GDPR Compliance Policy

Last Updated: April 03, 2026

1. Introduction

Kitchentastecorner (the “Site”) is committed to safeguarding the privacy and personal data of all individuals who interact with our website, services, or marketing communications. This GDPR Compliance Policy explains what personal data we collect, how we use it, the legal bases for our processing activities, and the rights you have under the General Data Protection Regulation (EU) 2016/679. By using the Site, you acknowledge that you have read and understood this policy.

2. Types of Personal Data We Collect

We collect the following categories of personal data:

Email addresses: When you subscribe to our newsletter, request recipes, or contact us via the contact form.
Cookies and similar technologies: We place cookies on your device to remember your preferences, track session activity, and analyze traffic patterns.
Web analytics data: Using Google Analytics and similar tools, we collect IP addresses (anonymized), device type, browser, operating system, referral source, and page views to improve user experience and content relevance.

3. Legal Basis for Processing

Our processing activities are based on the following lawful grounds:

Consent: When you opt‑in to receive newsletters or marketing emails, you provide explicit consent. You may withdraw this consent at any time by clicking the unsubscribe link in any email or contacting us.
Legitimate Interest: We rely on legitimate interest to improve website functionality, analyze usage patterns, and tailor content to user preferences. This interest is balanced against your privacy rights and is reviewed annually.

4. Data Protection Measures

We implement robust technical and organisational safeguards to protect your personal data:

SSL Encryption: All data transmitted between your browser and our servers is encrypted using TLS 1.3.
Secure Servers: Our hosting environment is protected by firewalls, intrusion detection, and regular vulnerability scans.
Access Controls: Only authorised staff with a legitimate need can access personal data. Multi‑factor authentication is used for all administrative accounts.
Retention Policy: Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Email addresses are kept for the duration of the subscription; analytics data is anonymised and deleted after 12 months.

5. Your GDPR Rights

Under the GDPR, you have the following rights concerning your personal data. Below we provide a brief explanation of each right and the icon that represents it.

Right to Access

You may request a copy of the personal data we hold about you, including the purposes of processing and the categories of data.

Right to Rectification

You can request correction of any inaccurate or incomplete personal data we hold.

Right to Erasure

Also known as the “right to be forgotten”, you may ask us to delete your personal data where no legitimate basis exists to continue processing.

Right to Restrict Processing

When you contest the accuracy of data or object to processing, we may suspend processing while verifying the claim.

Right to Data Portability

You can receive your personal data in a structured, commonly used format (e.g., CSV) or request transfer to another controller.

Right to Object

You may object to processing for direct marketing or profiling, and we will cease such processing unless we have a compelling legitimate interest.

Right to Withdraw Consent

Consent can be withdrawn at any time, which will stop further processing of your data for the purpose it was granted.

6. How to Exercise Your Rights

To exercise any of the rights listed above, please contact us at [email protected] with the following information:

Your full name and contact details.
A clear statement of the request you wish to make (e.g., “I would like to exercise my right to access my personal data”).
Any supporting evidence that confirms your identity (e.g., a scanned copy of a government ID). We may request additional information to verify your identity to protect against unauthorized requests.

We will respond to your request within 30 days of receipt. If you need a more detailed response, we may request additional information, but this will not extend the overall response time beyond the 30‑day period.

7. Data Retention and Deletion

Personal data is retained only as long as necessary to fulfil the purpose for which it was collected or to comply with legal obligations. Typical retention periods are:

Email addresses: until you unsubscribe or request deletion.
Cookies: session cookies expire when you close your browser; persistent cookies are removed after 30 days of inactivity.
Analytics data: anonymised data is stored for 12 months, after which it is permanently deleted.

If you wish to delete your data, please refer to the “Right to Erasure” section above and submit a request via the contact email. We will delete or anonymise your data as appropriate, except where a legal obligation requires us to retain it.

8. Contact Information

For any questions, concerns, or requests regarding this GDPR Compliance Policy, or to exercise your rights, please contact us:

Email: [email protected]
Website: https://kitchentastecorner.com

9. Policy Updates

We may update this policy from time to time to reflect changes in our data processing practices or legal requirements. The “Last Updated” date will be revised accordingly. We encourage you to review this page periodically to stay informed about how we protect your personal data.