Last updated: 21 June 2026

Privacy Policy

This policy explains how Kiteline (?we?) collects and uses personal data when you use the service at kiteline.uk.

1. Data controller

Kiteline is the data controller. Contact: contact@kiteline.uk

2. Your organisation?s workspace

Each Kiteline customer gets a private workspace for their business. Your recipes, sites, team, temperature logs, checklists, and other operational data are stored separately from other customers. We do not mix your kitchen data with another company?s unless you explicitly share access within your own team (when that feature is enabled).

A separate internal sample workspace may be used by Kiteline staff for sales and testing ? it is not visible to normal customer accounts.

3. Data we collect

• Account data ? name, email, phone, password (stored hashed), role, language preference.
• Business data ? kitchen name, address, company details you enter at registration.
• Operational data ? temperature logs, checklists, recipes, allergen menus, labels, waste records, team members, and audit activity you store in the app.
• Technical data ? IP address, browser type, device identifiers, session tokens, security logs.
• Payment data ? processed by Stripe when you subscribe; we do not store full card numbers.
• Communications ? emails we send (verification, alerts, support) and messages you send us.

4. How we use data

• Provide, secure, and improve the Kiteline service.
• Authenticate users and manage subscriptions.
• Send food-safety alerts, verification emails, and service notices you request.
• Support early-access onboarding and hardware waitlists.
• Comply with law and prevent fraud or abuse.

5. Legal bases (UK GDPR)

We rely on: contract (to deliver the service), legitimate interests (security, product improvement), consent (where required, e.g. marketing), and legal obligation where applicable.

6. Sharing data & sub-processors

We do not sell your personal data. We may share data with sub-processors who help us run the service:

• Hosting ? Render (application hosting).
• Database ? Neon Postgres or configured database provider.
• Payments ? Stripe for billing when enabled.
• Email ? SMTP or transactional email provider when configured.
• SMS ? only when SMS alerts are live and you configure a provider (e.g. Twilio).
• CAPTCHA / security ? Cloudflare Turnstile where enabled (Academy).
• Professional advisers ? lawyers or accountants if required.
• Authorities ? if required by law.

B2B customers may request a Data Processing Agreement (DPA) ? email contact@kiteline.uk.

7. Retention & backups

We keep account and kitchen records while your account is active and for a reasonable period afterwards for backups, disputes, and legal compliance. Operational backups are typically retained for 30?90 days depending on environment. You may request deletion subject to legal and operational requirements.

8. Security

Passwords are hashed. Sessions use secure tokens. HTTPS is required in production. You should use strong passwords and protect devices used to access Kiteline.

9. Your rights

Under UK data protection law you may have rights to access, rectify, erase, restrict, object, and data portability.

• Export ? signed-in users can download a JSON export of their organisation?s workspace from Settings (or via GET /api/workspace/export).
• Deletion ? email contact@kiteline.uk to request account and workspace deletion. We will remove or anonymise personal data unless we must keep it for legal, billing, or security reasons.
• Complaints ? you may complain to the ICO (ico.org.uk).

10. Cookies & local storage

We use essential cookies and browser storage for login sessions and app preferences. See our Cookie Policy. We do not use third-party advertising cookies on the app.

11. International transfers

Where data is processed outside the UK, we use appropriate safeguards such as standard contractual clauses or providers in adequacy-approved countries.

12. Children

Kiteline is a business service not intended for children under 16.

13. Changes

We may update this policy. The ?Last updated? date will change and continued use means you accept the updated policy.

Privacy questions: contact@kiteline.uk