About this privacy policy
These stipulations govern the use of kastelculinary.shop, associated transactions, and inbound correspondence. External platforms reached via outward hyperlinks operate under independent data protocols beyond our jurisdiction.
Controller identity and contact details
The data controller is Kastel Culinary LLC, domiciled at 750 Main St, Grand Junction, CO 81501, United States. Privacy inquiries may be submitted to [email protected] or placed by telephone to +1 (970) 552-2716.
- Merchant
- Kastel Culinary LLC
- Registered address
- 750 Main St, Grand Junction, CO 81501, United States
- [email protected]
- Phone
- +1 (970) 552-2716
Categories of personal data collected
Collection remains restricted strictly to records necessary to fulfill the operational purposes specified below.
3.1 Information you provide directly
Full name, destination address, email, and telephone number upon ordering, alongside any text submitted via correspondence or customer assessments. Transaction records persist through statutory accounting mandates, whereas general correspondence is retained for up to 3 years following the final interaction.
3.2 Payment and transaction data
Order reference, selected hardware, invoice totals, chosen settlement method, and fulfillment status. Card credentials and electronic banking details are never collected directly on this platform. Data is preserved for the statutory accounting period.
3.3 Automatically collected information
Network address, browser environment, hardware specifications, viewing history, origin URLs, and visit timestamps, captured via server protocols and the cookies detailed in our Cookie Policy. Server logs clear after 30 days; aggregated analytical metrics remain for up to 14 months.
3.4 Marketing and advertising data
Marketing identifiers, referral links, or promotional assets directing your session, maintained solely to correlate subsequent acquisitions with the originating source. Stored for up to 90 days.
3.5 Data obtained from external operational partners
Transit notices supplied by parcel carriers and payment confirmations transmitted by processing services, reconciled directly against your file.
3.6 Children
Our platform does not cater to individuals below the age of 18. We do not intentionally compile records on minors; a legal guardian may instruct [email protected] to purge any inadvertently gathered material.
Mandatory information requirements
Recipient name, consignment address, email, and contact number are strictly necessary to route shipments and provide transit updates; without these, an order cannot proceed. Remaining fields are submitted entirely at your discretion.
Purposes of personal data processing
- To fulfill, transport, and invoice workshop orders, as well as to process returns and corresponding reimbursements.
- To address specific inquiries and dispatch procedural updates regarding your parcel via email or text message.
- To safeguard digital infrastructure, intercept fraudulent attempts, and evaluate general usage patterns across the site.
- To distribute product releases or editorial notes only upon prior opt-in, with an immediate revocation mechanism attached to every dispatch.
- To comply with statutory governance, including fiscal and accounting retention mandates.
Disclosures to third parties
We do not trade personal records. Information is remitted exclusively to the downstream partners identified below, each operating under binding obligations to act solely upon our directive.
6.1 Payment processing
The processing entity associated with your chosen settlement path receives the data points strictly required to execute and balance the charge.
6.2 Shipping and fulfilment partners
Carriers receive your name, physical address, and telephone number solely to accomplish transport and relay essential dispatch notifications.
6.3 Service providers
Server infrastructure hosts, digital messaging utilities, and client inquiry platforms handle technical records under strict mandate.
6.4 Advertising and analytics partners
Analytical and advertising trackers, installed only with explicit permission, pass navigational metrics to designated providers as set forth in the Cookie Policy.
6.5 Legal and regulatory disclosures
Records may be released where compelled by law or where necessary to assert legitimate interests in contentious order disputes.
6.6 Business transfers
Should the enterprise undergo acquisition, restructuring, or transfer, customer information migrates to the successor entity under equivalent safeguards.
International data transfers
Certain service entities may handle data outside United States. In those instances, transfer mechanisms rely upon adequacy rulings or formal standard contractual clauses to preserve comparable data protections.
Your rights and choices
Pursuant to the applicable U.S. state privacy laws, including the CCPA/CPRA, you hold consumer privacy rights.
8.1 Access, rectification, erasure, and data transfer
You may request inspection of stored files, demand corrections, require complete erasure, obtain an export in standard digital structure, object to or curb processing, and retract previous permissions without altering earlier lawful handling.
8.2 Marketing choices
All informational newsletters contain an opt-out link. Furthermore, tracking preferences for analytics and advertising can be revised via the consent tool whenever desired.
8.3 Exercising your rights
Direct requests to [email protected]. Identity validation may be required prior to disclosure, with responses furnished within 30 days. You retain the right to lodge a grievance with the supervisory authority in United States.
Data security
Traffic is secured via HTTPS protocols. Order archives reside on access-restricted platforms accessible only to personnel and partners bound to the duties detailed above. Card information is never captured or archived on our servers.
Data retention
Commercial records and ledger files are maintained through the statutory accounting interval before systematic deletion. Communication logs persist for up to 3 years following the most recent contact. Server records purge after 30 days, aggregated analytics expire after 14 months, and promotional consents remain active until explicitly rescinded.
Third-party websites and services
Outbound hyperlinks directed toward social channels, external platforms, or settlement processors lead to environments governed by independent privacy rules. We assume no liability for their data practices.
Changes to this policy
This text is amended as legal standards or internal procedures evolve. The prevailing framework is perpetually represented on this page, bearing the revision date in the header.
Kastel Culinary