DRAFT for review. This document is not yet final and has not been legally checked. Items in [square brackets] are still to be confirmed.
Privacy policy
Last updated: [date to be set when final]
1. Who we are
Kitchens Connected is a trading name of Wentways Ltd, registered in England and Wales, company number 17014646. Registered office: [registered office address to be confirmed]. For the personal data described in section 2 we are the controller. Contact for privacy questions: lee@kitchensconnected.com.
2. Data we collect about our customers and their teams
Account details: names, business email addresses, company name and branding, and login records.
Billing details: billing name, address and VAT number. Card payments are handled by our payment provider, Stripe. We never see or store full card numbers.
Usage information: sign-in times, device and browser information, and error logs needed to keep the service secure and working.
3. Data you add about your own customers
When you add your customers’ names, contact details, addresses, room photos, plans or messages, you are the controller of that data and we process it only on your instructions to provide the service. [Data processing terms to be added.]
4. Why we use data and our lawful basis
To provide the service you signed up for (contract).
To take payments and keep accounts (contract and legal obligation).
To keep the service secure, prevent misuse and fix problems (legitimate interests).
To send service messages such as password resets and notices about your account (contract). We will only send marketing emails if you agree, and you can opt out at any time.
5. Who we share it with
Service providers that help us run Kitchens Connected, under contract: hosting and storage (Cloudflare), payments (Stripe), email delivery (Resend), and image generation services used to create renders. Only the information needed for each task is shared.
We do not sell personal data.
6. International transfers
Some providers process data outside the UK. Where they do, we rely on UK adequacy regulations or approved contract clauses to protect it.
7. How long we keep it
Account data is kept while your subscription is active and for [30] days after cancellation, then deleted, except billing records, which we keep for 6 years for tax purposes.
8. Security
Data is encrypted in transit. Passwords are stored only as salted hashes. Each company’s records are kept separate from every other company’s.
9. Your rights
You can ask to see, correct, delete or move your personal data, or object to how we use it. Contact us at lee@kitchensconnected.com. You can also complain to the Information Commissioner’s Office (ico.org.uk).
10. Cookies
We use only essential cookies needed to keep you signed in and to keep the service secure. We do not use advertising cookies. [Review if analytics are added.]
11. Changes
We will update this policy when our practices change and show the date of the latest version at the top.