Foodkitchencraft GDPR Compliance Policy

At Foodkitchencraft (the “Company”), we are committed to protecting the privacy and personal data of our visitors and customers. This policy explains how we collect, use, store, and safeguard your data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR). By using our website (foodkitchencraft.com), you consent to the practices described herein.

Last Updated: April 03, 2026

1. What Data We Collect

Email addresses – collected when you subscribe to our newsletter, place an order, or contact us via the website.
Cookies & similar technologies – used to remember your preferences, track session activity, and improve site functionality.
Analytics data – gathered through Google Analytics and other third‑party tools to understand traffic patterns, page views, and user engagement.

2. How We Protect Your Data

We employ a range of technical and organisational measures to safeguard your personal information:

SSL/TLS encryption (HTTPS) for all data transmitted between your browser and our servers.
Secure, fire‑walled servers hosted in EU‑approved data centres.
Regular vulnerability assessments and penetration testing.
Strict access controls – only authorised personnel can view or handle personal data.
Retention policy – data is kept only as long as necessary for the purposes for which it was collected, after which it is securely deleted.

3. Legal Basis for Processing

We process your personal data under the following lawful bases:

Consent – when you voluntarily provide your email or other data and explicitly agree to how we use it (e.g., for newsletters or marketing).
Legitimate interest – to operate our business effectively, such as improving website performance, analysing traffic, and ensuring security.

4. Your GDPR Rights

Under the GDPR, you have the following rights with respect to your personal data. For each right, we provide a brief explanation and the icon that represents it.

Right to Access

Request a copy of the personal data we hold about you, including the purposes of processing, the categories of data, and the recipients.

Right to Rectification

Ask us to correct any inaccurate or incomplete information we hold about you.

Right to Erasure

Request deletion of your personal data when it is no longer necessary or if you withdraw consent.

Right to Restrict Processing

Ask us to limit the use of your data while we investigate its accuracy or you contest its validity.

Right to Data Portability

Obtain your personal data in a structured, commonly used format for transfer to another controller.

Right to Object

Oppose processing of your data for direct marketing or profiling purposes.

Right to Withdraw Consent

Revoke consent at any time, which will stop further processing based on that consent.

5. How to Exercise Your Rights

If you wish to exercise any of the rights above, please contact our Data Protection Officer at [email protected]. In your request, provide:

Your full name and contact details.
A clear description of the request (e.g., “I request all personal data stored about me”).
Any relevant identifiers (e.g., email address, order number) to help us locate your records.

We will respond to your request within 30 calendar days of receipt. If you need a more detailed explanation of how we process your data or have concerns about the adequacy of our safeguards, we encourage you to reach out for a thorough review.

6. Data Retention and Deletion

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected. Typical retention periods are:

Order and transaction data – up to 7 years for tax and accounting purposes.
Newsletter subscriptions – until you unsubscribe or request deletion.
Analytics data – aggregated and anonymised; individual-level data is deleted within 30 days.

Upon deletion, all personal data is permanently removed from our active databases and backups, except where legal obligations require retention.

7. Cookie Management

We use first‑party cookies to remember your preferences and session data. Third‑party cookies are used for analytics and advertising. You can manage cookie preferences via the banner that appears on your first visit, or by using the Cookiebot tool. To opt‑out of non‑essential cookies, simply adjust your browser settings or use the provided opt‑out links.

8. Security Breach Notification

In the unlikely event of a data breach that compromises the confidentiality, integrity, or availability of personal data, we will notify the relevant supervisory authority within 72 hours and, where appropriate, inform affected individuals. Our incident response team will conduct a thorough investigation and implement remedial measures to prevent recurrence.

9. Contact Information

If you have any questions, concerns, or wish to lodge a complaint, please contact:

Foodkitchencraft Data Protection Officer
Email: [email protected]
Website: foodkitchencraft.com

This policy may be updated from time to time. We will notify you of any significant changes by updating the “Last Updated” date and, where appropriate, providing a summary of the changes. Thank you for trusting Foodkitchencraft with your personal data.