Privacy Policy

10MinKitchen (“we”, “us”, “our”) is a digital product brand operated by the team behind 10minkitchen.com. Our registered address is in the European Union.

We can be contacted at: [email protected]

When you purchase from us or interact with our website, we may collect:

• Email address — provided at checkout to deliver your purchase and send your download link.
• Payment data — processed entirely by Stripe. We never see or store your full card number. Stripe’s privacy policy applies to payment data.
• IP address and device information — collected automatically via our hosting infrastructure and analytics tools.
• Browsing behaviour on our site — pages visited, time spent, actions taken, collected via analytics cookies (see our Cookie Policy).

We use your data for the following purposes:

• To deliver your digital purchase (PDF download link via email).
• To respond to customer support requests.
• To maintain transaction records as required by law.
• To detect and prevent fraud.
• To send occasional product updates or offers — only where you have given consent or where we have a legitimate interest (existing customers).
• To analyse site performance and improve the customer experience.

We process your data on the following legal bases under GDPR / UK GDPR:

• Contract execution — processing your order and delivering the product.
• Legitimate interest — fraud prevention, security, and improving our service.
• Legal obligation — retaining transaction records as required by applicable accounting and tax law.
• Consent — marketing communications where opt-in has been given.

We share your data only with the following third parties where necessary:

• Stripe Inc. — payment processing. Stripe is PCI-DSS compliant and handles all card data securely.
• Email delivery provider — for sending purchase confirmation and download link (provider TBD; we will update this policy on activation).
• Coolify / hosting provider — our self-hosted infrastructure provider processes server logs and IP data.
• Analytics tools — aggregated, anonymised usage data only (see Cookie Policy).

We do not sell your personal data to third parties.

Some of our service providers (including Stripe) are based in the United States. Where personal data is transferred outside the European Economic Area or the United Kingdom, we rely on appropriate transfer mechanisms — including Standard Contractual Clauses (SCCs) approved by the European Commission and UK International Data Transfer Agreements — to ensure an adequate level of protection.

• Transaction records — retained for 7 years as required by EU and UK accounting law.
• Marketing data — retained until you opt out or withdraw consent, whichever is earlier.
• Support correspondence — retained for up to 3 years.

Under GDPR, UK GDPR, and (for California residents) CCPA, you have the following rights:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — request deletion of your personal data, subject to legal retention obligations.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interest.
• Restriction — ask us to restrict processing in certain circumstances.
• Withdraw consent — at any time, for consent-based processing.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

We use cookies to operate the site and understand how visitors use it. For full details, see our Cookie Policy.

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top. Continued use of the site after changes constitutes acceptance of the updated policy.

For any privacy-related questions or requests: [email protected]. You can also use our contact form.