Privacy policy

1. Who we are

Giggle Kitchen Ltd ("Giggle Kitchen", "we", "us", "our") is a company registered in England and Wales under company number 17026974, with our registered office at 21 Granville St, Deal, Kent, CT14 7EZ. We operate gigglekitchen.co.uk (the "Website") and supply monthly recipe kits for families.

We are the data controller responsible for your personal data. We are registered with the Information Commissioner's Office (ICO) under registration number ZC180666.
If you have any questions about this policy or your personal data, contact us at dan@gigglekitchen.co.uk.

This policy was last updated: 13/7/26.

2. The data we collect about you

Personal data means any information about an individual from which that person can be identified. Depending on how you interact with us, we may collect:
•  Identity data - your first and last name
•  Contact data - delivery address, billing address, email address and phone number (used for delivery notifications)
•  Financial data - payment card type, expiry date and the last 4 digits of your card number (full card details are processed and stored by our payment providers, not by us)
•  Transaction data - your order and subscription history, payments and refunds
•  Profile data - your account login details, delivery day preference, and any dietary or allergen information you choose to share with us
•  Technical and usage data - IP address, browser type, device information, and how you use our Website (collected via cookies - see section 7)
•  Marketing preferences - whether you have opted in to our newsletter and how you prefer to hear from us
•  Content you share with us - survey responses, reviews, and any photos or videos you send us or tag us in
We do not knowingly collect special category data (such as health information), although if you tell us about a family allergy so we can suggest alternatives, we will hold that information only to help you and will not use it for any other purpose.

3. How we collect your data

•  Directly from you - when you place an order, create an account, subscribe to our newsletter, complete a survey, contact us by email, or share content with us
•  Automatically - through cookies and similar technologies when you use our Website (see section 7)
•  From third parties - our payment providers (confirmation of payment), our courier DPD (delivery status), and social media platforms if you interact with our accounts

4. How we use your data and our lawful bases

We only use your personal data where the law allows. Our main uses are:
•  To process your orders, take payment, manage your subscription and deliver your boxes - lawful basis: performance of a contract
•  To manage your account and respond to your questions and requests - performance of a contract
•  To notify you about changes to your order, our terms or this policy - performance of a contract / legal obligation
•  To send you our newsletter and marketing about Giggle Kitchen, where you have opted in or are an existing customer who has not opted out - consent / legitimate interests (see section 5)
•  To improve our Website, products and service, including analysing how the Website is used - legitimate interests
•  To use photos, videos and reviews you share with us in our marketing, where you have given permission - consent
•  To prevent and detect fraud, including misuse of promotional offers - legitimate interests / legal obligation
•  To keep records required for tax and accounting purposes - legal obligation

5. Marketing

We will only send you marketing emails if you have subscribed to our newsletter, or if you are an existing customer and have not opted out (in which case we rely on the 'soft opt-in' under UK e-privacy rules to tell you about similar products and offers).
Every marketing email includes an unsubscribe link, and you can opt out at any time by clicking it or emailing dan@gigglekitchen.co.uk. Opting out of marketing does not affect service emails we need to send you about your orders and subscription (such as order confirmations, delivery notifications and payment issues).
We do not sell your personal data to anyone.

6. Children

Giggle Kitchen is designed for families, but our Website and service are directed at adults: all accounts, orders and subscriptions must be created and managed by someone aged 18 or over, and we do not knowingly collect personal data from children.
If you choose to share photos or videos of your children with us (for example, of your family cooking), we will only use them in our marketing with the express permission of a parent or guardian, and you can withdraw that permission at any time by emailing dan@gigglekitchen.co.uk, after which we will stop future use within a reasonable period.

7. Cookies

Cookies are small text files placed on your device when you visit our Website. We use:
•  Essential cookies - required for the Website to function, including the shopping basket, checkout and your cookie preferences. These cannot be switched off.
•  Analytics cookies - help us understand how visitors use the Website so we can improve it (we use analytics tools such as Google Analytics)
•  Marketing cookies - help us measure the effectiveness of our advertising (we use advertising tools such as the Meta Pixel)
When you first visit our Website you can accept or reject non-essential cookies via the cookie banner, and you can change your preferences at any time via the cookie settings link in our footer or your browser settings.

8. Who we share your data with

We share your personal data only with trusted service providers who help us run Giggle Kitchen, and only to the extent needed:
•  Shopify - our e-commerce platform, which hosts our Website, accounts and orders
•  Appstle - our subscription management provider, which manages recurring orders and your customer portal
•  Our payment providers (via Shopify Payments, including Shop Pay and Google Pay) - who process your payment securely; we never see your full card details
•  DPD - our delivery courier, who receives your name, delivery address, email and phone number to deliver your box and send tracking notifications
•  Our email marketing platform (Klaviyo) - which sends our newsletter to subscribers
•  Tally - our survey platform, if you complete one of our feedback surveys
•  Analytics and advertising providers (such as Google Analytics and Meta) - who receive technical and usage data, subject to your cookie preferences
•  Professional advisers (accountants, lawyers, insurers) where necessary
•  HMRC, regulators and law enforcement where we are legally required to do so
We require all service providers to protect your data and to use it only on our instructions. If Giggle Kitchen is ever sold or merged, your data may transfer to the new owners, who must use it in line with this policy.

9. International transfers

Some of our service providers (such as Shopify and our email platform) store or process data outside the UK, including in Canada and the United States. Where this happens, the transfer is protected by UK adequacy regulations or appropriate safeguards such as the UK International Data Transfer Agreement or the UK extension to the EU-US Data Privacy Framework.

10. Data security

We use appropriate technical and organisational measures to protect your data, including SSL encryption on our Website and access controls limiting who can see your data. Payments are processed by PCI-DSS compliant providers. We have procedures in place to deal with any suspected data breach and will notify you and the ICO where legally required.

11. How long we keep your data

•  Order and transaction records - 7 years after your last order, to meet tax and accounting requirements and to handle any questions or claims
•  Account data - for as long as your account is active, and deleted or anonymised within a reasonable period after closure
•  Marketing data - until you unsubscribe, after which we keep a minimal suppression record so we do not contact you again
•  Photos, videos and reviews - until you withdraw permission
•  Survey responses - up to 2 years, after which they are anonymised

12. Your rights

Under UK data protection law you have the right to:
•  Access the personal data we hold about you (a subject access request)
•  Have inaccurate data corrected
•  Have your data erased, where there is no good reason for us to keep it
•  Object to our processing, including for direct marketing (which we will always stop on request)
•  Restrict our processing in certain circumstances
•  Receive your data in a portable format
•  Withdraw consent at any time, where we rely on consent
To exercise any of these rights, email dan@gigglekitchen.co.uk. We will respond within one month. There is no fee unless a request is clearly unfounded or excessive. We may ask you to verify your identity before acting on a request.

13. Complaints

If you are unhappy with how we have handled your data, please contact us first at dan@gigglekitchen.co.uk and we will do our best to put it right. You also have the right to complain at any time to the Information Commissioner's Office (ICO), the UK regulator for data protection: ico.org.uk.

14. Changes to this policy

We may update this policy from time to time. Changes will be posted on this page with an updated date, and we will notify you by email of any material changes that affect how we use your data.

Giggle Kitchen Ltd | Company number 17026974 | Registered office: 21 Granville St, Deal, Kent, CT14 7EZ | dan@gigglekitchen.co.uk