping lists and the calendar file.
You can also leave an optional note on the ideas page without buying anything. The note, an optional first name, and an optional email (only if you want a reply) are stored. The email is never shown on the public page. A first party cookie records which published notes this browser marked as useful, so the same browser cannot mark the same note twice.
You do not create a login. We do not keep a password.
3. Information we do not want
We are not collecting a medical file. The form is not a place for test results, prescriptions, diagnoses or proof of illness. We do not use your answers to build a clinical picture of you.
The long text box is only for foods you would rather leave off the menu. We do not treat that text as a medical note, and we do not run an allergen safety check against it. If someone still types health detail there, the only use is generating the menu. It is not acted on as medical advice, and it is removed on the same timetable as the other form answers.
We do not sell this information. We do not hand it to advertisers. We do not build advertising profiles. This site does not set advertising cookies.
4. Purpose and lawful basis
| Record | Use | Lawful basis |
|---|---|---|
| Name and email | Sending the plan and answering support mail | Performance of our contract with you |
| Order form answers | Building the personalised plan | Performance of our contract with you |
| Payment record | Taking the fee, refunds, and payment disputes | Contract, and our legal obligations |
| Order ledger | Tax and consumer law bookkeeping | Legal obligation |
| Check in emails in the 21 days | Helping you use the product you paid for | Legitimate interest in supporting customers. Each check-in carries an unsubscribe link. |
| Ideas board notes | Improving the product. Published notes (body and optional first name only) may appear on /ideas. Email is only if you asked for a reply. | Consent by sending the note, and our legitimate interest in making the plan easier to use |
| Idea marks (“I’d use this”) | Counting which published notes people would actually use. The cookie is a random id, not your name. | Consent by pressing the mark and legitimate interest in ranking useful notes |
| Website analytics | Seeing how the pages are used | Consent via the cookie banner. Analytics stay off until you accept. |
We do not pitch other products by email unless you have asked.
5. How the plan is built
The menu and sessions come from our own recipe and workout library. Your form answers steer which items are chosen and when they sit in the week. Sometimes those answers (not your email, and not payment details) go to Anthropic’s Claude API so that matching and scheduling can be done there. Your name is not attached to that request.
Staff at my21reset do not read each plan before it goes out. Anthropic is not allowed to train its models on this material.
The automation only chooses meals and sessions for each day. It does not make a decision with a legal or similarly significant effect on you. If you want a person to look at a plan, write to us and we will.
6. Suppliers who process data for us
The firms below process information on our instructions. Each is under a data processing agreement and may only use the information for the task we have given them.
| Supplier | Task | Location | Transfer safeguard |
|---|---|---|---|
| Stripe | Checkout and taking payment | USA | UK International Data Transfer Addendum |
| Anthropic | Helps match the library to form answers. Email and payment data are not sent. | USA | UK International Data Transfer Addendum |
| Resend | Sends the plan, later emails, and ideas-board notices | USA | UK International Data Transfer Addendum |
| Supabase | Encrypted store for the order, the plan, and optional ideas | EU | Covered by UK adequacy regulations |
| Vercel | Runs the website | USA / EU | UK International Data Transfer Addendum |
| Google Analytics | Page analytics, and only after you accept analytics cookies | USA | UK International Data Transfer Addendum |
We will also hand over information if the law requires it, including to HMRC or under a valid court order.
7. How long records last
| Record | Kept for | Why |
|---|---|---|
| Download links | 30 days after purchase | Then they stop working. Save the files when they arrive. |
| Form answers and the plan file | 90 days after purchase | Time to help you and to rebuild the plan if it is wrong. Ask and we will keep them longer, or remove them sooner. |
| Order ledger (name, email, amount, date) | 7 years | UK tax and consumer-law bookkeeping |
| Ideas notes and marks | Until you ask us to remove them, or we take the note down | So the public page stays useful. Email hello@my21reset.com to delete a note you sent. |
| Analytics | 14 months | Google Analytics retention setting |
At the end of a period we delete the record. We do not file it away.
8. Security
Records sit in an encrypted database. Only the people who operate My21Reset can reach them. Connections to the site are encrypted. Card numbers never pass through us. Stripe takes the payment and is certified for that work.
No setup is foolproof. If a breach is likely to put your rights at risk, we will notify the ICO within 72 hours and we will tell you without undue delay.
9. Your rights
UK data protection law lets you:
- see what we hold and obtain a copy
- have mistakes put right
- ask for deletion, other than tax records we must keep
- receive the information in a portable format
- object to processing that rests on legitimate interests, including check-in emails
- ask us to pause processing while a query is open
- withdraw consent later, where consent was the basis
Write to hello@my21reset.com. The reply window is one month. There is no charge.
10. Cookies
Until you choose, only cookies the site needs will run. The banner stores that choice for six months. Cookie settings in the footer lets you change it later.
| Cookie | What it does | Who sets it | Consent needed |
|---|---|---|---|
| my21reset_consent | Stores your cookie choice for six months | My21Reset | No (strictly necessary) |
| my21reset_voter | A random id so this browser can mark a published idea once. It lasts one year. It does not name you. | My21Reset | No (strictly necessary) |
| Stripe cookies | Checkout security and fraud checks | Stripe | No (strictly necessary) |
| _ga, _ga_* | Google Analytics 4 (G-2VXH4WR3LP). Counts visits and pages. | Yes. Off unless you accept. |
There are no advertising cookies. Analytics are not used to name you as a person.
11. Under 18s
Sales are to adults. Our Terms require you to be 18 or over. We do not set out to collect information from children. If a child’s details have reached us, email us and we will remove them.
12. Updates to this page
A change in how we use information will appear here, with a new date at the top. A material change, where we already have your email, will also be sent to you.
13. Questions and complaints
Data questions go to hello@my21reset.com. We would rather sort it with you first.
You can also complain to the Information Commissioner’s Office at ico.org.uk or 0303 123 1113. Writing to us does not take away that right.