Culinary Key

Culinary Key — Privacy Policy

Last Updated: 29/05/2026

1. Information We Collect

1.1 User & Business Information

Name, email address, and password (for account creation and authentication).

Business name, industry, and subscription plan details.

1.2 Tracking & Analytics Data

We use Google Tag Manager and Google Analytics to track usage patterns, page visits, and platform engagement. Analytics data is only collected after you have given cookie consent.

We may collect device information, browser type, and IP address for security monitoring and analytics.

1.3 Payment Information

We use Stripe for secure payment processing. Culinary Key does not store credit or debit card details. All payment data is securely handled by Stripe in accordance with PCI-DSS standards.

1.4 Cookies & Tracking Technologies

We use cookies for essential platform functionality, user authentication, and analytics. Users can manage cookie preferences via our cookie consent banner. Analytics and tracking cookies are only loaded after consent is granted.

1.5 Mobile App & WebView Information

The Culinary Key mobile app uses a secure WebView to display the Culinary Key web platform within the app. All data processed within the mobile app follows the same rules and protections described in this Privacy Policy.

The mobile app does not collect any additional personal information beyond what is collected by the web platform.

If the app requests access to device features (such as the camera or file storage), this access will only be used to support platform functions such as uploading photos or documents. All permissions must be granted by the user.

2. How We Use Your Information

Account Management: To create, maintain, and secure your user account.

Subscription & Billing: To process payments and manage subscriptions via Stripe.

Platform Improvement: To analyse user behaviour and enhance the Culinary Key platform.

Marketing & Communication: To send service updates and, where you have opted in, newsletters and promotional content. You can opt out at any time.

3. Legal Basis for Processing (UK GDPR)

Performance of a Contract: We process data necessary to provide our services.

Legitimate Interests: For analytics, fraud prevention, and service improvement.

Consent: For marketing communications and non-essential cookies. You can withdraw consent at any time.

Legal Obligations: To comply with tax, legal, and regulatory requirements.

4. Data Storage & Security

All data is securely stored in Google Firestore (Google Cloud), hosted within Google's secure infrastructure.

We employ encryption during data transmission. Users are responsible for securing their own account credentials.

4.1 Firebase Services

Culinary Key uses the following Google Firebase services to operate the platform:

No Firebase service used by Culinary Key collects personal information for advertising or profiling.

5. User Rights & UK GDPR Compliance

5.1 Right to Access & Download Data

Users can export audit records via the platform. Larger data exports can be arranged upon request to support@culinarykey.co.uk.

5.2 Right to Be Forgotten

Users can request complete data deletion by contacting support or using the account deletion process in the app. Account-related data will be permanently deleted 90 days after account termination.

5.3 Right to Data Portability

You may request a structured, machine-readable copy of your personal data at any time.

5.4 Right to Object & Restrict Processing

You can opt out of marketing emails at any time. Cookie preferences can be adjusted via the cookie banner at any time.

6. Third-Party Services & Data Sharing

We do not sell user data to third parties. We share data only with the following essential services:

Google Analytics / Google Tag Manager: Used for aggregated, anonymised usage analytics.

Stripe: Used for payment processing. Stripe processes billing data in accordance with its own privacy policy and PCI-DSS compliance.

Resend: Used for transactional email delivery (welcome emails, password resets, invitations).

6.1 Device Identifiers

When using the mobile app, Google Play Services and Firebase may collect device identifiers such as the Android advertising ID or installation ID. These identifiers are used solely for analytics, diagnostics, and fraud prevention. Culinary Key does not use these identifiers for advertising, tracking, or profiling.

7. Cookies & Tracking

Our platform uses cookies for session management, analytics, and personalisation. You are presented with a cookie consent banner on your first visit that allows you to accept or decline non-essential cookies.

7.1 Analytics Opt-Out

You may decline analytics cookies via the cookie banner. You can also contact us at support@culinarykey.co.uk to request removal from analytics tracking.

8. Data Retention Policy

User data is retained for as long as necessary to provide services or meet legal obligations. Account data is deleted 90 days after account closure, unless legally required to retain it.

9. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Users will be notified of significant changes, and continued use of our platform indicates acceptance of any updates.

10. Contact Us

For any privacy-related enquiries, please contact us at support@culinarykey.co.uk.

Company Information

Culinary Key Ltd

Registered in England and Wales

Company No: 16256914

Registered Office: Available upon request

By using Culinary Key via the website or mobile app, you acknowledge that you have read and understood this Privacy Policy.