Privacy Policy

Last updated: June 2026

KitchenReady is operated by [Your Name / Business Name], registered in England and Wales. We are committed to protecting your personal data and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. What data we collect

When you use KitchenReady, we collect and store the following:

• Account information - your email address, business name, and a hashed version of your password. We never store your password in plain text.
• Food safety records - the diary entries, temperature logs, cleaning records, allergen records, supplier details, staff training records and 4-weekly reviews you enter into the app.
• Billing information - if you subscribe to Pro, your payment details are handled by Stripe. We only store your Stripe customer ID. We do not see or store your card number.
• Technical data - session tokens stored in secure, httpOnly cookies to keep you signed in.

We do not use tracking cookies, advertising pixels, or third-party analytics tools.

2. How we use your data

We use your data solely to provide the KitchenReady service:

• To create and manage your account
• To store and retrieve your food safety records
• To process subscription payments via Stripe
• To send transactional emails (password resets and, for Pro users, review reminders)

We will never sell your data, share it with third parties for marketing purposes, or use it for any purpose other than providing the service.

3. Legal basis for processing

We process your personal data on the basis of contract performance - processing is necessary to provide the service you have signed up for. For Pro subscribers, this includes processing payment data via Stripe.

4. Data storage and security

Your data is stored in Cloudflare's infrastructure, with data centres located in the United Kingdom and European Economic Area. We apply the following security measures:

• Passwords are hashed using PBKDF2 with 100,000 iterations and cannot be reversed
• All data is transmitted over HTTPS
• Session cookies are httpOnly, Secure, and SameSite=Strict
• Each account is completely isolated - no user can access another user's data

5. Data retention

We retain your data for as long as your account is active. If you delete your account, your data is soft-deleted immediately (so you can no longer access it) and permanently purged from our systems within 30 days.

6. Your rights

Under UK GDPR you have the right to:

• Access - request a copy of the personal data we hold about you. You can export all your food safety data at any time from within the app.
• Rectification - correct inaccurate data. You can update your records directly in the app.
• Erasure - request deletion of your account and all associated data. You can do this from Account Settings in the app, or by contacting us.
• Portability - export your data in a machine-readable format (JSON) from within the app at any time.
• Restriction - request that we restrict processing of your data in certain circumstances.
• Object - object to processing of your personal data in certain circumstances.

To exercise any of these rights, contact us at hello@kitchenready.co.uk. We will respond within 30 days.

7. Third-party processors

We use the following third-party services to operate KitchenReady:

• Cloudflare - hosting, database storage, and global content delivery. Cloudflare Privacy Policy
• Stripe - payment processing for Pro subscriptions. We share only your email address and a tenant reference with Stripe. Stripe Privacy Policy
• Resend - transactional email delivery (password resets and review reminders). Resend Privacy Policy

8. Cookies

We use a single session cookie (sl_session) to keep you signed in. This is a strictly necessary cookie and does not require consent under UK GDPR. We do not use advertising, tracking, or analytics cookies.

9. ICO registration

We are registered with the Information Commissioner's Office (ICO) under registration number [ICO REGISTRATION NUMBER]. You have the right to make a complaint to the ICO at ico.org.uk if you believe we have not handled your personal data correctly.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by a notice within the app. The date at the top of this page shows when the policy was last updated.

11. Contact

For any privacy-related questions or to exercise your rights, please contact us at hello@kitchenready.co.uk.