Privacy and GDPR Compliance Policy

Last Updated: April 03, 2026

Welcome to Kitchenflavormix (the “Site”), your trusted partner for culinary inspiration, recipe sharing, and ingredient recommendations. We value the privacy and security of the personal data you share with us, and we are committed to safeguarding that information in accordance with the General Data Protection Regulation (GDPR) and other applicable data‑protection laws. This policy explains what data we collect, why we collect it, how it is processed and protected, and the rights you have as a data subject under the GDPR.

1. Data We Collect

When you interact with Kitchenflavormix, we collect the following types of personal data:

• Email addresses: We gather your email address when you sign up for newsletters, create a recipe account, or request recipe downloads. This data allows us to communicate with you, deliver personalized content, and provide updates about new recipes and promotions.
• Cookies and web beacons: We use first‑party cookies and third‑party analytics cookies to record your browsing behaviour on the Site. This includes pages visited, time spent, and interactions with recipe content. Cookies help us improve usability, track site performance, and personalize content.
• Analytics data: We employ Google Analytics and similar tools to collect aggregated usage statistics. This data is anonymised and used solely for analytical purposes, such as understanding traffic patterns and improving the overall user experience.

2. Legal Basis for Processing

We process personal data on the following legal bases:

• Consent: For email subscriptions, newsletter sign‑ups, and any marketing communications, we rely on your explicit consent. You can withdraw this consent at any time by following the unsubscribe link in our emails or contacting us directly.
• Legitimate interest: For the purposes of improving the Site, providing personalized content, and ensuring the security of our services, we rely on our legitimate interests. We conduct a proportionality assessment to confirm that these interests do not override your rights and freedoms.

3. Your GDPR Rights

• Right to Access
• Right to Rectification
• Right to Erasure
• Right to Restrict Processing
• Right to Data Portability
• Right to Object
• Right to Withdraw Consent

Below you will find a concise explanation of each right:

1. Right to Access: You may request a copy of all personal data we hold about you, including the categories of data, the purposes of processing, and the recipients to whom the data has been disclosed.
2. Right to Rectification: If any personal data is inaccurate or incomplete, you can ask us to correct or update it.
3. Right to Erasure: Under certain conditions (e.g., data is no longer necessary, you withdraw consent, or you object to processing), you can request that we delete your personal data.
4. Right to Restrict Processing: If you contest the accuracy of the data or the legality of its processing, you may request that we suspend processing until the matter is resolved.
5. Right to Data Portability: You can obtain your personal data in a structured, commonly used format and transfer it to another controller.
6. Right to Object: You can object to processing for direct marketing purposes or based on legitimate interest. We will cease such processing unless we can demonstrate compelling legitimate grounds.
7. Right to Withdraw Consent: You may withdraw consent at any time, which does not affect the legality of any processing carried out before withdrawal.

4. How We Protect Your Data

Kitchenflavormix employs a multi‑layered security approach to protect your personal data:

• SSL/TLS encryption: All data transmitted between your browser and our servers is encrypted via HTTPS, ensuring that information such as email addresses cannot be intercepted.
• Secure servers: We host our services on industry‑standard, ISO‑27001 certified data centres with strict access controls, firewalls, and intrusion detection systems.
• Limited retention: Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. For example, email addresses are automatically deleted if you unsubscribe and we have no further legitimate interest.
• Regular audits and penetration testing: We conduct periodic security reviews to identify and remediate vulnerabilities, ensuring ongoing compliance with GDPR security obligations.

5. How to Exercise Your Rights

To exercise any of the rights listed above, please contact us at [email protected]. Include the following information in your request:

• Your full name and contact details.
• Specific data you wish to access, correct, delete, or object to.
• Any supporting documentation that verifies your identity (e.g., a copy of a government ID).

We will respond to your request within 30 days of receipt. If you need a faster resolution, please let us know the urgency, and we will make reasonable efforts to expedite the process. For complex requests, we may request additional information to confirm your identity and validate the request.

6. Response Time and Further Information

In accordance with GDPR Article 12, we commit to providing a written response to any data subject request within 30 days of the request being received. If additional time is required—such as for verifying identity or consulting with other departments—we will inform you of the delay and the new expected completion date.

We also provide the following resources to help you understand your rights:

• Official EU GDPR portal
• UK Information Commissioner’s Office (ICO)

7. Contact Information

For any questions, concerns, or requests regarding this policy, please contact us at:

Email: [email protected]

Address: Kitchenflavormix Ltd., 123 Flavor Street, Culinary City, UK.

Thank you for trusting Kitchenflavormix with your personal data. We are committed to protecting your privacy and ensuring that your rights are respected at all times.