Privacy Policy - Kitchen Culture Kent

This Policy shall be effective from 25/03/2024 .

Parties

Kitchen Culture Kent whose registered office is at Kitchen Culture, 75 High Street, Rainham, Gillingham, Kent, ME8 7HS (the “Company”).
“You” or “Your” refers to the individuals whose Personal Data (as defined below) is collected and processed by the Company.

Background

1. Background

This Privacy Policy (the “Policy”) sets out how Kitchen Culture Kent (“we”, “our”, “us”) collects, uses and protects any personal data that you provide to us or that we collect about you when you visit our website kitchenculturekent.com (the “Website”).
The purpose of this Policy is to inform visitors to the Website (“you”, “your”) about how their personal data will be used, shared, secured and managed in accordance with applicable data protection and privacy laws of England and Wales.
This Policy applies to all personal data collected by us online and offline. It explains your individual rights and our obligations under UK data protection laws, including the UK General Data Protection Regulation (“UK GDPR”) and Data Protection Act 2018.
In this Policy, “personal data” refers to any information relating to an identified or identifiable living individual. This includes names, contact details, online identifiers and other information relating to individuals.
We will process all personal data in accordance with the principles of the UK GDPR which require that personal data shall be: (i) processed lawfully, fairly and in a transparent manner; (ii) collected for specified, explicit and legitimate purposes; (iii) adequate, relevant and limited to what is necessary; (iv) accurate and kept up to date; and (v) kept in a form which permits identification of data subjects for no longer than is necessary.
This Policy may be updated from time to time by publishing a new version on the Website. You should check this page periodically for any updates.

