Privacy Policy

The data controller is KUT KOST FOOD STORE LTD ("KOST Pantry", "we", "us"), registered at 82 Oak Crescent Mayfield, EH22 5JX, United Kingdom. For any privacy question, email support@kutkosfoosto.shop or call +44 7649689082.

• Order, fulfilment and delivery data: name, email, phone, shipping address (delivery address), city, postal code and country, together with the order contents and order history we need for order fulfilment, dispatch and delivery of your kits.
• Account and membership data: login email, membership plan, cycle preferences (skip / pause / cancel) and order history.
• Support data: messages you send via the contact and wholesale forms, and correspondence with our team.
• Payment and billing data: handled by our payment processor. We receive confirmation of payment, the billing country and a masked card reference. We never see or store full card numbers.
• Preference data: the answers you give the Pantry Match finder (flavour, dietary needs, heat, occasion, household, budget). These drive suggestions only.
• Technical data: IP address, device and browser type, and cookie identifiers as described in our cookie policy.

The sources from which we collect your personal data are:

• Directly from you when you browse, use the Pantry Match finder, place an order, provide a shipping address for order fulfilment, join a membership, or contact us via a form, email or phone.
• Automatically from your device via cookies and similar technologies (see our cookie policy).
• From our payment processor (Stripe), which returns limited transaction confirmations and the billing country after payment.
• From our delivery carriers, which return delivery and tracking status for your order.

• For order fulfilment — to process your order, dispatch to your shipping address and deliver your kits (including returns and replacement handling by our support team) — performance of a contract.
• To operate memberships, including recurring billing and portal changes — performance of a contract.
• To provide support and answer enquiries — performance of a contract and our legitimate interests.
• To retain checkout details as a lead for order follow-up and re-marketing where you have not completed payment — our legitimate interests, balanced against your rights; you may opt out at any time.
• To improve the site and prevent fraud/abuse — our legitimate interests.
• For analytics and non-essential cookies — your consent.
• To meet legal, tax and accounting duties — legal obligation.

• Payment processing: Stripe, which processes your card payment and billing details under its own terms. Stripe, not KOST Pantry, receives your full card number.
• Hosting and platform: our website host and deployment platform, which store and serve the site.
• Database and lead storage: our managed database provider, which stores orders, membership records and form leads.
• Delivery and logistics: the shipping carriers that transport your box; they receive the name and delivery address needed to deliver.
• Email and support tooling: providers that help us send transactional and support emails.
• Professional and legal advisers, and authorities where required by law.
• We do not sell your personal information.

We ship worldwide and use service providers that may process data outside the UK or the EEA. Where data is transferred internationally, we rely on appropriate safeguards such as UK International Data Transfer Agreements, the UK Addendum, or the EU Standard Contractual Clauses, and on adequacy decisions where they apply.

We keep order and delivery records for as long as needed to fulfil the order and to meet tax and accounting obligations. Marketing leads and finder preferences are retained for up to 24 months from your last activity, then deleted or anonymised. Support correspondence is kept for up to 24 months. You can ask us to erase your data sooner where no legal obligation requires us to keep it.

We use encryption in transit (HTTPS), access controls and reputable processors. Payment card data is handled entirely by our PCI-DSS compliant payment processor and does not reach our servers. No system is perfectly secure, but we take reasonable steps to protect your information.

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Erase your data ("right to be forgotten") where applicable.
• Restrict or object to processing, including direct marketing.
• Data portability.
• Withdraw consent at any time, without affecting prior processing.
• Under the CCPA: know what we collect, request deletion, and opt out of any "sale" or "sharing" of personal information — we do not sell or share it for cross-context behavioural advertising.

To exercise any right, email support@kutkosfoosto.shop. We respond within the timeframes required by law and will not discriminate against you for exercising your rights.

We do not sell your personal information and we do not share it for cross-context behavioural advertising. If this ever changes, we will update this policy and provide a clear opt-out mechanism before doing so.

We use strictly necessary cookies to run the cart and checkout, and, with your consent, analytics cookies to understand usage. See our cookie policy for the full list and how to manage them.

The Pantry Match finder makes preference-based suggestions only; it does not make decisions with legal or similarly significant effects. Our service is not directed at children. You must be 18 or older to hold an account and pay. Kits intended for younger family members are purchased by an adult. We do not knowingly collect data from children under 13; if you believe we have, contact us and we will delete it.

If you have a concern, contact us first. You may also complain to your data protection authority — in the UK, the Information Commissioner's Office (ICO). We may update this policy from time to time; the "last updated" date above shows the current version.