Privacy Policy

01 Introduction

This Privacy Policy describes how 304 Outdoor Kitchen ("we", "us", "our") handles personal information collected through our website at https://304outdoorkitchen.com, by email, by phone or messaging services, or through any other direct interaction with us.

We design, manufacture and supply customised 304 stainless steel outdoor kitchens, outdoor kitchen pods, BBQ grills and outdoor refrigerators, and we serve customers and trade partners internationally — including in the United Kingdom, Australia, Canada and the United States.

Because we work with customers in several jurisdictions, this policy is written to be consistent with:

• the EU General Data Protection Regulation (GDPR) and the UK GDPR (together with the UK Data Protection Act 2018);
• the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA);
• the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs);
• Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.

Where those laws give you rights that go beyond this policy, those laws prevail. This policy applies to our website and to our business-to-business and business-to-consumer communications; it does not apply to third-party websites we may link to.

02 Information We Collect

2.1 Information you give us directly

We collect the information you choose to provide when you fill in a form on our website (for example a quote request, product enquiry or contact form), when you write to us by email, or when you contact us by WhatsApp, phone or another messaging channel. This typically includes:

• Identity and contact details — your name, company name, email address, telephone or WhatsApp number, and country or region;
• Enquiry details — the products you are interested in, project type, dimensions, quantities, preferred delivery destination and any drawings, photos or specifications you send us;
• Order and transaction information — delivery address, billing information, purchase order references and correspondence relating to your order, where you place an order with us;
• Any other information you include in a message, attachment or file you send to us.

Please do not send us sensitive information (for example health data or government identification numbers) unless we specifically ask for it — we do not require it to answer an enquiry.

2.2 Information collected automatically

When you browse our website, certain technical information is collected automatically by our servers and by analytics and advertising tools, including:

• IP address and approximate location (derived from IP, at city or country level);
• browser type and version, operating system and device type;
• pages viewed, time spent, referring page or campaign, and links clicked;
• cookie identifiers and similar online identifiers (see Section 5).

2.3 Information from third parties

We may receive limited information about you from third parties, such as a dealer, distributor or referral partner who introduces you to us, or a messaging platform you use to contact us (for example, your WhatsApp display name and phone number). We may also receive aggregated, non-identifying reports from analytics and advertising providers.

We do not knowingly collect biometric data, precise geolocation, or the contents of your private communications beyond the messages you send to us directly.

03 How We Use Your Information

We use your personal information for the following purposes:

• Responding to enquiries — replying to your questions, preparing quotations and 3D drawings, and discussing your project requirements;
• Providing our products and services — processing orders, arranging production, shipping, delivery, installation guidance and after-sales support;
• Business communication — corresponding with you about your enquiry, order or account, and sending service messages;
• Marketing — sending you product updates, catalogues or offers, only where you have opted in or where we are otherwise permitted to do so (you can unsubscribe at any time);
• Improving our website and products — understanding how visitors use our site so we can improve its content, speed and usability;
• Advertising and measurement — showing relevant advertising on platforms such as Google and Meta, and measuring the performance of our campaigns;
• Security and fraud prevention — protecting our website, systems and business against misuse, spam, and fraudulent or unlawful activity;
• Legal and compliance — meeting our accounting, tax, export, customs and other legal obligations, and enforcing our agreements.

We do not sell your personal information, and we do not use automated decision-making that produces legal or similarly significant effects concerning you.

04 Legal Bases for Processing

Where the GDPR or UK GDPR applies, we rely on the following legal bases:

Where we rely on legitimate interests, we have balanced those interests against your rights and expectations, and you may object at any time (see Section 9). Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

We do not use your personal information for automated decision-making with legal or similarly significant effects, and we do not process it for purposes incompatible with those described in this policy.

05 Cookies & Tracking Technologies

Our website uses cookies and similar technologies (including pixels and local storage) to make the site work, to understand how it is used, and to measure and target our advertising. Cookies are small text files placed on your device.

5.1 Categories of cookies we use

Specific cookie names, providers and retention periods may change as we update our tools. We will keep this policy and our cookie notice reasonably up to date.

5.2 Managing cookies

Where required by law, we ask for your consent before placing non-essential cookies, and you can change or withdraw that consent at any time through our cookie banner or preferences panel. You can also control cookies through your browser settings — most browsers let you block or delete cookies, and you can set them to notify you when a cookie is set. Please note that blocking strictly necessary cookies may prevent parts of the website from working properly.

You can opt out of Google Analytics across all websites by installing the Google Analytics Opt-out Browser Add-on, and you can manage personalised advertising through your Google Ads and Meta (Facebook) ad settings.

We honour Global Privacy Control (GPC) signals where required by applicable law.

06 How We Share Information

We do not sell, rent or trade your personal information. We share it only in the limited circumstances below.

6.1 Service providers

We share information with third-party providers who process it on our behalf and under our instructions, including:

• Hosting and website services — our web host, content delivery and security providers;
• Analytics and advertising — Google (Google Analytics and Google Ads) and Meta Platforms (Meta Pixel and advertising tools), which may act as independent controllers for their own advertising purposes;
• Communication tools — email, CRM and messaging providers, including WhatsApp Business, used to correspond with you;
• Logistics and payment — freight forwarders, shipping carriers, customs brokers and payment providers, where required to fulfil your order;
• Professional advisers — accountants, auditors and legal advisers, where necessary.

