GDPR Compliance Policy

Last Updated: April 03, 2026

1. Introduction

foodkitchenflow (hereafter “we”, “us”, or “our”) is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018. This policy explains what personal data we collect, how we use it, the legal bases for processing, and your rights as a data subject. By using our website (https://foodkitchenflow.com) you consent to the practices described below.

2. What Personal Data We Collect

We collect the following types of personal data:

Email addresses: When you subscribe to our newsletter, register for an account, or contact us via the contact form.
Cookies and tracking information: We use first‑party and third‑party cookies to remember your preferences, analyze site usage, and improve our services. Cookies may include session identifiers, language settings, and analytics data.
Analytics data: We use Google Analytics and Matomo to collect anonymized data on page views, traffic sources, and user interactions. This information is used solely to improve website performance and user experience.

3. How We Protect Your Data

We employ a range of technical and organisational measures to safeguard your personal data:

SSL/TLS encryption: All data transmitted between your browser and our servers is encrypted using HTTPS.
Secure servers: Our hosting environment is protected by firewalls, intrusion detection systems, and regular vulnerability scans.
Access controls: Only authorised personnel with a legitimate business need can access personal data. All staff undergo GDPR training.
Limited retention: Personal data is retained only for as long as necessary to fulfil the purpose for which it was collected or to comply with legal obligations. Typical retention periods are:
- Email addresses: 5 years after the last interaction.
- Cookies: 6 months for session cookies, 1 year for persistent cookies.
- Analytics data: 6 months, anonymised and aggregated.

4. Legal Basis for Processing

We process personal data on the following legal bases:

Consent: For newsletter subscription, account creation, and certain marketing communications. Consent is freely given, specific, informed, and unambiguous.
Legitimate interest: For improving website performance, analysing usage patterns, and ensuring the security of our services. We conduct a legitimate interest assessment and provide you with the option to opt out of non‑essential tracking.

5. Your GDPR Rights

Under the GDPR you have the following rights with respect to your personal data. Each right is illustrated with a Bootstrap 5 icon for quick reference.

Right to Access

You may request a copy of the personal data we hold about you. This includes details such as the categories of data, the purposes of processing, and the recipients of your data.

Right to Rectification

If any of your personal data is inaccurate or incomplete, you can ask us to correct or complete it promptly.

Right to Erasure

Also known as the “right to be forgotten”. You may request the deletion of your personal data, provided there is no legal obligation to retain it.

Right to Restrict Processing

You can request that we suspend the processing of your data, for example while we verify its accuracy or if you contest its legality.

Right to Data Portability

You may obtain your personal data in a structured, commonly used, and machine‑readable format, and request that we transfer it to another controller if feasible.

Right to Object

You can object to the processing of your data for direct marketing, profiling, or other purposes, and we will stop processing unless we can demonstrate compelling legitimate grounds.

Right to Withdraw Consent

If you have given us consent to process your data, you can withdraw that consent at any time. Withdrawal will not affect the lawfulness of any processing carried out before the withdrawal.

6. How to Exercise Your Rights

To exercise any of the rights above, please contact us at [email protected]. Include the following details in your request:

Your full name and any identifying details (e.g., email address, account number).
A clear statement of the right you wish to exercise.
Any supporting documentation that confirms your identity (e.g., a scanned copy of a passport or driver’s licence).

We will respond to your request within 30 calendar days, as required by the GDPR. If you need a more urgent response, please indicate the reason for urgency in your email and we will consider expediting the process.

7. Contact Information

For any questions, concerns, or complaints about our data processing activities, or if you believe we have breached your data protection rights, you may contact our Data Protection Officer:

foodkitchenflow Data Protection Officer
Email: [email protected]

8. Changes to This Policy

We reserve the right to modify this GDPR Compliance Policy at any time. Any changes will be posted on this page with a new “Last Updated” date. We encourage you to review this policy regularly to stay informed about how we handle your personal data.