GDPR Compliance Policy

Kitchencookworld (the “Company”) respects your privacy and is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and related data‑protection laws. This policy explains the types of data we collect, how we use it, the legal basis for processing, and your rights as a data subject.

1. Data We Collect

We collect the following personal data when you interact with our website (kitchencookworld.com):

Email addresses: Collected when you sign up for newsletters, create an account, or contact us via the “Contact Us” form.
Cookies: We use first‑party cookies to store session information, remember your language preference, and provide a personalized browsing experience.
Web analytics: We employ Google Analytics and Matomo to collect anonymous usage data such as page views, time on site, and referral sources. This data is aggregated and does not identify you personally.

2. How We Protect Your Data

We implement technical and organisational measures to safeguard your personal data:

SSL/TLS Encryption: All data transmitted between your browser and our servers is encrypted using HTTPS.
Secure Servers: We host our website on reputable, industry‑standard cloud servers with regular security patches and intrusion detection.
Access Controls: Only authorised employees with a legitimate need can access personal data. Access is logged and monitored.
Data Minimisation and Retention: We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Email addresses are deleted after 12 months of inactivity, cookies are cleared after 30 days, and analytics data is retained for 2 years.

3. Legal Basis for Processing

We process your personal data under the following lawful bases:

Consent: When you voluntarily provide your email address or opt‑in to marketing communications, you give us explicit consent.
Legitimate Interest: We process analytics data and manage website functionality to improve user experience and maintain site performance, which constitutes a legitimate interest.

4. Your GDPR Rights

Under the GDPR, you have the following rights with respect to your personal data. We are committed to responding to any request within 30 days.

Right to Access

You have the right to request a copy of the personal data we hold about you, including the source of the data, the purposes of processing, and the recipients of the data.

Right to Rectification

If any of your personal data is inaccurate or incomplete, you may ask us to correct it. We will update or amend the data promptly.

Right to Erasure

You can request the deletion of your personal data, subject to legal or contractual obligations that require retention.

Right to Restrict Processing

You may request that we limit the processing of your data, for example, while we verify its accuracy.

Right to Data Portability

You can receive the personal data we hold about you in a structured, commonly used format and transfer it to another controller.

Right to Object

You may object to the processing of your personal data for direct marketing or profiling purposes.

Right to Withdraw Consent

You can withdraw consent at any time. We will cease processing your data for the purpose it was originally granted.

5. How to Exercise Your Rights

To exercise any of the rights above, please contact us at [email protected] with the following information:

Your full name and contact details.
A clear description of the request (e.g., “I wish to access all personal data we hold about me”).
Proof of identity if required (e.g., a scanned copy of a government ID).

We will acknowledge receipt of your request and respond within 30 days. If the request is complex or we need additional information, we may extend the response time but will keep you informed throughout the process.

6. Data Retention and Deletion

We retain personal data only as long as necessary to fulfil the purposes for which it was collected, or as required by law. After the retention period expires, we securely delete or anonymise the data. Email addresses are deleted after 12 months of inactivity unless you have opted for ongoing marketing communications. Cookie data is automatically cleared after 30 days unless you manually delete it from your browser.

7. Changes to This Policy

We may update this policy from time to time to reflect changes in legal requirements or our data processing practices. Any material changes will be posted on our website and the “Last Updated” date will be revised accordingly.

Last Updated: April 03, 2026