Snapshot of the source text at fetch time, not a live mirror of the policy page.
Plain-English summary
HelloFresh's Privacy Policy indicates that your personal information may not be fully secure and could be transferred to locations with weaker privacy laws. The company also reserves the right to change its privacy policy at any time, with continued use implying acceptance. Furthermore, it collects unlisted data and combines information from various sources, and does not honor "Do Not Track" signals.
85% confidence
Ask Verbaterm
Follow up on findings with grounded answers from this review. Not legal advice.
Risk Flags
1 finding
Critical issues that may result in material harm or loss. These are typically one-sided clauses that may be difficult to reverse.
medium95% confidence
International Data Transfers with Less Protection
Personal information may be transferred to the United States or other locations where privacy laws may not be as protective as those in the user's state, province, or country.
Why it matters: Your personal information may be transferred to locations with weaker privacy protections, potentially exposing it to different or lesser legal safeguards.
Your personal information may be transferred to the United States or other locations where privacy laws may not be as protective as those in your state, province, or country.
International data transfers, paragraph 1 · Citation strength: strong
Data Use
3 findings
Practices and policies related to the collection, processing, and utilization of user data.
medium80% confidence
Collection of Other Unlisted Data
The company may collect other data not specifically listed in the Privacy Policy, to be used as described in the policy or disclosed at the time of collection.
Why it matters: The company may collect additional personal information not explicitly detailed, meaning you might not always know the full extent of data being gathered.
Other data that we may collect which is not specifically listed here, which we will use as described in this Privacy Policy or as otherwise disclosed at the time of collection.
State law privacy rights, paragraph 1 · Citation strength: strong
medium90% confidence
Combination of Personal Information from Various Sources
The company may combine personal information received from the user with data obtained from other sources, including data providers, public sources, business partners, and third-party services.
Why it matters: Your personal information may be combined with data from various external sources, potentially creating a more extensive profile of you than you might expect.
Other sources. We may combine personal information we receive from you with personal information we obtain from other sources, such as: Data providers , such as information services and data licensors. Public sources , such as public social media platforms. Business partners , such as joint marketing partners and event co-sponsors. Third-party services , such as social media services, that you use to log into, or otherwise link to, your Service account. This data may include your username, profile picture and other information associated with your account on that third-party service that is made available to us based on your account settings on that service.
State law privacy rights, paragraph 2 · Citation strength: strong
medium90% confidence
No Response to Do Not Track Signals
The company currently does not respond to "Do Not Track" or similar signals from internet browsers.
Why it matters: Even if your browser sends a "Do Not Track" signal, your online activity may still be tracked by the company, limiting your control over data collection.
Do Not Track. Some Internet browsers may be configured to send “Do Not Track” signals to the online services that you visit. We currently do not respond to “Do Not Track” or similar signals.
How we share your personal information, paragraph 1 · Citation strength: strong
Cancellation and Renewal
All clear
Terms related to subscription cancellation, account termination, and renewal policies.
✓
Looking good
No billing surprises spotted
Verbaterm only flags concerns it can cite. No cancellation, auto-renewal, or refund terms needed attention here.
Gotchas
All clear
Potentially overlooked clauses that may have unintended consequences for users.
✓
Looking good
No hidden gotchas
Verbaterm only flags concerns it can cite. Nothing easy-to-miss stood out in this section.
Protections
2 findings
User-benefiting clauses that promote transparency, control, or recourse.
Protection95% confidence
Non-collection of Personal Information from Children Under 16
The company states that its sites and online services are not intended for use by children under 16 years of age. If they learn that personal information has been collected from a child under 16 without parental consent, they will delete it.
Why it helps: This clause protects children's privacy by explicitly stating that the service is not for those under 16 and committing to delete any personal information unknowingly collected from them without parental consent.
Our sites and online services are not intended for use by children under 16 years of age. If we learn that we have collected personal information from a child under 16 without the consent of the child’s parent or guardian as required by law, we will delete it.
Children, paragraph 1 · Citation strength: strong
Protection95% confidence
Right to Request Deletion of Personal Information
Users can ask the company to delete the personal information that has been collected from them.
Why it helps: This provides users with control over their data by allowing them to request the deletion of their personal information.
Deletion You can ask us to delete the Personal Information that we have collected from you.
State Law Privacy Rights, paragraph 4 · Citation strength: strong
Report an issue
Flag a citation problem, stale policy text, or incorrect company match.
Verbaterm boundaries
This public review is informational only and is not legal advice. Verbaterm shows only findings tied to the cited source snapshot above.