Privacy Policy
Last updated: 2 October 2026
Contents
- Who we are and what this notice covers
- Personal data we collect, and how we collect it
- Why we use it, including payment records
- Who we share data with, and transfers outside the UK
- How long we keep data, and how we protect it
- Your rights, children, and changes
Who we are
This privacy notice explains how KUTCHENHAUS THEALE LTD (“we”, “us”) handles personal data when you use kutchenhausltd.com, send an order request, contact us, or join the newsletter.
We are the data controller. Company number 14863205. Registered office: 19 High Street, Theale, Reading, England RG7 5AH. Email [email protected]. Telephone +441183571988.
We handle personal data under the UK GDPR and the Data Protection Act 2018. This notice is written for customers and visitors in the United Kingdom.
What this notice covers
It covers the website, product enquiries, basket and checkout requests, customer support, delivery arrangements within the United Kingdom, complaints, and optional email updates.
It does not cover websites we only link to. Those sites have their own notices. It does not cover a fitter, plumber, or electrician you appoint yourself.
An order request is not yet a contract. Personal data we need only after a written confirmation, for an invoice or a delivery, is then used for that contract. The contract rules are in the Terms and Conditions.
Words used in this notice
- Personal data means information that identifies you, or could reasonably be used to identify you, such as a name with an address or an email that belongs to you.
- Processing means collecting, storing, using, sharing, or deleting that information.
- Order request means the basket you submit. It asks us to review a kitchen specification. It is not a card payment and not our acceptance of a contract.
Personal data we collect
We collect only what we need to answer you and to handle a kitchen order request.
- Identity and contact details: name, email, telephone, and company name if you give one.
- Delivery details: address, town or city, and postcode, when you ask for delivery.
- Order details: products, finishes or lengths, quantities, notes, and the reference we assign.
- Correspondence: messages you send through the contact form, email, or telephone.
- Newsletter data: the email address you submit, and the page you subscribed from.
- Technical data: IP address, browser and device type, pages viewed, and the time of the visit, where our systems record them.
- Cookie and consent choices stored in this browser, as described in the Cookie Policy.
How we collect it
Most data comes from you: forms, the basket, checkout, email, and telephone.
Some data is created by us, such as an order reference, or collected automatically by the site so the basket, security checks, and consent choice can work.
We do not buy marketing lists, and we do not ask you to create an account to send an order request.
Why we use personal data
Each purpose has a legal basis under the UK GDPR.
- To review an order request, confirm availability, and arrange delivery or a reply: performance of steps you ask us to take before a contract, and then the contract itself if we accept the order.
- To keep records of quotes, invoices, and correspondence: legal obligation and our legitimate interest in running an accurate business.
- To answer questions and handle complaints or returns: contract, legitimate interests, and, where relevant, legal obligation.
- To protect the site against misuse and to keep the basket working: legitimate interests.
- To send a newsletter you asked for: consent. You can withdraw that consent at any time.
- To use optional analytics or marketing cookies: consent, as set out in the Cookie Policy.
We do not make a decision about you by solely automated means that produces a legal effect. A person reviews an order request before we confirm it or ask for payment.
If you give us details of another person, for example a delivery contact, you confirm that you may share those details with us for that purpose.
Payment information
An order request on this site is not a card payment. We review the request and then send payment instructions or an invoice.
Do not put a full card number, expiry date, or security code in a website form or in ordinary email. If a protected payment page is offered later, that page is operated so that we do not store the full card details.
We may keep a limited record that a payment was requested, received, or refunded, so we can reconcile the order and meet accounting duties.
Who we share data with
We do not sell personal data. We share it only where someone else needs it to do a defined job for us.
- Delivery providers, and only the name, address, telephone, and parcel details needed for a United Kingdom delivery.
- Our email, hosting, and technical support providers, so the site and messages can function.
- Professional advisers or authorities where the law requires a disclosure, for example a tax or legal duty.
- Analytics or advertising tools only if they are actually switched on and only after the matching cookie consent.
Those providers may act as processors on our instructions or, in some cases, as independent controllers of their own systems. We do not publish a list of brand names here unless a provider is named elsewhere on the site.
International transfers
We are established in the United Kingdom and aim to keep customer records there. Some infrastructure providers may process data outside the UK.
Where that happens, we rely on an approved transfer mechanism, such as the UK adequacy regulations or the UK International Data Transfer Agreement, together with the supplier’s security terms.
How long we keep data
We keep personal data only for as long as the purpose, or the law, requires.
- Order requests, invoices, and related correspondence: for the life of the enquiry or order, and then for the period we need for tax, accounting, and possible disputes. That is commonly up to six years after the relevant financial year, unless a shorter or longer period is required.
- Support messages that do not become an order: usually up to 24 months after the last reply, unless we need them for a complaint.
- Newsletter details: until you unsubscribe or we stop the list, and for a short period afterwards so we can show that we honoured the request.
- Technical and security logs: for a limited period measured in weeks or months, depending on the log.
- Cookie consent stored in the browser: until you change it, clear site data, or the browser removes it.
Security
We use reasonable technical and organisational measures: access limited to people who handle orders and accounts, care with email, and ordinary hosting protections.
No website can promise that transmission is risk-free. Please use a current browser and do not send card details in open email.
Your rights
Depending on the request and the legal basis, you may ask us to:
- confirm whether we hold your data and provide a copy;
- correct inaccurate data;
- delete data where we no longer have a reason to keep it;
- restrict or object to certain processing, including processing based on legitimate interests;
- receive data you provided, in a portable form, where the right applies;
- withdraw consent for the newsletter or optional cookies, without affecting processing that was lawful before withdrawal.
Write to [email protected] or call +441183571988. Include enough detail for us to find the request, such as your name, email, and any order reference. We may ask you to confirm your identity before we release information.
You can also complain to the Information Commissioner’s Office (ICO) at ico.org.uk. We would like the chance to put things right first.
A typical request works as follows. You write to [email protected] and say which right you are using. You include your name, the email on the order, and any reference such as ORD- or MSG-. We may ask a short question to check that the request comes from you. We reply within one month, or we tell you if we need more time because the request is complex. If we cannot do what you ask, we explain why and remind you of the ICO.
Related pages
Cookies and similar technologies are described in the Cookie Policy. Payment, delivery, returns, and customer service are described in the Payment Policy, Shipping Policy, Returns Policy, and Service Policy.
Children
This shop is aimed at adults planning a kitchen. We do not knowingly collect personal data from children. If you believe a child has sent us data, contact us and we will delete it where we are allowed to.
Changes to this notice
We may update this page when the shop, our suppliers, or the law changes. The date at the top is the current version. The new text applies from the date it is published, except where the law requires otherwise for data we already hold.
Questions about this notice: KUTCHENHAUS THEALE LTD, 19 High Street, Theale, Reading, England RG7 5AH, [email protected], +441183571988.