Skip to main content
Chef Winston

Privacy Policy

How Chef Winston Thomas collects, uses, and protects your personal data in compliance with GDPR.

Last updated: 1 January 2025

1. Who We Are

This website is operated by Winston Thomas, trading as Chef Winston Thomas Private Chef Services, based in Heemstede, North Holland, the Netherlands. We are committed to protecting your privacy and handling your personal data transparently and responsibly.

For any privacy-related questions, you may contact us at:
Email: info@chefwinstonthomas.com

2. What Data We Collect

When you use our contact form, we collect the following personal data:

  • Name — to address you personally in our response
  • Email address — to reply to your inquiry
  • Phone number (optional) — to contact you if preferred
  • Event type, date, and guest count — to understand your requirements
  • Message content — the details of your inquiry

We do not collect any data beyond what you voluntarily provide through the contact form. We do not use tracking cookies, analytics scripts, or any third-party data collection tools on this website.

3. Why We Collect Your Data

We collect your personal data solely for the following purposes:

  • To respond to your inquiry about our private chef, catering, or cooking class services
  • To prepare a personalised quote or menu proposal based on your event details
  • To communicate with you about potential bookings and service arrangements

4. Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data on the following legal bases:

  • Consent — By submitting the contact form, you consent to us processing your data for the stated purposes.
  • Legitimate interest — We have a legitimate business interest in responding to inquiries and providing quotes for our services.
  • Pre-contractual measures — Processing is necessary to take steps at your request prior to entering into a service agreement.

5. How Long We Keep Your Data

We retain personal data submitted through the contact form for a maximum of 2 years from the date of submission. After this period, your data is permanently deleted from our systems. You may request earlier deletion at any time by contacting us at the email address above.

6. Your Rights Under GDPR

As a data subject, you have the following rights:

  • Right of access — You may request a copy of the personal data we hold about you.
  • Right to rectification — You may request that we correct any inaccurate or incomplete data.
  • Right to erasure — You may request that we delete your personal data at any time.
  • Right to data portability — You may request your data in a structured, commonly used format.
  • Right to withdraw consent — You may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
  • Right to lodge a complaint — If you believe your data protection rights have been violated, you have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

To exercise any of these rights, please contact us at info@chefwinstonthomas.com.

7. Cookies

This website uses only essential, strictly necessary cookies required for the website to function properly. We do not use any tracking cookies, advertising cookies, or analytics cookies. No cookie consent banner is required as we do not process any non-essential cookies.

8. Third Parties

We work with the following third-party services that may process your data:

  • Resend — Our email delivery service, used to send contact form submissions to our inbox. Resend processes your name and email address solely for email delivery purposes. Their privacy policy is available at resend.com/privacy.
  • Cloudflare — Our hosting and content delivery provider. Cloudflare may process basic request data (IP address, browser type) for security and performance purposes. Their privacy policy is available at cloudflare.com/privacypolicy.

We do not sell, rent, or share your personal data with any other third parties.

9. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. All data transmissions to this website are encrypted via HTTPS/TLS.

10. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or applicable law. The "Last updated" date at the top of this page indicates when the policy was last revised. We encourage you to review this page periodically.

11. Contact

If you have any questions about this privacy policy or how we handle your data, please contact us: