GDPR Compliance Policy

Last Updated: April 03, 2026

1. Introduction

Kitchenflavorcenter (“we”, “our”, or “us”) is committed to protecting the privacy and personal data of our website visitors, newsletter subscribers, and customers. This GDPR Compliance Policy explains how we collect, use, store, and protect your personal information in accordance with the European Union General Data Protection Regulation (EU GDPR) 2016/679. By accessing or using kitchenflavorcenter.com, you acknowledge that you have read, understood, and agree to the terms outlined below.

2. Data We Collect

The personal data we collect is limited to information that is necessary to provide a seamless user experience, improve our services, and comply with legal obligations. Our primary data categories are:

Email addresses – collected when you sign up for newsletters, create an account, or place an order.
Cookies and similar technologies – used to remember your preferences, track site usage, and analyze traffic patterns.
Analytics data – gathered through Google Analytics and Matomo to understand visitor behaviour and optimise content.

3. Legal Basis for Processing

We rely on the following lawful bases for processing your personal data:

Consent – for marketing communications and optional newsletter subscriptions. You can withdraw consent at any time by clicking the unsubscribe link or contacting us.
Legitimate Interest – to improve our website, deliver personalised content, and ensure the security of our services. We conduct a proportionality assessment to ensure that our interests do not override your rights.
Contractual Necessity – for order fulfilment, customer support, and billing purposes when you become a customer.
Legal Obligation – to retain records for tax and regulatory compliance.

4. Data Protection Measures

We employ a range of technical and organisational measures to safeguard your data:

SSL Encryption – all data transmitted between your browser and our servers is encrypted using TLS 1.3.
Secure Servers – hosted on ISO 27001‑certified data centres with regular penetration testing and vulnerability assessments.
Access Controls – data is only accessible to authorised staff who require it for legitimate business purposes. All staff undergo GDPR training and sign confidentiality agreements.
Retention Limits – personal data is stored only as long as necessary. Email addresses are kept for 12 months after the last interaction unless you opt‑in to a longer retention period. Analytics and cookie data are automatically deleted after 30 days.
Back‑ups and Disaster Recovery – regular encrypted backups are performed, and a disaster‑recovery plan is in place to ensure data availability.

5. Your GDPR Rights

Under the GDPR, you have the following rights regarding your personal data. Each right is illustrated with a Bootstrap icon for quick reference.

Right to Access

You may request a copy of all personal data we hold about you, including the source, purpose, and recipients. We will provide a summary in a readable format within 30 days.

Right to Rectification

If any of your personal data is inaccurate or incomplete, you can request corrections. We will update your data promptly, typically within 10 business days.

Right to Erasure

Also known as the “right to be forgotten”, you may request the deletion of your personal data unless we have a legal obligation to retain it. We will delete or anonymise your data within 30 days, subject to applicable laws.

Right to Restrict Processing

You can request that we limit the processing of your data (e.g., for verification purposes). We will comply within 30 days, provided the restriction is justified.

Right to Data Portability

You can obtain your data in a structured, commonly used, machine‑readable format and transfer it to another controller. We will provide the data in a CSV or JSON file within 30 days of your request.

Right to Object

You may object to the processing of your data for direct marketing or profiling. Upon objection, we will cease processing and inform you of any legal grounds for continued processing.

Right to Withdraw Consent

You can withdraw consent at any time. Withdrawal will not affect the legality of processing based on other bases. We will stop processing your data and confirm withdrawal within 30 days.

6. How to Exercise Your Rights

To exercise any of the rights above, please contact us at [email protected]. When you send your request, kindly include the following details to help us process it efficiently:

Your full name and contact information.
A description of the request (e.g., “I want to delete my email address”).
Any relevant identifiers (e.g., order number, account ID).

We will respond within 30 calendar days. If we need additional information to verify your identity, we may request further documentation. If you are unsatisfied with our response, you have the right to lodge a complaint with the supervisory authority in your country or seek legal redress.

7. Contact Information

For any questions, concerns, or data protection requests, please reach out:

Kitchenflavorcenter
GDPR Compliance Officer
Email: [email protected]
Website: kitchenflavorcenter.com