GDPR Compliance Policy

Last Updated: April 03, 2026

1. Introduction

KitchenMora (the “Company”, “we”, “our”, or “us”) respects the privacy of the individuals who visit our website kitchenmora.com and who provide us with personal data. This GDPR Compliance Policy explains how we collect, use, protect, and share your personal data in accordance with the European Union’s General Data Protection Regulation (GDPR) and applicable data‑protection laws. If you have any questions or concerns, please contact us at [email protected].

2. What Personal Data We Collect

We collect the following categories of personal data when you interact with our website:

• Email addresses: When you sign up for newsletters, create an account, or make an enquiry.
• Cookies and similar tracking technologies: We use first‑party cookies to remember your preferences and session information, and third‑party cookies for analytics and advertising purposes.
• Analytics data: We use Google Analytics and similar tools to collect anonymous usage data such as page views, time on site, and referral sources.

3. How We Use Your Data

The purposes for which we process your personal data are:

• Providing and improving our services: Delivering newsletters, processing orders, and responding to enquiries.
• Marketing and communications: Sending you promotional offers and updates, subject to your consent.
• Analytics: Understanding user behaviour to optimise the website and user experience.

4. Legal Basis for Processing

We process personal data under the following lawful bases:

• Consent: You have explicitly opted in to receive marketing communications or newsletters.
• Legitimate interest: We process data to maintain the security of our services, prevent fraud, and improve user experience. This basis is balanced against your privacy rights and is reviewed regularly.
• Contractual necessity: When you place an order, we process your data to fulfil the contract and deliver the product.

5. Data Protection Measures

We employ a range of technical and organisational safeguards to protect your personal data:

• SSL/TLS encryption: All data transmitted between your browser and our servers is encrypted using industry‑standard TLS 1.3.
• Secure servers: Our hosting environment is protected by firewalls, intrusion detection, and regular vulnerability assessments.
• Access controls: Only authorised personnel with a legitimate business need can access personal data. All staff undergo privacy training.
• Limited retention: Personal data is retained only for as long as necessary to fulfil the purposes outlined in this policy or as required by law. Afterward, data is securely deleted or anonymised.

6. Your GDPR Rights

Under the GDPR, you have the following rights regarding your personal data. To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days, unless a more complex request requires additional time, in which case we will inform you of the delay and provide an updated timeframe.

Right to Access

You may request a copy of the personal data we hold about you, along with details of how it is processed, the purposes of processing, and the recipients of your data. We will provide a concise, intelligible summary of the information we hold and how it is used.

Right to Rectification

If you discover that any of your personal data is inaccurate or incomplete, you may request that we correct it. We will review the request promptly and update the data accordingly.

Right to Erasure

You can request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or if you withdraw consent and there is no other legal basis for processing. We will delete or anonymise the data in a timely manner, unless we are required to retain it for legal or compliance reasons.

Right to Restrict Processing

If you contest the accuracy of your data or request a temporary halt to processing for legitimate reasons, we may restrict processing of your data. During the restriction period, we will only store the data for the purpose of resolving the dispute or complying with legal obligations.

Right to Data Portability

You may receive the personal data you provided to us in a structured, commonly used, and machine‑readable format, and you may transfer it to another controller. We will provide the data in a format that allows seamless migration, such as CSV or JSON.

Right to Object

You have the right to object to the processing of your data for direct marketing or profiling purposes. Upon receiving your objection, we will cease processing your data for those purposes unless we can demonstrate compelling legitimate grounds that override your interests.

Right to Withdraw Consent

If we rely on your consent to process your data, you may withdraw it at any time. Withdrawal of consent does not affect the legality of processing carried out before the withdrawal. Once consent is withdrawn, we will stop processing your data for the purposes that required consent and will delete it where no other lawful basis applies.

7. How to Exercise Your Rights

To exercise any of the rights above, please send an email to [email protected] with the subject line “GDPR Request – [Your Name]” and specify the right you wish to exercise. Include a brief description of the request and, if applicable, any supporting documentation. We will verify your identity to protect your privacy and respond within 30 days, as required by GDPR.

8. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or legal requirements. Any revisions will be posted on this page with a new “Last Updated” date. We encourage you to review this policy periodically to stay informed about how we protect your personal data.

9. Contact Information

If you have any questions about this policy, our data‑processing practices, or wish to lodge a complaint with a supervisory authority, please contact us at:

• Address: KitchenMora, 123 Culinary Lane, Food City, FC 45678
• Email: [email protected]
• Phone: +1 (555) 123‑4567