Privacy Policy

KitchenCoCo (“we”, “us”, “our”) operates kitchencoco.uk and related services. This policy explains what personal data we collect, how we use it, who we share it with, and your rights under UK GDPR.

Who we are

KitchenCoCo operates kitchencoco.uk. The data controller is reachable at [email protected] for any privacy questions.

What we collect

• Account data: email, optional name, optional postcode, your saved companies and conversation history.
• Conversation data: the messages you send to our AI concierge, uploaded inspiration images, Pinterest URLs, and any preferences extracted from the conversation.
• Lead data: when you submit an enquiry to a company, we collect your name, email, postcode, and any message you write so the company can respond.
• Technical data: standard server logs (IP address, user agent, page requested) used for security and abuse prevention.
• Analytics: if you accept analytics cookies, we use Plausible (a cookieless, EU-hosted analytics tool) to understand which pages are popular. No personal identifiers are sent to Plausible.

How we use your data

• To match you with kitchen companies that fit your stated preferences.
• To send your enquiry to the company you choose to contact.
• To send transactional emails (account verification, sign-in links, follow-ups).
• To improve the matching algorithm and the AI concierge over time.
• To prevent abuse, fraud, and to keep the service running.

Who we share data with

• Kitchen companies you enquire with: when you submit a lead, the company receives your name, email, postcode, and message. They cannot see your other conversations or saved companies.
• Service providers: Anthropic (for AI conversations), Resend (for transactional email), Cloudflare R2 (for image storage), Stripe (for company billing only — consumers don't pay), Railway (for hosting). All are bound by data processing agreements.
• We never sell your personal data.

How long we keep it

• Account data: until you delete your account.
• Conversations and uploaded images: 12 months from the last activity.
• Leads: 24 months for record-keeping and dispute resolution.
• Server logs: 30 days.

Your rights

Under UK GDPR you can request access to your data, correction, deletion, portability, or object to processing. Email [email protected] and we'll respond within 30 days. You can also complain to the UK Information Commissioner's Office at ico.org.uk.

Cookies

See our cookie policy for the specific cookies we set and how to manage them.

Changes to this policy

We may update this policy as the service evolves. The “last updated” date at the top reflects when the most recent change was made. We'll email registered users about material changes.