GDPR Compliance Policy

Effective Date: December 01, 2025

Kitchen by Mom (kitchenbymom.com) is committed to protecting the personal data of our visitors, customers, and partners in accordance with the European Union General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679). This policy explains what personal data we collect, how we process it, the legal bases for processing, the safeguards we apply, and how you can exercise your GDPR rights.

What Personal Data We Collect

We only collect data that is necessary for the purposes described below. The categories of personal data we process include:

Email address – provided when you subscribe to our newsletter, request a quote, or contact us through the website.
Cookies and similar tracking technologies – used to remember your preferences, analyse site usage, and improve the user experience. This includes both first‑party and third‑party analytics cookies.
Analytics data – aggregated information such as IP address, device type, browser, pages visited, and time spent on each page, collected through services like Google Analytics.

How We Protect Your Data

Security is a core priority. We employ a layered approach to protect personal data against unauthorised access, alteration, disclosure, or destruction:

SSL/TLS encryption – All data transmitted between your browser and our servers is encrypted using HTTPS.
Secure servers – Our hosting environment is hosted on servers that implement firewalls, intrusion detection systems, and regular security patching.
Limited retention – Email addresses are retained only as long as you remain subscribed to our communications or until you request deletion. Analytics data is anonymised after 14 months, and cookies are automatically cleared according to their individual expiry dates.
Access controls – Only authorised personnel with a legitimate need to process personal data have access, and they are required to sign confidentiality agreements.

Legal Basis for Processing

We process personal data on one or more of the following lawful grounds:

Consent – When you voluntarily sign up for our newsletter or accept our cookie banner, you give explicit consent for the specific purposes described.
Legitimate interests – We process analytics data and use essential cookies to improve website performance, security, and user experience. This processing is balanced against your rights and interests, and you may object at any time (see “Right to Object” below).

Your GDPR Rights

Under GDPR you have a set of robust rights regarding your personal data. Kitchen by Mom respects each of these rights and provides clear mechanisms for you to exercise them.

Right to Access

You may request a copy of the personal data we hold about you, together with information about how we process it.

Right to Rectification

If any of your personal data is inaccurate or incomplete, you can ask us to correct or complete it without undue delay.

Right to Erasure (“Right to be Forgotten”)

You can request that we delete your personal data when it is no longer necessary for the purposes for which it was collected, or when you withdraw consent.

Right to Restrict Processing

You may ask us to limit the processing of your data while we verify the accuracy of the data or while a dispute is being resolved.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine‑readable format and to transmit it to another controller.

Right to Object

You may object to the processing of your data for direct marketing, profiling, or where we rely on legitimate interests.

Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

How to Exercise Your Rights

To exercise any of the rights listed above, please contact our Data Protection Officer (DPO) using the details provided below. In your request, please include:

Your full name and, if applicable, the email address you used with us.
A clear description of the right you wish to invoke (e.g., “I would like to exercise my Right to Erasure”).
Any additional information that will help us verify your identity (e.g., a recent order number or subscription ID).

We will acknowledge receipt of your request within 5 business days and will provide a substantive response within the statutory period of 30 calendar days, unless an extension is justified by the complexity of the request (in which case we will inform you of the extension and the reasons for it). All correspondence will be conducted via the email address you provide, unless you request an alternative method.

Response Time

Our standard response time for GDPR‑related requests is 30 days. If we need additional time, we will notify you within the initial 30‑day window and provide an estimated completion date. Extensions are rare and only used when the request is particularly complex or when we need to consult with third parties.

Contact Information

If you have any questions about this policy, wish to lodge a complaint, or want to exercise any of your GDPR rights, please contact our Data Protection Officer:

Kitchen by Mom – Data Protection Officer
Email: gdpr@kitchenbymom.com
Website: https://kitchenbymom.com

Last Updated

This GDPR Compliance Policy was last reviewed and updated on December 01, 2025. We may amend it from time to time to reflect changes in legislation, our practices, or the services we provide. Any material changes will be posted on this page with an updated revision date.