GDPR Compliance Policy – FlavorPlate Kitchen

Last Updated: April 03, 2026

1. Introduction

FlavorPlate Kitchen (“we”, “our”, “us”) is committed to protecting the privacy and personal data of the individuals who visit our website flavorplatekitchen.com (the “Site”). This GDPR Compliance Policy explains how we collect, use, store, and share personal data in accordance with the General Data Protection Regulation (GDPR) (EU Regulation 2016/679) and other applicable data‑protection laws. By using the Site, you acknowledge that you have read, understood, and agree to the terms set out below.

2. Personal Data We Collect

We collect the following types of personal data when you interact with the Site:

Email addresses – when you subscribe to our newsletter, request recipes, or contact us.
Cookies and similar tracking technologies – to remember your preferences, analyze traffic, and personalize content.
Analytics data – aggregated and anonymized information about how visitors use the Site, gathered through services such as Google Analytics and Matomo.

3. Legal Basis for Processing

We rely on the following legal bases to process your personal data:

Consent – for email subscriptions, newsletters, and the use of certain cookies.
Legitimate interest – for analytics, improving user experience, and marketing communications that are relevant to our culinary community.

4. Data Protection Measures

To safeguard your personal data, we employ a range of technical and organizational measures:

Transport Layer Security (TLS/SSL) to encrypt data transmitted between your browser and our servers.
Secure, access‑controlled servers located in the European Economic Area.
Regular security audits and penetration testing.
Limited data retention periods: email addresses are kept for 12 months after the last interaction, analytics data is stored for 6 months, and cookies are deleted after their defined lifespan.

5. Your GDPR Rights

You have the following rights under the GDPR. Below, each right is explained and accompanied by an icon for quick reference.

Right to Access

Request a copy of the personal data we hold about you, including the purpose of processing and the categories of data.

Right to Rectification

Ask us to correct any inaccurate or incomplete personal data.

Right to Erasure (Right to be Forgotten)

Request deletion of your personal data where no lawful basis for its retention exists.

Right to Restrict Processing

Ask us to limit the processing of your data while we verify its accuracy or assess the necessity of its use.

Right to Data Portability

Receive your personal data in a structured, commonly used, and machine‑readable format.

Right to Object

Object to processing of your data for direct marketing or profiling purposes.

Right to Withdraw Consent

Withdraw consent at any time, without affecting the legality of processing based on other grounds.

6. How to Exercise Your Rights

To exercise any of the rights listed above, please contact us at:

FlavorPlate Kitchen – Data Protection Officer
Email: [email protected]

When you send a request, provide enough information for us to verify your identity and locate the relevant data. This may include:

Your full name and email address used on the Site.
Any additional details that help us identify your records (e.g., subscription date, order number).

We will respond to your request within 30 days, as required by the GDPR. If the request is complex or requires additional time, we will inform you of the extension and the reasons for it.

7. Data Retention and Deletion

We retain personal data only as long as necessary for the purposes for which it was collected or to comply with legal obligations. Typical retention periods are:

Email addresses: 12 months after the last interaction.
Analytics data: 6 months (aggregated and anonymized).
Cookies: as defined by their expiration date (e.g., session cookies, 30‑day persistent cookies).

Upon request, we will securely delete or anonymize your data in accordance with the right to erasure, except where we have a legal obligation to retain it.

8. Third‑Party Sharing

We do not sell or rent your personal data to third parties. We may share data with:

Service providers (e.g., email marketing platforms, analytics providers) under strict contractual agreements that require them to implement appropriate safeguards.
Legal authorities when required by law or to protect our rights.

9. Cookie Consent and Management

The Site uses essential cookies for functionality and optional cookies for analytics and marketing. You can manage cookie preferences via the cookie banner or by adjusting your browser settings. For more detailed information, see our Cookie Policy.

10. Updates to This Policy

We may update this GDPR Compliance Policy from time to time. Any changes will be posted on the Site with a revised “Last Updated” date. We encourage you to review this policy periodically to stay informed about how we handle your personal data.

11. Contact Us

For any questions, concerns, or additional information about our data protection practices, please reach out:

Email: [email protected]
Address: FlavorPlate Kitchen, 123 Culinary Ave, Food City, EC1 2AB, United Kingdom

We respect your privacy and are committed to protecting your personal data in accordance with the GDPR and all relevant data‑protection laws.