Privacy Policy

1. Who We Are

Kitchen Control is operated by Kitchen Control Ltd, a company registered in England and Wales (Companies House number: 17239504, registered address: Ocean View, Carclaze, St Austell, PL25 3SU).

Kitchen Control Ltd is the data controller responsible for your personal data.

Contact: hello@kitchen-control.co.uk
Data protection enquiries: support@kitchen-control.co.uk

2. What Data We Collect

Account data

• Your full name and email address
• Your business or restaurant name
• Your role within your organisation
• Account creation date and timestamp of T&C acceptance
• Whether you opted in to marketing emails

Business data you enter

• Supplier details (names, contact information, delivery terms)
• Ingredients, yields, recipes, dishes and menus
• Allergen information
• Order lists

This data belongs to you. We process it solely to provide the Kitchen Control service.

Payment data

Payment card details are processed directly by Stripe and are never stored by Kitchen Control. We receive only confirmation of payment and basic billing information (last 4 digits, card type, expiry).

Usage data

• Number of AI scans used per billing period
• Login timestamps
• Browser type and device type (for service improvement only)

Data from AI scanning

When you use the label or invoice scanning features, images are sent to Google Gemini AI for processing. Images are not stored by Kitchen Control after processing. Please refer to Google's privacy policy for their data handling practices.

3. Why We Collect Your Data

4. Who We Share Your Data With

We use the following third-party data processors to provide Kitchen Control. Each is bound by appropriate data processing agreements and GDPR-compliant terms:

We do not sell your data. We do not share your data with any third party for marketing or advertising purposes.

5. How Long We Keep Your Data

• Active accounts — data retained for as long as your account is active
• Cancelled accounts — data retained for 90 days after cancellation, then permanently deleted
• Payment records — retained for 7 years to comply with HMRC requirements
• Marketing consent records — retained until you withdraw consent
• Suspended accounts (non-payment) — data retained for 30 days before deletion

You may request early deletion of your data at any time by contacting support@kitchen-control.co.uk.

6. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right of access — request a copy of the data we hold about you
• Right to rectification — request correction of inaccurate data
• Right to erasure — request deletion of your data ("right to be forgotten")
• Right to restrict processing — request that we limit how we use your data
• Right to data portability — request your data in a portable format
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — withdraw marketing consent at any time

To exercise any of these rights, contact support@kitchen-control.co.uk. We will respond within 30 days.

7. Cookies & Local Storage

Kitchen Control uses the following:

• Session cookies — to keep you logged in. These are essential and cannot be disabled.
• Browser local storage — to cache your recipe and ingredient data locally for faster performance. This data mirrors what is stored in our database and does not contain any additional personal information.

We do not use advertising cookies, tracking cookies or any third-party analytics cookies.

8. Security

We take reasonable technical and organisational measures to protect your data including:

• All data transmitted over HTTPS (SSL/TLS encryption)
• Row-level security on our database so users can only access their own company's data
• API keys and service credentials stored securely in server environment variables, never in client code
• Regular dependency updates

No system is 100% secure. In the event of a data breach that poses a risk to your rights, we will notify you and the ICO within 72 hours as required by GDPR.

9. Children's Data

Kitchen Control is a professional B2B service intended for adults. We do not knowingly collect data from anyone under the age of 18. If you believe a minor has created an account, please contact us and we will delete it immediately.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of material changes by email with at least 14 days notice. The latest version will always be available at kitchen-control.co.uk/privacy.html.

11. How to Complain

If you have concerns about how we handle your data, please contact us first at support@kitchen-control.co.uk and we will do our best to resolve the issue.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Helpline: 0303 123 1113