GDPR Compliance Policy

Last Updated: April 03, 2026

Flavor Kitchen Studio (“we”, “us”, or “our”) is committed to protecting your privacy and ensuring that all personal data we process is handled in accordance with the European Union General Data Protection Regulation (GDPR) and related data‑protection legislation. This policy explains what data we collect, why we collect it, how we protect it, and the rights you have as a data subject. By using our website flavorkitchenstudio.com, you acknowledge that you have read and understood this policy.

1. Data We Collect

• Email addresses: When you subscribe to our newsletter, request a quote, or contact us, we collect the email address you provide.
• Cookies and tracking pixels: We use first‑party cookies to remember your preferences, to provide a personalised experience, and to analyse site usage.
• Analytics data: We employ Google Analytics and similar tools to gather anonymous information about how visitors interact with our site (e.g., pages visited, time spent, referral sources). This data is aggregated and does not identify individuals.

2. How We Protect Your Data

Secure Transmission: All data exchanged between your browser and our servers is protected by TLS (HTTPS) to prevent interception or tampering.

Secure Storage: Personal data is stored on encrypted, access‑controlled servers maintained by reputable hosting providers. We implement least‑privilege access controls and regularly audit our security measures.

Limited Retention: We retain personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by law. Email addresses are kept for the duration of the subscription or until you opt‑out. Cookies and analytics data are deleted automatically after a period defined in our cookie policy.

3. Legal Basis for Processing

Consent: Where required (e.g., for marketing communications), we obtain your explicit consent before collecting or processing your personal data. You can withdraw this consent at any time.

Legitimate Interest: We rely on legitimate interest for the provision of our services, such as maintaining website functionality, improving user experience, and performing analytics. We balance these interests against your privacy rights and provide opt‑out mechanisms for non‑essential cookies.

4. Your GDPR Rights

• Right to Access: You have the right to obtain confirmation that we are processing your personal data and to receive a copy of that data.
• Right to Rectification: If your data is inaccurate or incomplete, you can request we correct it.
• Right to Erasure: You may ask for the deletion of your personal data when it is no longer needed for the purpose it was collected.
• Right to Restrict Processing: You can request that we limit the processing of your data, for example, if you contest its accuracy.
• Right to Data Portability: You may receive your personal data in a structured, commonly used format and transfer it to another controller.
• Right to Object: You can object to processing for direct marketing or profiling purposes.
• Right to Withdraw Consent: If we rely on your consent, you can withdraw it at any time without affecting the legality of processing based on consent before withdrawal.

5. How to Exercise Your Rights

To exercise any of the rights above, please contact us at [email protected] with a brief description of your request and any supporting information that helps us identify your data. We will respond within 30 days, as required by GDPR. If your request is complex or requires additional verification, we may need up to 90 days, but we will keep you informed throughout the process.

6. Data Subject Access Request (DSAR) Procedure

1. Identify yourself: Provide your full name, email address, and any other details that help us locate your data.
2. Specify your request: Indicate whether you want access, rectification, erasure, restriction, portability, objection, or withdrawal of consent.
3. Submit the request: Send the information to [email protected]. We will confirm receipt within 5 business days.
4. Processing: We will review your request, verify your identity, and take the appropriate action. If we need more information, we will contact you.
5. Response: We will provide the requested information or confirm the action taken within 30 days.

7. Data Security Measures

We implement a comprehensive security framework that includes:

• Regular vulnerability scans and penetration testing.
• Encryption at rest and in transit.
• Multi‑factor authentication for staff accessing personal data.
• Annual staff training on data protection best practices.
• Incident response plan to promptly address data breaches.

8. Contact Us

If you have any questions about this policy, wish to file a complaint, or want to discuss your data protection rights, please contact our Data Protection Officer at:

Flavor Kitchen Studio
123 Flavor Street, Culinary City, 45678
Email: [email protected]

We are committed to ensuring that your personal data is handled responsibly and transparently. Thank you for trusting us with your information.