Privacy Framework

1. Core Data Philosophy

REDFERN KITCHEN LTD ("the Company", "we", "us") values the sanctity of your digital footprint as much as your physical health. This Privacy Policy outlines our uncompromising approach to data security, processing, and transparency. We operate in full compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018).

2. Categories of Intelligence Gathered

To provide our high-performance services, we process several categories of information:

• Identity Assets: Name, corporate title, and contact credentials.
• Bio-Data (Special Category): To ensure safety, we process dietary requirements, allergen profiles, and nutritional preferences. This data is handled with the highest tier of encryption and is only accessible by authorized medical/culinary staff.
• Geographic Vectors: Delivery coordinates and IP-based regional settings to optimize our cold-chain logistics.
• Fiscal Data: Transaction histories and corporate billing information, processed via PCI-DSS compliant third-party gateways.

3. Legal Bases for Processing

We do not process data without an explicit legal foundation:

1. Contractual Mandate: Necessary to fulfill your food orders and service agreements.
2. Legal Imperative: Required for UK food safety records and tax reporting.
3. Legitimate Interest: To refine our AI-driven logistics and provide you with relevant service updates.
4. Explicit Consent: Required for marketing intelligence and the processing of health-related dietary data.

4. Data Sovereignty & Rights

Under UK law, you possess absolute rights over your data:

• Right to Erasure: You may request the permanent deletion of your profile.
• Right to Portability: You can request your nutritional and transaction data in a machine-readable format.
• Right to Rectification: Immediate correction of any inaccurate personal data.