PRIVACY
Privacy Policy
Last updated: 22 July 2026
1. Who is responsible for your data
The controller under the Singapore Personal Data Protection Act 2012 (PDPA) and, where applicable, the EU and UK General Data Protection Regulation (GDPR) is:
Culturetek Pte. Ltd.
UEN 202411392W
6 Raffles Quay #14-02
Singapore 048580
Email: hello@linanoa.com
This Policy covers thelivingkitchen.net, member accounts, checkout, the screening room, recipe access and support correspondence.
2. What data we collect
Account data
Your email address, password stored only as a salted cryptographic hash by our authentication provider, display name if supplied, account identifier, registration date and settings.
Membership and payment data
Your selected plan, subscription and payment status, renewal date, currency, amount, Stripe customer/subscription references, billing country and limited card information where Stripe provides it. Full card numbers, CVC codes and bank credentials are entered into Stripe and do not reach our systems.
Library activity
Your membership access, saved recipes and favourites, protected-film access requests and downloads needed to provide and secure the Service. We do not record the contents of your private cooking activity beyond what is necessary for account functions and security.
Technical data
IP address, browser and device type, operating system, language, referring page, requested pages, timestamps, security events and server error logs. Servers create access logs as part of delivering and protecting a website.
Correspondence
Messages you send to our support email and our replies.
3. Why we use data and our legal basis
- Contract: create your account, provide membership, stream protected films, deliver recipes, process billing and support cancellation.
- Legitimate interests: secure the Service, prevent fraud and account sharing, diagnose faults, maintain records and improve reliability.
- Legal obligations: accounting, tax, consumer-protection requests, lawful authority requests and dispute records.
- Consent: where the law requires consent for a specific optional feature or non-essential technology. You may withdraw consent prospectively.
4. Payments through Stripe
Stripe acts as payment provider. Payment details are transmitted directly to Stripe. We receive only the information needed to confirm a purchase, manage renewal, connect a subscription to your account, provide the billing portal and maintain transaction records.
Stripe’s own privacy policy governs its processing as an independent provider.
5. Service providers
We share only the information necessary for each provider’s role:
- Supabase: authentication, account database, membership status and saved-recipe functionality.
- Stripe: checkout, payments, recurring subscriptions, invoices, tax-related checkout information and customer billing portal.
- Hostinger and our secured server infrastructure: website delivery, protected media streaming, networking, backups and security logs.
- Email infrastructure: account confirmation and support correspondence where enabled.
Providers are required to protect data and may process it only under their applicable agreements and legal obligations. We do not sell personal data.
6. International transfers
Culturetek is established in Singapore and our providers may process data in Singapore, the European Economic Area, the United States or other countries where they operate. Where GDPR transfer restrictions apply, we use recognised transfer mechanisms such as adequacy decisions, Standard Contractual Clauses or another lawful safeguard.
8. Retention
- Account and membership data: while the account is active and for a limited period after closure where needed for support, fraud prevention or legal claims.
- Transaction records: for the period required by accounting, tax and company law.
- Saved recipes and favourites: until you remove them or the account is deleted.
- Security and access logs: for a limited operational period unless an incident requires longer preservation.
- Correspondence: for as long as needed to answer the request and maintain appropriate dispute records.
When data is no longer needed, it is deleted or anonymised, subject to secure backup rotation and legal retention duties.
9. Your rights
Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing, receive portable data, withdraw consent and complain to a supervisory authority.
To exercise a right, email hello@linanoa.com with “The Living Kitchen data request” in the subject. We may ask for proportionate proof of identity. We respond within the statutory period applicable to your request.
You may cancel membership through the billing portal. Cancellation does not itself delete legally required transaction records.
10. Children
Paid accounts are intended for adults able to enter a contract. A parent or legal guardian may supervise household use of general cooking content, but children should not create accounts or submit personal data themselves. If you believe a child supplied data without appropriate authorisation, contact us so we can investigate and remove it.
11. Security
We use encrypted transport, access controls, row-level database security, signed payment webhooks, private media storage and membership checks. No online system can guarantee absolute security. Please use a unique password and report suspected unauthorised access promptly.
12. Changes
We may update this Policy as the Service, providers or law changes. The current version and update date are always published here. We will provide additional notice where a material change requires it.
13. Contact
Culturetek Pte. Ltd.
UEN 202411392W
6 Raffles Quay #14-02
Singapore 048580
Singapore
Email: hello@linanoa.com