GDPR Compliance Policy

Kitchenplatestudio (“we”, “us”, or “our”) is committed to protecting the privacy and personal data of our visitors, users, and customers. This GDPR Compliance Policy explains how we collect, use, store, and safeguard your personal information in accordance with the General Data Protection Regulation (EU) 2016/679 and applicable UK data‑protection legislation. This policy is effective as of Last Updated: April 03, 2026.

Right to Access

You have the right to obtain confirmation as to whether or not we process personal data relating to you, and, if we do, to request a copy of that data. You may also ask for details about the purposes of the processing, the categories of data, the recipients of the data, and the period for which it will be stored. To exercise this right, please send a request to [email protected].

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. Provide the correct information and the reason for the correction, and we will update our records within 30 days.

Right to Erasure

Under certain circumstances, you may request that we delete your personal data. This includes situations where the data is no longer necessary for the purposes it was collected, or where you withdraw consent and we have no other legal basis to keep it. We will remove your data from our active databases within 30 days of receiving a valid request, unless a legal obligation requires us to retain it.

Right to Restrict Processing

If you contest the accuracy of your data or if the processing is unlawful, you may ask us to restrict its use. During the restriction period, we will only store your data and not use it for any further processing except as required by law. We will respond to such requests within 30 days.

Right to Data Portability

You can request a copy of your personal data in a structured, commonly used, and machine‑readable format. If feasible, we will provide the data in a format such as CSV or JSON. If you wish to transfer your data to another service provider, we will cooperate with them, provided we receive a valid written request from you.

Right to Object

You may object to the processing of your personal data for direct marketing purposes or for profiling. Upon receiving an objection, we will stop processing your data for these purposes immediately. If you object to the processing of your data for legitimate interests, we will assess whether our interests outweigh yours and respond accordingly.

Right to Withdraw Consent

If we rely on your consent to process your personal data, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before withdrawal. Simply contact us at [email protected] and we will honour your decision promptly.

Data We Collect

Email addresses – collected when you subscribe to newsletters, create an account, or contact us for support.
Cookies and similar tracking technologies – used to enhance user experience, analyse traffic, and personalise content.
Analytics data – collected via Google Analytics and other third‑party services to monitor site performance and user behaviour.

How We Protect Your Data

We employ industry‑standard security measures to safeguard your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

SSL/TLS encryption – all data transmitted between your browser and our servers is encrypted using HTTPS.
Secure servers – our hosting infrastructure is hosted on secure, monitored servers with regular vulnerability scans.
Access controls – only authorised personnel with a legitimate need can access personal data, and all access is logged.
Limited retention – we retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law.

Legal Basis for Processing

We process personal data under the following lawful bases:

Consent – when you opt‑in to receive newsletters, marketing communications, or account‑related services.
Legitimate interest – for purposes such as improving our website, providing customer support, and ensuring the security of our services.
Contractual necessity – when processing is required to fulfil a contract you have entered into with us (e.g., order processing).

How to Exercise Your GDPR Rights

To exercise any of the rights listed above, please submit a written request (email, postal mail, or through a secure online form) to the following address:

Kitchenplatestudio – Data Protection Officer
Email: [email protected]

In your request, please include:

Your full name and contact details.
A description of the request (e.g., “I wish to exercise my right to erasure for all personal data stored about me”).
Any supporting documentation that verifies your identity (e.g., a copy of a passport or driver’s licence).

We will acknowledge receipt of your request within 5 business days and provide a response within 30 days, as required by GDPR. If we need more information to verify your identity, we may ask for additional details.

Response Time

All lawful requests for access, rectification, erasure, restriction, portability, objection, or withdrawal of consent will be responded to within 30 days of receipt. In complex cases, we may extend the period by an additional 30 days, provided we inform you of the delay and the reasons for the extension.

Contact Us

If you have any questions about this policy, your personal data, or how we handle your information, please contact our Data Protection Officer at:

Email: [email protected]
Phone: +44 20 7946 0123 (available Monday‑Friday, 9 a.m.–5 p.m. UK time)

We appreciate your trust in Kitchenplatestudio and are committed to protecting your privacy and personal data in a responsible, transparent, and lawful manner.