Privacy & GDPR Compliance Policy

At Kitchenflavorflow, we value your privacy and are committed to protecting the personal data you share with us. This policy explains how we collect, use, store, and share your information in accordance with the General Data Protection Regulation (GDPR) and other applicable privacy laws.

Last Updated: April 03, 2026

1. Who We Are

Kitchenflavorflow (the “Company”) operates the website kitchenflavorflow.com. We are based in the United Kingdom and our primary contact for GDPR matters is [email protected].

2. What Data We Collect

We collect the following types of personal data:

Email addresses: When you subscribe to our newsletter, request a recipe, or sign up for special promotions.
Cookies & Similar Technologies: We use first‑party cookies to maintain session state, remember your preferences, and track your interactions for analytics purposes.
Analytics Data: We employ Google Analytics and similar tools to understand how visitors use our site. This data includes IP addresses, device information, and browsing behaviour.

3. How We Protect Your Data

We implement industry‑standard security measures to safeguard your personal information:

SSL/TLS Encryption: All data transmitted between your browser and our servers is encrypted using HTTPS.
Secure Servers: Our hosting environment is hosted on secure, monitored servers with firewalls and intrusion detection.
Access Controls: Only authorized staff with a legitimate business need have access to personal data, and all access is logged.
Data Minimisation & Limited Retention: We retain data only for as long as necessary to fulfil the purposes for which it was collected or to comply with legal obligations. Email addresses are kept for 12 months after the last interaction, analytics data for 6 months, and cookies are deleted after the session ends.

4. Legal Basis for Processing

We process your personal data on the following lawful bases:

Consent: For marketing communications and the use of non-essential cookies.
Legitimate Interest: To improve our services, analyze traffic, and provide a personalised user experience. We conduct a legitimate interest assessment to ensure that our interests do not override your rights.

5. Your GDPR Rights

You have the following rights under the GDPR. We are committed to respecting these rights and providing a clear process for you to exercise them.

Right to Access

You can request a copy of all personal data we hold about you, including the purposes for which it is processed and any third parties we share it with.

Right to Rectification

If you find that any of your personal data is inaccurate or incomplete, you may request that we correct it.

Right to Erasure

You may ask us to delete your personal data, provided there is no legal obligation to retain it.

Right to Restrict Processing

In certain circumstances, you can request that we limit the processing of your data—for example, if you contest its accuracy.

Right to Data Portability

You can receive your personal data in a structured, commonly used format and transfer it to another controller.

Right to Object

You can object to the processing of your data for direct marketing or profiling purposes.

Right to Withdraw Consent

At any time, you may withdraw consent for any processing that relies on your permission. This will not affect the lawfulness of any processing carried out before withdrawal.

6. How to Exercise Your Rights

To exercise any of the rights above, please contact us at [email protected] with a brief description of your request. For security reasons, we may ask you to provide proof of identity (e.g., a scanned copy of a passport or driver’s licence). Once we receive your request, we will acknowledge it within 5 business days and respond within 30 days, as required by GDPR.

7. Contact Information

If you have any questions, concerns, or complaints about how we handle your personal data, you can reach out to us:

Email: [email protected]
Postal Address: Kitchenflavorflow, 1 Culinary Way, London, UK, EC1A 1AA

8. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes, we will notify you by posting a notice on our website and, where appropriate, by email.

By continuing to use our website, you acknowledge that you have read, understood, and agreed to the terms outlined in this GDPR Compliance Policy.