Privacy Policy
Last updated: 3 October 2026
This Privacy Policy explains how McBright Studio Ltd, trading as Audrey’s Kitchen, collects, uses, stores and protects your personal information when you visit our website, contact us, create an account, leave a comment or purchase products from our online shop.
1. Who we are
The data controller responsible for your personal information is:
McBright Studio Ltd
Company Registration Number: 14818279
Registered Office:
11 Grange Way
Markfield
LE67 9AJ
United Kingdom
Trading as: Audrey’s Kitchen
Website: audreyskitchen.uk
Email: hello@audreyskitchen.uk
If you have any questions about this Privacy Policy or how we handle your personal information, please contact us at hello@audreyskitchen.uk.
2. Personal information we collect
Depending on how you use our website, we may collect:
- your name;
- email address;
- billing address;
- telephone number, where provided;
- account username and account information;
- order and purchase history;
- payment and transaction information;
- comments and information submitted through forms;
- communications you send to us;
- IP address;
- browser and device information;
- information collected through cookies and similar technologies.
We only collect personal information that is reasonably necessary to operate our website, fulfil orders, provide customer service, comply with legal obligations and maintain the security of our website and business.
3. How we use your personal information
We may use your personal information to:
- process and manage orders;
- provide access to purchased digital products;
- process payments and refunds;
- communicate with you about your order;
- create and manage customer accounts;
- respond to enquiries;
- manage comments where commenting is enabled;
- provide customer support;
- maintain accounting, tax and business records;
- prevent fraud, misuse and security incidents;
- operate, maintain and improve our website;
- comply with legal and regulatory obligations.
We do not sell your personal information.
4. Lawful bases for processing
Under UK data protection law, we must have a lawful basis for processing personal information.
Depending on the circumstances, we rely on:
Contract – where processing is necessary to process your order, provide a purchased digital product, administer your customer account or otherwise perform our contract with you.
Legal obligation – where processing is necessary to comply with accounting, tax or other legal requirements.
Legitimate interests – where processing is necessary for the legitimate operation and protection of our business, including website security, fraud prevention, responding to enquiries and maintaining our services, provided those interests are not overridden by your rights and interests.
Consent – where we ask for your consent, for example for certain non-essential cookies or marketing communications. Where processing is based on consent, you may withdraw your consent at any time.
5. Orders and our online shop
Our online shop uses WooCommerce.
When you place an order, we may collect information including your name, email address, billing details, order details, payment method and other information necessary to process and administer your purchase.
We use this information to:
- process and fulfil your order;
- provide access to digital products;
- communicate with you about your purchase;
- process refunds where applicable;
- provide customer support;
- prevent fraudulent transactions; and
- maintain legally required accounting and tax records.
6. Digital products
Audrey’s Kitchen sells digital products, including downloadable recipe books.
When you purchase a digital product, we may process and retain information relating to your purchase and download so that we can provide the product, administer your order, provide customer support, maintain transaction records and protect our products against misuse or unauthorised distribution.
7. Payments
Payments on the Audrey’s Kitchen website may be processed through Stripe or PayPal.
When you select one of these payment methods, information necessary to process the transaction may be shared with the relevant payment provider. This may include your name, email address, billing information, transaction amount and payment-related identifiers.
Payment card details are handled by the relevant payment provider according to its own privacy and security practices. Audrey’s Kitchen does not need to receive or store your complete payment card details in order to process payments through these providers.
Stripe and PayPal process personal information in accordance with their own privacy policies.
8. Comments
If comments are enabled and you leave a comment on our website, we may collect the information entered in the comments form, together with your IP address and browser user agent information to assist with spam detection and website security.
An anonymised string created from your email address, sometimes called a hash, may be provided to the Gravatar service to determine whether you use that service.
If your comment is approved and you use Gravatar, your profile image may be publicly visible alongside your comment.
Visitor comments may also be checked using an automated spam-detection service.
9. Media
If the website allows you to upload images, you should avoid uploading images containing embedded location information, such as EXIF GPS data.
Visitors may be able to download publicly accessible images and extract embedded information from them.
10. Customer accounts
If you create an account on our website, we store the personal information associated with your account and profile.
You may be able to view and edit certain information through your account. Website administrators may also access and edit account information where necessary to operate the website and provide customer service.
