General Data Protection Regulation (GDPR) Compliance Policy

Kitchenfoodcenter (the “Site”) is committed to protecting the privacy and personal data of all users, customers, and visitors. This policy explains how we collect, use, store, and safeguard your data in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679) and the UK Data Protection Act 2018. Please read it carefully to understand your rights and how you can exercise them.

1. Personal Data We Collect

We collect the following categories of personal data when you interact with the Site:

• Email addresses – used for account registration, newsletter subscriptions, order confirmations, and customer support.
• Cookies and similar technologies – used to personalize content, analyze traffic, and improve user experience.
• Analytics data – collected through third‑party services (e.g., Google Analytics) to understand how the Site is used and to optimize our services.

2. How We Protect Your Data

We employ industry‑standard security measures to safeguard your personal data:

• SSL/TLS encryption – all data transmitted between your browser and our servers is encrypted using HTTPS.
• Secure servers – we host our data on secure, access‑controlled servers that are regularly audited.
• Limited data retention – personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, or as required by law.

3. Legal Basis for Processing

We process your personal data on the following legal bases:

• Consent – for activities such as newsletter subscriptions and marketing communications. Consent is freely given, specific, informed, and unambiguous.
• Legitimate interest – for improving the Site, analyzing traffic, and ensuring security. We conduct a balancing test to confirm that our legitimate interests do not override your privacy rights.

4. Your GDPR Rights

Under the GDPR, you have the following rights with respect to your personal data. We provide clear procedures for exercising each right.

Right to Access

You may request a copy of the personal data we hold about you, including the purposes of processing and any third parties to whom the data has been disclosed.

Right to Rectification

If any personal data is inaccurate or incomplete, you can request that we correct it promptly.

Right to Erasure

You may ask us to delete your personal data, subject to legal obligations or legitimate interests that require retention.

Right to Restrict Processing

You can request that we limit the use of your data—for example, if you contest its accuracy or if we are no longer allowed to process it.

Right to Data Portability

You may receive your personal data in a structured, commonly used format and have it transferred to another controller, where technically feasible.

Right to Object

You can object to the processing of your data for direct marketing or profiling purposes. We will cease processing unless we can demonstrate compelling legitimate grounds.

Right to Withdraw Consent

If you have given consent for processing, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing based on consent before withdrawal.

5. How to Exercise Your Rights

To exercise any of the rights above, please contact us via email at [email protected]. Provide a clear statement of your request and any supporting information that can help us identify your data. For example, include your full name, email address, and any relevant order numbers.

Response Time

We will respond to your request within 30 calendar days from the date we receive it. If we need more time, we will inform you of the reasons and a revised deadline.

6. Data Retention and Deletion

Personal data is retained for the period necessary to fulfill the purposes described in this policy or as required by applicable law. Once the retention period expires, we securely delete or anonymise the data.

7. Contact Information

If you have any questions, concerns, or complaints about our data practices, please contact our Data Protection Officer at [email protected] or use the contact form on the Site.

8. Updates to This Policy

We may update this GDPR Compliance Policy from time to time. The “Last Updated” date at the top of this page reflects the most recent revision. We will notify users of any material changes by posting a notice on the Site or by sending an email where appropriate.

Last Updated: April 03, 2026