GDPR Compliance Policy

Last Updated: April 03, 2026

1. Introduction

Flavor Haven Kitchen (the “Website”) is operated by Flavor Haven Kitchen Ltd., a company registered in the United Kingdom. We are committed to protecting the privacy of our users and ensuring compliance with the General Data Protection Regulation (EU) 2016/679 (the “GDPR”). This policy explains what personal data we collect, how it is processed, and the rights you have under the GDPR.

2. Types of Personal Data We Collect

We collect the following categories of personal data:

Email addresses – collected when you sign up for our newsletter, register for an account, or place an order.
Cookies and similar technologies – used to enhance your browsing experience, remember your preferences, and analyse traffic.
Analytics data – aggregated data from services such as Google Analytics that help us understand how visitors use the Website.

3. Legal Basis for Processing

We process your personal data on the following lawful bases:

Consent – when you explicitly opt‑in to receive marketing emails or use features that require your personal data.
Legitimate interest – for improving the Website, ensuring security, and providing personalized content and services.

4. How We Protect Your Data

We employ a range of technical and organisational measures to safeguard your personal data:

Transport Layer Security (TLS) – all data transmitted between your browser and our servers is encrypted using SSL/TLS.
Secure servers – we host our data on dedicated, fire‑walled servers with regular security audits.
Limited retention – personal data is retained only for as long as necessary to fulfil the purposes for which it was collected or to comply with legal obligations.

5. Your GDPR Rights

Right to Access

You have the right to obtain confirmation that we are processing your personal data, a copy of that data, and information about how it is used. To exercise this right, contact us at [email protected].

Right to Rectification

If any of your personal data is inaccurate or incomplete, you may request correction. Provide the correct information and we will update our records promptly.

Right to Erasure

You can request that we delete your personal data, provided there is no legal obligation to retain it. We will remove the data from all active databases and request deletion from backups where feasible.

Right to Restrict Processing

You may request that we limit the use of your data for certain purposes, such as marketing. We will comply by restricting processing to the extent permitted by law.

Right to Data Portability

You can obtain your personal data in a structured, commonly used format and transfer it to another controller. Contact us to request a data export.

Right to Object

You may object to the processing of your personal data for direct marketing or profiling. We will stop processing unless we can demonstrate compelling legitimate grounds.

Right to Withdraw Consent

If you have given us consent, you can withdraw it at any time. Withdrawal will not affect the lawfulness of any processing carried out before the withdrawal.

6. How to Exercise Your Rights

To exercise any of the rights above, please send a written request to:

Flavor Haven Kitchen Ltd.
Data Protection Officer
Email: [email protected]

In your request, please include a brief statement of the right you are invoking, any relevant details (such as the email address used on our site), and a form of identification if you are requesting data deletion or rectification. We will respond within 30 days, as required by the GDPR. If additional time is needed, we will inform you of the reason and the expected date of completion.

7. Retention of Personal Data

We retain personal data for the minimum period necessary to achieve the purposes for which it was collected. Email addresses are stored for up to 12 months after the last interaction, unless you request deletion sooner. Cookie and analytics data are retained for 30 days to provide a seamless user experience and improve site performance.

8. Contact Information

If you have any questions about this policy, the processing of your personal data, or wish to exercise any of your rights, please contact our Data Protection Officer at [email protected].