GDPR Compliance Policy

Last Updated: April 03, 2026

Welcome to flavoryumkitchen.com (“we”, “our”, “us”). This policy explains how we collect, use, store, and protect the personal data of users of our website in full compliance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. By accessing or using our site you agree to the terms set out below.

1. Types of Personal Data We Collect

Email addresses: Collected when you sign up for newsletters, create an account, or contact us.
Cookies and Similar Technologies: We place small data files on your device to remember your preferences, improve site navigation, and analyze traffic.
Analytics Data: We use third‑party analytics services (e.g., Google Analytics) to collect information such as IP address, browser type, and pages visited. This data is aggregated and anonymised where possible.

2. Legal Basis for Processing Personal Data

Our processing activities are based on the following lawful bases:

Consent: Where we ask for your explicit permission (e.g., newsletter subscription). You may withdraw consent at any time.
Legitimate Interest: We process data necessary for the operation of our website, improving user experience, and ensuring security. We conduct a proportionality assessment to balance our interests against your privacy rights.

3. How We Protect Your Personal Data

SSL Encryption: All data transmitted between your browser and our servers is protected by TLS 1.3 encryption.
Secure Servers: We host our website on industry‑standard secure servers with regular penetration testing, firewalls, and intrusion detection systems.
Limited Retention: Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected (e.g., email addresses are kept for the duration of your subscription or until you unsubscribe).
Access Controls: Only authorized staff with a legitimate need can access personal data. All staff are trained on data protection best practices.

4. Your GDPR Rights

Under the GDPR you have a number of rights regarding your personal data. Below we describe each right, provide an icon for visual reference, and explain how you can exercise it.

Right to Access

You may request a copy of the personal data we hold about you. We will provide you with the data in a commonly used format within 30 days.

Right to Rectification

If any of your personal data is inaccurate or incomplete, you can ask us to correct it. We will make the necessary adjustments promptly.

Right to Erasure

You can request the deletion of your personal data, subject to legal obligations. We will delete or anonymise your data within 30 days.

Right to Restrict Processing

Under certain circumstances, you can ask us to limit how we use your data (e.g., while we verify its accuracy). We will comply within 30 days.

Right to Data Portability

You can receive your personal data in a structured, machine‑readable format and transfer it to another controller.

Right to Object

You may object to the processing of your data for direct marketing or profiling purposes. We will stop processing unless we can demonstrate compelling legitimate grounds.

Right to Withdraw Consent

At any time you can withdraw consent for any processing activity that relies on your agreement. The withdrawal will not affect the lawfulness of any processing carried out before the withdrawal.

5. How to Exercise Your Rights

To exercise any of the rights above, please contact us at:

Email: [email protected]

When you contact us, please provide:

Your full name and contact details.
A clear statement of the request (e.g., “I would like to exercise my right to rectification for my email address”).
Any supporting documentation that may help us verify your identity (e.g., a copy of a passport or driver’s licence).

We will acknowledge receipt of your request within 5 business days and will respond within 30 days, as required by the GDPR. If we need more time, we will inform you of the reasons and the new expected completion date.

6. Contact Information

For any questions, concerns, or complaints about our data processing practices, you may reach out to:

GDPR Officer
flavoryumkitchen
Email: [email protected]

7. Amendments to This Policy

We may update this policy from time to time. Any changes will be posted on this page with an updated “Last Updated” date. We encourage you to review this policy periodically to stay informed about how we protect your personal data.