GDPR Compliance Policy

Last Updated: April 03, 2026

Flavorkitchenflow (hereafter referred to as “we”, “our”, or “the Site”) is committed to protecting the privacy and personal data of all visitors and users in accordance with the General Data Protection Regulation (GDPR) and applicable UK and EU data protection laws. This policy explains what personal data we collect, how it is processed, and your rights as a data subject.

1. Data We Collect

When you interact with flavorkitchenflow.com, we may collect the following types of personal data:

Email addresses – provided when you subscribe to newsletters, create an account, or contact us.
Cookies and similar technologies – used to remember your preferences, analyze site usage, and deliver personalized content.
Analytics data – collected via third‑party tools such as Google Analytics to understand traffic patterns and improve our services.

2. How We Protect Your Data

We employ a range of technical and organisational measures to safeguard your personal data:

SSL/TLS encryption – all data transmitted between your browser and our servers is encrypted.
Secure servers – we host our infrastructure on reputable cloud providers with regular security audits.
Limited retention – personal data is stored only as long as necessary to fulfil the purposes for which it was collected. For example, email addresses are retained for the duration of your subscription or until you request deletion.
Access controls – only authorised staff with a legitimate need can access personal data, and they are bound by confidentiality obligations.

3. Legal Basis for Processing

We process personal data on the following legal bases:

Consent – when you voluntarily provide your email address or opt‑in to receive marketing communications.
Legitimate interest – when we use cookies and analytics to improve the functionality of the Site, enhance user experience, and optimise content. We conduct a legitimate interest assessment to ensure that our interests do not override your rights.

4. Your GDPR Rights

Under the GDPR, you have the following rights with respect to your personal data. Below each right is an icon for quick reference. If you wish to exercise any of these rights, please contact us at [email protected]. We will respond within 30 days of receiving your request.

Right to Access – You may request a copy of the personal data we hold about you, including the purposes of processing, categories of data, and recipients. We will provide a clear, concise summary in a commonly used format.

Right to Rectification – If any personal data is inaccurate or incomplete, you can ask us to correct it. We will update the data promptly and notify any third parties who have received the erroneous information.

Right to Erasure (Right to be Forgotten) – You can request the deletion of your personal data, provided no lawful obligation requires us to retain it. We will remove the data from all active systems and, where feasible, from backups.

Right to Restrict Processing – You may ask us to suspend the processing of your data. We will stop using the data except where we are legally required to continue, such as for contractual obligations or legal claims.

Right to Data Portability – You can obtain your personal data in a structured, commonly used, and machine‑readable format, and transfer it to another controller if you wish.

Right to Object – If we rely on legitimate interest or direct marketing, you can object to the processing of your data. Upon receiving your objection, we will stop processing the data for those purposes, unless we can demonstrate compelling legitimate grounds.

Right to Withdraw Consent – You may withdraw consent at any time. We will cease all processing based on that consent and will not use your data for the same purpose thereafter.

5. How to Exercise Your Rights

To exercise any of the rights listed above, please send an email to [email protected] with a clear description of your request. We may ask for proof of identity to confirm that the request is legitimate. Once we confirm your identity, we will:

Review the request to determine the appropriate action.
Respond within 30 days of receipt, unless the request is complex or requires additional time.
Provide the requested information, correction, deletion, or other action in a timely and secure manner.

6. Contact Information

If you have any questions about this policy, our data practices, or if you wish to lodge a complaint with a supervisory authority, please contact us:

Email: [email protected]
Address: Flavorkitchenflow Ltd, 123 Culinary Avenue, London, UK, W1J 9RF

7. Changes to This Policy

We reserve the right to update this policy from time to time. Any changes will be reflected on this page with a new “Last Updated” date. We encourage you to review this policy regularly to stay informed about how we protect your personal data.