Who we are
This store is Chef Kenji Recommends, trading at chef-kenji.com. For the purposes of the UK and EU General Data Protection Regulation we are the data controller for everything described here. You can reach us about any of it at info@chef-kenji.com.
What we collect
- What you give us at checkout: your name, delivery address, email address, a phone number if you enter one, and what you ordered.
- What your browser gives us: IP address, device and browser type, which sections you read, and where you arrived from. This is the standard analytics any shop sees and it does not tell us who you are.
- What you write to us: the content of your emails and our replies.
We do not ask for your date of birth, your gender, or anything else we have no use for, and we do not knowingly collect anything at all from anyone under sixteen.
Your card
We never see it. Payment is processed by Shopify Payments and the card networks. Your card number does not pass through, and is not stored on, any system we control. We see the last four digits and the card brand on the order and nothing else.
Why we are allowed to hold it
- To perform the contract you entered when you bought a knife: your address and your order, without which we cannot send it.
- Because the law requires it: order and tax records, kept for as long as tax law says and no longer.
- Because we have a legitimate interest: fraud checks, and knowing how many people read the page.
- Because you agreed: marketing email, and only if you ticked the box. You can untick it from any email we send, in one click, forever.
Who else sees it
- Shopify, which runs the shop and the checkout.
- Shopify Payments and the card networks, for the payment itself.
- Our fulfilment partner and the carrier, who need your name and address to put the parcel in your hand.
- Analytics and advertising platforms, in aggregate, if you allowed those cookies.
We do not sell your personal information. We do not rent our list. We do not hand your email to anybody for their own advertising.
Where it goes
Some of those processors sit outside the United Kingdom and the European Economic Area, including in the United States and, for fulfilment, in China. Where that happens the transfer relies on the European Commission's standard contractual clauses or an equivalent approved mechanism.
How long we keep it
Order records for as long as tax and accounting law requires, currently seven years. Marketing consent until you withdraw it. Support email for two years. Analytics only in an aggregated form that is no longer about you.
Your rights
Wherever you live you can ask us to show you what we hold, correct it, delete it, stop using it for marketing, or send it to you in a portable file. Email info@chef-kenji.com and we will do it within thirty days, free of charge.
If you are in the EEA or the UK you also have the right to object to processing, to have it restricted, and to complain to your national data protection authority.
If you are in California you have the right under the CCPA and CPRA to know what is collected, to have it deleted, to have it corrected, and to opt out of sale or sharing. We do not sell or share personal information as those terms are defined, so there is nothing to opt out of, but the request route is the same address and we will never treat you differently for asking.
We will ask you to confirm you are who you say you are before handing over or deleting anything. That protects you, not us.
Security, and being straight about it
The site runs over TLS, the checkout is Shopify's, and access to order data is limited to the people who have to fulfil it. No system is perfectly secure, and anybody who tells you otherwise is selling something. If a breach ever affects your data we will tell you and the relevant authority inside the time the law allows.