If you request a password reset, technical information such as your IP address may be included in or associated with the password-reset process for security purposes.
11. Cookies and similar technologies
Our website uses cookies and similar technologies.
Some cookies are necessary for the website and online shop to function correctly. These may be used, for example, to:
- maintain your shopping basket;
- process checkout;
- maintain a logged-in session;
- remember certain website or account preferences;
- support website security.
If you leave a comment, you may be offered the option of saving certain information, such as your name and email address, in cookies for convenience.
When you log in, WordPress may use cookies to store login information and certain display preferences. Selecting options such as “Remember Me” may extend the duration of the login cookie.
Other cookies or similar technologies may be used for analytics, functionality or other purposes where permitted by law.
Where consent is legally required, non-essential technologies will only be used for the relevant purpose after the required consent has been obtained.
More detailed information is provided in our Cookie Policy.
12. Embedded content from other websites
Pages and articles on our website may contain embedded content, such as videos, images or other material provided by third-party websites.
Embedded content may behave in the same way as if you had visited the third-party website directly.
Those websites may collect information about you, use cookies or similar technologies, and monitor your interaction with their content. Their processing of your personal information is governed by their own privacy policies.
13. Who we share your information with
Where necessary, personal information may be shared with service providers and other organisations that help us operate our website and business.
These may include:
- Stripe;
- PayPal;
- WooCommerce and relevant website service providers;
- website hosting and technical service providers;
- spam prevention and website security services;
- professional advisers such as accountants or legal advisers;
- government authorities, regulators or law-enforcement bodies where disclosure is required by law.
We only share personal information where there is an appropriate legal or operational reason to do so.
14. International transfers
Some of the third-party service providers used by our website may process personal information outside the United Kingdom.
Where personal information is transferred internationally, we take appropriate steps to ensure that the transfer complies with applicable UK data protection law. This may include relying on applicable UK adequacy regulations or appropriate contractual safeguards.
You may contact us at hello@audreyskitchen.uk if you would like further information about safeguards relating to international transfers of your personal information.
15. How long we retain your information
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including meeting legal, accounting and tax requirements.
Our current retention periods for information held through our online shop are:
- inactive customer accounts: 24 months;
- pending orders: 7 days;
- failed orders: 7 days;
- cancelled orders: 30 days;
- refunded orders: 72 months;
- completed orders: 72 months;
- Stripe-related order data held through our website: 72 months.
After the applicable retention period, personal information may be deleted or anonymised where it is no longer required.
Certain information may be retained for longer where this is necessary to comply with a legal, accounting or tax obligation, resolve a dispute, prevent fraud or establish, exercise or defend legal claims.
If you leave a comment, the comment and associated metadata may be retained so that we can recognise and manage subsequent comments and maintain the integrity of discussions on the website.
16. How we protect your information
We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
Access to personal information is restricted to those who require it for legitimate business purposes, and we use appropriate service providers where third-party processing is necessary.
However, no method of transmitting or storing information online can guarantee absolute security.
17. Your data protection rights
Depending on the circumstances and the lawful basis for processing, UK data protection law may give you the right to:
- request access to personal information we hold about you;
- request correction of inaccurate or incomplete information;
- request deletion of your personal information;
- request restriction of processing;
- object to certain processing;
- request transfer of your personal information where the right to data portability applies;
- withdraw consent where processing is based on consent.
These rights are not absolute and may depend on the circumstances and our lawful basis for processing.
To exercise your rights, contact hello@audreyskitchen.uk.
We may need to verify your identity before responding to a request.
Your right to object
You have the right to object to processing of your personal information where we rely on legitimate interests as our lawful basis.
You also have the right to object at any time to the use of your personal information for direct marketing purposes.
18. Complaints
If you have concerns about how we process your personal information, please contact us first at:
You also have the right to make a complaint to the UK data protection regulator, the Information Commissioner’s Office (ICO).
19. Children
Our website and products are intended for a general audience and are not specifically directed at children.
We do not knowingly collect personal information from children where parental or guardian consent would be required by law.
20. Third-party websites
Our website may contain links to third-party websites.
We are not responsible for the privacy practices of third-party websites. If you follow a link to another website, you should review that website’s privacy information separately.
21. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our website, services, business practices or legal requirements.
The current version will be published on this page and the “Last updated” date at the top will be amended when appropriate.