Definitions
Definitions
1. “Company” means Kitchen Culture Kent.
2. “Services” means any services provided by the Company.
3. “User”, “You” or “Your” means the individual accessing or using the Services provided by the Company.
4. “Personal Data” means any information relating to an identified or identifiable living individual.
5. “Processing” means any operation or set of operations which is performed on Personal Data or on sets of Personal Data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
6. “Data Controller” means the entity that determines the purposes and means of the Processing of Personal Data.
7. “Data Processor” means any natural or legal person who Processes the Personal Data on behalf of the Data Controller.
8. “Third Party” means any natural or legal person, public authority, agency or body other than the Data Subject, Data Controller, Data Processor and persons who, under the direct authority of the Data Controller or Data Processor, are authorised to Process Personal Data.
9. “Consent” means any freely given, specific, informed and unambiguous indication of the Data Subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the Processing of Personal Data.
Contract description: Personal Data we may collect and why
1. We may collect and process the following personal data about you:
  1. Contact details including your name, email address, postal address and telephone number.
  2. Correspondence including letters, emails and live chat transcripts between you and us.
  3. Survey responses provided by you to any voluntary customer surveys.
  4. Transaction details related to any purchases or orders made by you through our website, including billing name and address and payment details.
  5. Details of your visits to our website including your IP address, pages visited, items viewed or searched for. Traffic data is anonymised and does not identify you personally.
2. We collect and process the personal data listed in clauses 2.1.1 to 2.1.5 above for the following legitimate business purposes:
  1. To register you as a new customer and set up your account.
  2. To fulfil any orders or provide any products or services you have purchased or requested from us.
  3. To manage our relationship with you including notifying you about changes to our terms and conditions.
  4. To ensure that content from our website is presented in the most effective manner for you and your device.
  5. To allow you to participate in interactive features of our service when you choose to do so.
  6. To notify you about changes to our service and products.
  7. To administer our website and for internal operations including troubleshooting, data analysis, testing, research, statistical and survey purposes.
  8. To improve our website to ensure that content is presented in the most effective manner for you and for your computer or device.
  9. To measure or understand the effectiveness of advertising we serve to you and others to help improve our services.
  10. To make suggestions and recommendations to you about products or services that may interest you based on your preferences and behaviour.
How you use your personal data
1. We use your personal data to provide you with the products, services or information that you have requested from us, including to:
  1. Process and fulfil orders, registrations, subscriptions or requests for products, services or information;
  2. Deliver and supply the associated products and services;
2. We use your personal data to send you communications that you have requested or which we are required to send you, including to:
  1. Provide information about our products and services;
  2. Provide customer support and respond to enquiries;
3. We use your personal data to send you direct marketing communications promoting our business or the products and services of carefully selected third parties where you have consented to receive such communications. You can opt out of marketing at any time by contacting us.
4. We use analytics cookies and other similar technologies to track and analyse how users interact and engage with our website. This helps us to improve our website and tailor our communications. You can adjust your cookie settings at any time.
5. We use your personal data to manage customer support requests, queries, feedback, product and service issues to provide and improve our customer support.
6. We use your personal data to maintain accurate and up-to-date records of our customers and keep a record of queries, feedback and transactions.
7. We use your personal data as necessary to comply with our legal and regulatory obligations, for safety and security purposes, to prevent fraud and other criminal activities, and to enforce our website terms and conditions.
Consent
1. Types of consent. We will only process personal data where we have obtained the freely given, specific, informed and unambiguous consent of the individual whose personal data is being processed.
2. Methods of giving consent. Consent may be given in writing, electronically or orally. We will keep clear records to demonstrate consent.
3. Withdrawing consent. Individuals have the right to withdraw their consent at any time. We will provide a simple means for individuals to easily withdraw consent without detriment.
4. Implied consent. In limited circumstances, consent may be implied rather than expressed, for example submitting a contact form. However, implied consent will not be used for any new processing activities.
5. Consent for children. If an individual is under 16 years of age, we will obtain verifiable consent from a parent or guardian before processing their personal data.
6. Consent to direct marketing. Individuals have the right to object to direct marketing at any time free of charge. We will provide an unsubscribe mechanism on all direct marketing communications.
Who we share your data with
1. We may share your personal data with our group companies for the purposes described in this Policy.
2. We may share your personal data with third party service providers who perform functions on our behalf, such as hosting our servers, analysing data, providing marketing assistance, processing payments or providing customer service.
3. We may disclose your personal data to professional advisers such as lawyers, bankers, auditors and insurers who provide consultancy, banking, legal, insurance and accounting services.
4. We may disclose your personal data as required by law, such as to comply with a subpoena or other legal process, when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.
5. If we are involved in a merger, acquisition or asset sale, your personal data may be transferred as part of that transaction, provided that the parties agree to process your personal data in accordance with applicable data protection laws. We will notify you of any change in the ownership or uses of your personal data, as required by applicable law.
Deletion of personal data,
1. Right to request deletion. You have the right to request that we delete any personal data that we hold about you. We must comply with any valid requests for erasure without undue delay.
2. Exceptions. We are not required to comply with a request for erasure if the processing of your personal data is necessary:
  1. For exercising the right of freedom of expression and information.
  2. For compliance with a legal obligation or for the establishment, exercise or defence of legal claims.
3. Responding to requests. On receiving a valid request for erasure, we will confirm whether the personal data has been deleted or a reason why it cannot be deleted within a month of receipt.
4. Restricting processing. If deletion cannot be immediately carried out, we will restrict further processing of the personal data instead of deletion.
5. Records of erasure. We will keep records of any requests for erasure and communications regarding such requests.
Visitor rights
1. Right of access. You have the right to request a copy of the personal data we hold about you. We will provide this information within one month of receipt of the request or confirmation of your identity, whichever is the later. The information will be provided free of charge.
2. Right to rectification. You have the right to request that we rectify any inaccurate or incomplete personal data held about you. Where the request relates to rectification of inaccurate personal data, we will take reasonable steps to ensure that data is rectified within one month.
3. Right to erasure. You have the right to request erasure of your personal data without undue delay where: (i) the personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed; (ii) you withdraw consent and no other legal ground permits the processing; (iii) you object to the processing and there are no overriding legitimate grounds for the processing; (iv) the personal data has been unlawfully processed; or (v) the personal data must be erased for compliance with a legal obligation.
4. Right to restriction of processing. You have the right to request restriction of processing of your personal data where: (i) you contest the accuracy of the personal data; (ii) the processing is unlawful but you oppose erasure; (iii) we no longer need the personal data for the purposes of our processing, but you require personal data for the establishment, exercise or defence of legal claims; or (iv) you have objected to processing pending the verification of whether our legitimate grounds override yours. Where processing has been restricted, we may still store your personal data but may not further process it without your consent.
5. Right to data portability. You have the right to receive a copy of your personal data in a structured, commonly used and machine-readable format and have the right to transmit that data to another controller.
6. Right to object. You have the right to object at any time to the processing of your personal data for direct marketing purposes or profiling purposes. We will stop processing your personal data for these purposes upon receipt of your objection.
7. Right to lodge complaints. You have the right to lodge complaints about the processing of your personal data with the Information Commissioner’s Office as the UK’s independent data protection authority. Details of how to lodge a complaint can be found at https://ico.org.uk/make-a-complaint/.
How to contact us
1. You can contact us by telephone at +44 01634 361115.
2. You can also contact us in writing to our registered office address: Kitchen Culture, 75 High Street, Rainham, Gillingham, Kent, ME8 7HS.
3. Our preferred method of communication is via email. You can email us at sales@kitchenculturekent.com.
4. Please state the nature of your query and the personal data to which it relates. We will aim to respond to any queries or requests promptly and in any event within one month of receipt.
5. You have the right to request access to any personal data we hold about you. You can also request rectification or erasure of any inaccurate personal data, as well as restricting or objecting to certain processing of your personal data.
6. We will provide you with the appropriate means to exercise these rights free of charge and as soon as possible upon receipt of your valid request.
Links to other websites
1. External Links. Our Website may contain hyperlinks or references to third party websites. We have no control over such websites and are not responsible for their contents, privacy policies or practices.
  1. You should review the applicable third party privacy policies before submitting any personal data to such third party websites.
2. No Liability. We accept no liability for any loss or damage from your use of a third party website. The inclusion of any hyperlink or reference does not imply our endorsement of such third party’s website, products or services.