GDPR Compliance Policy

Site: Kitchenmealcraft
Contact: [email protected]
Last Updated: April 03, 2026

1. What Personal Data We Collect

Kitchenmealcraft collects only the personal data that is necessary to provide, improve, and secure our services. The types of data we collect include:

Email addresses: used for newsletter subscriptions, order confirmations, and customer support.
Cookies and similar tracking technologies: used to analyse user behaviour, personalise content, and measure marketing effectiveness.
Analytics data: aggregated and anonymised data collected through Google Analytics and similar tools to monitor traffic patterns and optimise the website.

2. How We Protect Your Data

We employ industry‑standard technical and organisational measures to safeguard your personal data:

All data transfers use HTTPS/SSL encryption to protect against interception.
Data is stored on secure, access‑controlled servers located in the European Economic Area.
We implement role‑based access controls and multi‑factor authentication for all staff who handle personal data.
Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, after which it is securely deleted or anonymised.

3. Legal Basis for Processing

We process personal data only on a lawful basis as defined by the General Data Protection Regulation (GDPR). The primary legal bases are:

Consent: where you explicitly agree to receive marketing communications or to use cookies.
Legitimate interest: where the processing is necessary for our legitimate business interests, such as improving website performance, ensuring security, and providing customer support, and where your fundamental rights do not override those interests.

4. Your GDPR Rights

Right to Access

You have the right to obtain confirmation that we are processing your personal data, and if so, to receive a copy of the data, the purposes of the processing, the categories of data, the recipients, and the period of storage.

Right to Rectification

You may request correction of any inaccurate or incomplete personal data we hold about you.

Right to Erasure (Right to be Forgotten)

You can ask us to delete your personal data where no legal obligation requires us to keep it.

Right to Restrict Processing

You may request that we limit the processing of your data while we verify its accuracy or assess our liability.

Right to Data Portability

You can receive your personal data in a structured, commonly used format and transfer it to another controller.

Right to Object

You can object to the processing of your data for direct marketing, profiling, or processing based on legitimate interest.

Right to Withdraw Consent

If we process your data based on consent, you can withdraw that consent at any time, and we will stop processing your data unless another legal basis applies.

5. How to Exercise Your Rights

To exercise any of the rights listed above, please contact us at [email protected]. Include a brief description of the request and any relevant identifying information (e.g., your email address or order number). We will:

Verify your identity to protect your privacy.
Respond to your request within 30 days, as required by the GDPR.
Provide the requested information or action, or explain if we cannot comply and the legal basis for the refusal.

6. Contact and Complaints

If you believe your rights are not being respected, you may lodge a complaint with the European Data Protection Board or your national supervisory authority. For general inquiries, use the contact details above.

7. Policy Updates

This GDPR Compliance Policy may be updated from time to time. We will notify users of any material changes by posting a notice on our website and, where appropriate, sending a direct email. The last update date above reflects the most recent revision.