GDPR Compliance Policy

Easykitchencrate (“we”, “us”, “our”) is committed to protecting the privacy and personal data of our visitors, customers, and partners. This policy explains how we collect, use, store, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and the applicable UK and EU data protection laws. It also details the rights you have under the GDPR and how you can exercise those rights.

1. Who We Are

Company name: Easykitchencrate
Contact for GDPR matters: [email protected]
Last Updated: April 03, 2026

2. What Personal Data We Collect

We collect the following categories of personal data when you interact with our website (https://easykitchencrate.com):

Email addresses: Collected when you sign up for newsletters, create an account, or place an order.
Cookies and similar technologies: We use first‑party cookies to remember your preferences, track user sessions, and analyse traffic. Third‑party analytics cookies (e.g., Google Analytics) are also employed to gather anonymous usage data.
Analytics data: IP addresses, device information, browser type, operating system, referral URLs, and other technical data that help us improve the site’s performance.

3. Legal Basis for Processing

We process your personal data based on the following lawful bases:

Consent: When you explicitly agree to receive marketing communications or to store certain cookies.
Legitimate interest: For improving website functionality, providing a better user experience, and conducting legitimate business activities such as fraud prevention and order fulfilment.

4. How We Protect Your Data

We implement a range of technical and organisational measures to safeguard your personal data:

SSL/TLS encryption: All data transmitted between your browser and our servers is encrypted with HTTPS.
Secure servers: We host our website on industry‑standard, secure servers with firewalls and intrusion detection systems.
Limited retention: Personal data is retained only for as long as necessary to fulfil the purpose for which it was collected. For example, email addresses are kept for the duration of your subscription or until you request deletion.
Access controls: Only authorised personnel have access to personal data, and they undergo regular privacy training.

5. Your GDPR Rights

Right to Access

You have the right to request a copy of the personal data we hold about you. This includes the purposes for which it is processed, the categories of data, and the recipients of your data.

Right to Rectification

If any of your personal data is inaccurate or incomplete, you can request us to correct or complete it promptly.

Right to Erasure (Right to be Forgotten)

You may ask us to delete your personal data when it is no longer necessary for the purpose it was collected, or if you withdraw consent and no other legal basis applies.

Right to Restrict Processing

Under certain circumstances, you can request that we limit how we process your personal data, such as when you contest its accuracy or the legality of the processing.

Right to Data Portability

You have the right to obtain your personal data in a structured, commonly used, machine‑readable format and transfer it to another controller if possible.

Right to Object

You can object to the processing of your personal data for direct marketing purposes or when we rely on legitimate interests, and we will cease processing unless we can demonstrate compelling legitimate grounds.

Right to Withdraw Consent

If you gave us consent to process your data, you can withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before withdrawal.

6. How to Exercise Your Rights

To exercise any of the rights above, please contact us via email at [email protected] or use the contact form on our website. When you send a request, please provide:

A clear description of your request (e.g., “I wish to access all personal data we hold about me”).
Proof of identity if the request involves sensitive or highly personal data (e.g., a copy of a passport or driver’s licence).

We will respond to your request within 30 days of receipt, unless the request is complex or we receive multiple requests from you, in which case we may need additional time but will keep you informed of any delays.

7. Data Retention Periods

We retain personal data for the period necessary to fulfil the purposes for which it was collected, including legal, accounting, and compliance obligations. Typical retention periods are:

Email addresses: Up to the date of subscription termination or deletion request.
Cookies: Session cookies are deleted when you close your browser; persistent cookies are removed after 12 months unless you opt‑in for longer retention.
Analytics data: Aggregated data is stored for 12 months; individual identifiers are deleted immediately after processing.

8. Changes to This Policy

We may update this GDPR Compliance Policy from time to time. Any changes will be posted on this page with a new “Last Updated” date. We encourage you to review the policy periodically to stay informed about how we handle your data.

9. Contact Us

If you have any questions about this policy, our data processing practices, or wish to lodge a complaint, please contact us at [email protected].