6.2 Business partners

Where your enquiry relates to a dealer, distributor or partner in your region, we may share the information needed to progress your enquiry or order with that partner.

6.3 Legal requirements

We may disclose information where we are required to do so by law, regulation, court order or a competent authority, or where disclosure is necessary to establish, exercise or defend legal claims, to protect our rights or property, or to protect the safety of any person.

6.4 Business transfers

If our business or assets are reorganised, merged, sold or transferred, personal information may be transferred as part of that transaction. We will require the recipient to handle it consistently with this policy.

07 International Data Transfers

We are based in China and we work with service providers located in several countries. This means your personal information may be transferred to, stored in, and processed in countries other than the one in which you live — including China, the United States and other jurisdictions where our providers operate. Those countries may have data protection laws that differ from those in your own country.

Where we transfer personal information out of the UK, the EEA, Switzerland or another jurisdiction with transfer restrictions, we take steps to ensure an adequate level of protection, including:

• relying on an adequacy decision of the relevant authority, where one applies;
• putting in place standard contractual clauses or the UK International Data Transfer Addendum with the recipient; and
• carrying out transfer risk assessments and applying additional technical and organisational safeguards, such as encryption in transit and access controls, where appropriate.

You may contact us for more information about the safeguards we use for specific transfers.

08 How Long We Keep Information

We keep personal information only for as long as is necessary for the purposes described in this policy, and in line with our legal obligations. Our general retention periods are:

When information is no longer needed, we securely delete it or irreversibly anonymise it. Where deletion is not immediately possible (for example, because information is held in backup archives), we isolate and secure it until deletion becomes possible.

09 Your Privacy Rights

The rights available to you depend on where you live. We will respond to any request within the timeframe required by applicable law — generally within 30 days — and we will not discriminate against you for exercising your rights.

9.1 If you are in the UK, the EEA or Switzerland (GDPR / UK GDPR)

You have the right to:

• Access the personal information we hold about you and receive a copy;
• Rectify inaccurate or incomplete information;
• Erase your information, where there is no overriding legal reason for us to keep it;
• Restrict our processing in certain circumstances;
• Object to processing based on our legitimate interests, and to direct marketing at any time;
• Data portability — receive information you provided to us in a structured, commonly used, machine-readable format, or have it transmitted to another controller where technically feasible;
• Withdraw consent at any time where processing is based on consent;
• Lodge a complaint with your local supervisory authority — in the UK, the Information Commissioner's Office (ico.org.uk).

9.2 If you are in California (CCPA / CPRA)

You have the right to know what personal information we collect, use and disclose; to request deletion or correction of your personal information; to opt out of the "sale" or "sharing" of personal information (we do not sell personal information, and we do not share it for cross-context behavioural advertising in a way that we treat as a "sale"); to limit the use of sensitive personal information; and to designate an authorised agent to make requests on your behalf.

You may exercise these rights using the contact details in Section 14. We will verify your request using the information we already hold about you.

9.3 If you are in Australia (Privacy Act / APPs)

You may request access to the personal information we hold about you, ask us to correct it, and complain about a breach of the Australian Privacy Principles. We will respond within a reasonable period, and in any event within 30 days. If you are not satisfied with our response, you may refer the matter to the Office of the Australian Information Commissioner (oaic.gov.au).

9.4 If you are in Canada (PIPEDA)

You may request access to your personal information, ask for corrections, and withdraw consent to certain uses, subject to legal and contractual restrictions. If you are not satisfied, you may contact the Office of the Privacy Commissioner of Canada (priv.gc.ca).

9.5 How to make a request

Send your request to 304outdoorkichen@gmail.com with enough detail for us to identify you and understand what you are asking for. We may ask for proof of identity to protect your information. There is normally no charge for a reasonable request; where a request is manifestly unfounded or excessive, we may charge a reasonable fee or decline to act, as permitted by law.

10 Data Security

We use appropriate technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, loss or destruction. These measures include encryption of data in transit (HTTPS/TLS), access controls and authentication for our systems, least-privilege access for staff who need the information to do their work, restrictions on removable media and data exports, and regular review of our providers and internal practices.

No method of transmission over the internet or method of electronic storage is completely secure. While we take the protection of your information seriously, we cannot guarantee absolute security. If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant authority and, where required, affected individuals, without undue delay.

11 Children's Privacy

Our website and services are intended for adults and for business customers. We do not knowingly collect personal information from children under the age of 16 (or under 13 where a lower age threshold applies locally). If you believe a child has provided us with personal information, please contact us and we will take prompt steps to delete it.

12 Third-Party Links & Services

Our website may contain links to third-party websites, social media pages, video platforms and messaging services. We are not responsible for the privacy practices or content of those third parties. We encourage you to review their privacy policies before providing them with personal information. Video embeds and social plugins from third parties may set cookies or collect information about your visit independently of us.

13 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, our services or applicable law. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, provide a more prominent notice on our website or by email. We encourage you to review this page periodically.

Continued use of our website after an updated policy takes effect indicates your acknowledgement of the revised policy.

14 How to Contact Us

If you have any questions about this Privacy Policy, want to exercise any of your privacy rights, or wish to make a complaint about how we have handled your personal information, please contact us:

We take privacy complaints seriously and will investigate them promptly. If you are not satisfied with our response, you may contact your local data protection or privacy regulator — for example the ICO in the UK, the OAIC in Australia, the Office of the Privacy Commissioner of Canada, or your state Attorney General in the United States.