GDPR Compliance Policy

Last Updated: April 03, 2026

1. Introduction

easyplatekitchen.com (“Easy Plate Kitchen”) is committed to protecting your privacy and ensuring that your personal data is processed in compliance with the European Union’s General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. This policy explains what personal data we collect, how we use it, the legal basis for processing, and your rights under the GDPR. If you have any questions or concerns, please contact us at [email protected].

2. Personal Data We Collect

Email addresses: When you subscribe to our newsletter, register for a cooking class, or place an order, we collect your email address to communicate with you, send updates, and provide customer support.
Cookies and similar technologies: We use first‑party cookies to remember your preferences, keep you logged in, and track how you interact with our site. Third‑party cookies from Google Analytics and social media platforms help us understand traffic patterns and improve our services.
Analytics data: Using Google Analytics and other analytics tools, we collect anonymised information about your device, IP address, and browsing behaviour. This data is aggregated and used solely to improve the usability and performance of our website.

3. How We Protect Your Data

We implement technical and organisational measures to safeguard your personal data:

SSL/TLS encryption: All data transmitted between your browser and our servers is encrypted using HTTPS, ensuring that sensitive information cannot be intercepted.
Secure servers: Our hosting environment is protected by firewalls, intrusion detection systems, and regular vulnerability assessments.
Limited retention: Personal data is retained only as long as necessary to fulfil the purposes for which it was collected. For example, email addresses are kept for the duration of your subscription or until you request deletion.
Access controls: Only authorised staff with a legitimate need to process personal data can access it, and all access is logged and monitored.

4. Legal Basis for Processing

We process personal data on the following lawful bases:

Consent: When you provide your email address or use our services, you give explicit consent for us to process your data for marketing, communication, and service delivery.
Legitimate interest: We rely on legitimate interest to operate our website, improve user experience, and analyse traffic. This interest is balanced against your privacy rights and is regularly reviewed.

5. Your GDPR Rights

Right to Access

You have the right to request a copy of the personal data we hold about you. This includes the purposes of processing, categories of data, and any third parties with whom we share your data.

Right to Rectification

If any of your personal data is inaccurate or incomplete, you may request us to correct it. We will respond within 30 days and update the information accordingly.

Right to Erasure

Under certain circumstances, you can request the deletion of your personal data. We will assess the request and, if justified, delete the data or anonymise it, except where we are required to retain it for legal or contractual reasons.

Right to Restrict Processing

You may ask us to limit the processing of your personal data, for example, if you contest its accuracy or the legality of the processing. We will store your data but not use it for further processing, except for the purposes of compliance with legal obligations.

Right to Data Portability

You can request that we provide you with the personal data we hold in a structured, machine‑readable format. We will deliver the data via a secure channel and within 30 days of your request.

Right to Object

You may object to the processing of your personal data for direct marketing or profiling purposes. Upon receiving your objection, we will cease processing unless we can demonstrate compelling legitimate interests that override your rights.

Right to Withdraw Consent

If you previously consented to the processing of your data, you can withdraw that consent at any time. We will stop processing your data immediately, except where we have other lawful bases for continued processing.

6. How to Exercise Your Rights

To exercise any of the rights above, please send a written request to [email protected]. Include a brief description of the request and, where necessary, proof of identity to verify your request. We will respond within 30 days, as required by the GDPR. If you are not satisfied with our response, you may file a complaint with the relevant supervisory authority.

7. Retention Periods

Personal data is retained for the shortest period necessary to fulfil the purposes for which it was collected. Typical retention periods are:

Email addresses: Until you unsubscribe or request deletion.
Cookies: Session cookies are deleted when you close your browser; persistent cookies are removed after 30 days unless you opt‑in for longer retention.
Analytics data: Anonymised data is retained for 12 months to analyse trends.

8. Data Sharing and Third‑Party Processors

We may share your personal data with trusted third‑party service providers that help us run our website, process payments, or deliver marketing services. All processors sign data protection agreements that require them to comply with GDPR and implement adequate security measures. We do not sell or rent your personal data to third parties for their marketing purposes.

9. Changes to This Policy

We may update this policy from time to time. Any changes will be posted on this page and will take effect immediately upon publication. We encourage you to review this policy periodically to stay informed about how we protect your personal data.

10. Contact Us

If you have any questions, concerns, or complaints about this GDPR Compliance Policy or our data processing practices, please contact us at:

Easy Plate Kitchen – Data Protection Officer
Email: [email protected]