Kitchens and Origin (“we”, “us”, “our”) is a platform owned and operated by GCI Ventures Ltd, a company registered in England and Wales under company number 16474552, that connects customers with chefs and restaurant owners preparing local delicacies. 

We are committed to protecting your personal data and respecting your privacy in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who We Are

• GCI Ventures Ltd
• Trading as: Kitchens and Origin
• Company Number: 16474552
• Registered Office: 74 high street desford
• Email: gciventiresltd@gmail.com

What Information We Collect: We collect and process the following categories of personal data:

Information You Provide: 

• Full name
• Email address
• Phone number
• Delivery address
• Payment information (processed via secure third-party payment processors)
• Account login details

Information We Collect Automatically:

• IP address
• Device type and browser
• Usage data (pages visited, time on site, etc.)
• Location data (where permitted)

Vendor Data: If you are a chef or restaurant partner, we may also collect:

• Business name and address
• Food hygiene certifications
• Bank account details for payouts
• Proof of ID or eligibility to operate

How We Use Your Information: We use your information to:

• Register and manage your account
• Facilitate food orders and delivery
• Communicate order updates and service notifications
• Process payments securely
• Provide customer support
• Improve our platform and services
• Comply with legal obligations

Lawful Bases for Processing: We process your personal data on the following legal bases:

• Performance of contract – to provide services you request
• Consent – for marketing communications (you can withdraw at any time)
• Legal obligation – to comply with UK law
• Legitimate interest – to improve our services and ensure platform security

Sharing Your Information: We only share your data with:

• Trusted chefs/restaurants to fulfil your order
• Payment service providers (e.g. PayPal)
• Delivery partners
• IT service providers supporting our platform
• Law enforcement or regulators (if legally required)
• We never sell your data to third parties.

Data Retention: We retain your data:

• As long as your account is active or as needed to provide services
• For up to 6 years after last activity for legal and tax purposes
• You may request deletion of your account and personal data at any time

Data Security: We use appropriate technical and organizational measures to protect your data, including:

• Secure encryption
• Access controls
• Regular platform security audits

Your Rights: Under the UK GDPR, you have the right to:

• Access your data
• Correct inaccurate data
• Request deletion (“right to be forgotten”)
• Restrict or object to processing
• Data portability
• Withdraw consent for marketing