GDPR Compliance Policy

Kitchenfoodspot (the “Site”) is committed to protecting the privacy and personal data of its users in accordance with the General Data Protection Regulation (GDPR) and related European data‑protection laws. This policy explains what personal data we collect, how we use it, the legal bases for processing, and your rights as a data subject.

1. Contact Information

If you have any questions about this policy, wish to exercise any of your rights, or wish to lodge a complaint, please contact our Data Protection Officer at:

Email: [email protected]

Last Updated: April 03, 2026

2. Types of Personal Data We Collect

Email addresses: When you sign up for newsletters, create an account, or request a recipe or cooking guide, we collect the email address you provide.
Cookies and similar technologies: We use cookies, web beacons, and other tracking technologies to collect data such as your IP address, browser type, operating system, and pages visited. This helps us personalise content and measure engagement.
Analytics data: We employ third‑party analytics services (e.g., Google Analytics) to gather aggregated usage statistics, including page views, session duration, and geographic location. These services may receive anonymised IP addresses and other non‑personal identifiers.

3. How We Protect Your Data

We implement technical and organisational measures to safeguard personal data against unauthorised access, loss, or damage:

All data transmitted to and from our servers is encrypted using TLS (HTTPS) to prevent interception.
Our hosting environment is maintained on secure, dedicated servers with regular patching and intrusion detection systems.
Access to personal data is restricted to authorised personnel who require it to perform their duties.
We retain personal data only for as long as necessary to fulfil the purposes listed in this policy or as required by law. After that, data is securely deleted or anonymised.

4. Legal Basis for Processing

We process personal data based on the following lawful bases:

Consent: When you sign up for newsletters or create an account, you explicitly consent to receive marketing communications and to the processing of your email address.
Legitimate Interest: We rely on legitimate interests to process cookies, analytics, and to personalise content on the Site. This interest is balanced against your privacy rights and is reviewed annually.

5. Your Rights Under the GDPR

As a data subject, you have the following rights. We are committed to responding to any request within 30 days of receipt.

Right to Access

You may request a copy of any personal data we hold about you. We will provide it in a commonly used, machine‑readable format.

Right to Rectification

If any of your personal data is inaccurate or incomplete, you can ask us to correct it. We will update our records promptly.

Right to Erasure

You may request the deletion of your personal data, subject to legal or contractual obligations that may prevent complete removal.

Right to Restrict Processing

You can ask us to limit the processing of your personal data, for example, while we investigate the accuracy of the information.

Right to Data Portability

We will provide your personal data in a structured, commonly used, and machine‑readable format, allowing you to transfer it to another controller.

Right to Object

At any time, you may object to the processing of your personal data for direct marketing purposes or profiling. We will cease such processing unless we can demonstrate compelling legitimate grounds.

Right to Withdraw Consent

Consent can be withdrawn at any time. This will not affect the lawfulness of any processing carried out before withdrawal.

6. How to Exercise Your Rights

To exercise any of the rights above, please contact us at [email protected] with a brief description of your request. If you prefer, you can submit a request via the contact form on the Site, indicating the specific right you wish to exercise. For security, we may request verification of your identity before processing your request.

7. Response Time

We aim to respond to all legitimate requests within 30 days of receipt. If we need additional information, we will contact you within that period to clarify the request. If we cannot comply with your request, we will provide a clear explanation and the reason for the denial.

8. Retention of Personal Data

Personal data is retained for the duration necessary to fulfil the purposes for which it was collected or as required by law. Email addresses are kept for the life of your account or until you unsubscribe. Cookies and analytics data are retained for a maximum of 12 months, after which they are automatically deleted.

9. Changes to This Policy

We reserve the right to update this policy from time to time. Updated versions will be posted on the Site and will be effective immediately upon publication. Your continued use of the Site constitutes acceptance of any changes.

10. Contact Us

If you have any concerns about how we handle your personal data, or if you believe we are not complying with GDPR, you may file a complaint with the relevant supervisory authority in your jurisdiction.