GDPR Compliance Policy

Last Updated: April 03, 2026

1. Introduction

flavordishkitchen (“we”, “our”, “us”) respects your privacy and is committed to protecting your personal data in accordance with the European Union General Data Protection Regulation (GDPR). This policy explains what personal data we collect, how we use it, the legal bases for processing, your rights under the GDPR, and how you can exercise those rights.

2. Data We Collect

When you interact with our website (https://flavordishkitchen.com), we collect the following types of personal data:

• Email addresses: When you sign up for newsletters, create an account, or request recipes, we record the email address you provide.
• Cookies & tracking: We use first‑party cookies to store session information, preferences, and to deliver a personalized experience. We also use third‑party analytics cookies (e.g., Google Analytics) to gather aggregated visitor statistics.
• Analytics data: We collect IP addresses, device identifiers, browser type, operating system, and referral information for performance monitoring and improvement of our services.

3. How We Protect Your Data

We employ a range of technical and organisational measures to safeguard your personal data:

• SSL/TLS encryption: All data transmitted between your browser and our servers is encrypted using HTTPS.
• Secure servers: We host our website on secure, fire‑walled servers with regular vulnerability scans and penetration testing.
• Access controls: Only authorised personnel with a legitimate business need can access personal data, and they are bound by confidentiality agreements.
• Data minimisation & retention: We retain personal data only as long as necessary to fulfil the purposes for which it was collected, after which it is securely deleted.

4. Legal Basis for Processing

We process your personal data on one or more of the following lawful bases:

• Consent: When you voluntarily sign up for newsletters or account registration, you provide explicit consent for us to store and use your email address.
• Legitimate interest: We process data for legitimate purposes such as improving website performance, providing personalized content, and ensuring the security of our services. We conduct a balancing test to ensure that our interests do not override your privacy rights.

5. Your GDPR Rights

Under the GDPR you have the following rights regarding your personal data. For each right, an icon is provided to help you identify the relevant section quickly.

Right to Access

You have the right to request a copy of the personal data we hold about you, including the purposes for which it is processed, the categories of data, and the recipients of your data. We will provide you with this information within 30 days of receiving your request.

Right to Rectification

If any of your personal data is inaccurate or incomplete, you can ask us to correct or update it. We will respond within 30 days and rectify the data promptly.

Right to Erasure

You may request the deletion of your personal data when it is no longer necessary for the purposes we collected it for, or if you withdraw your consent. We will delete your data within 30 days unless there is a legal obligation to retain it.

Right to Restrict Processing

You can request that we restrict the processing of your personal data, for example, if you contest the accuracy of the data or if we are no longer authorised to process it. We will honour this request within 30 days and keep you informed of any changes.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine‑readable format and to transmit it to another controller. We will provide this data within 30 days of your request, unless it is impractical.

Right to Object

You may object to the processing of your personal data for direct marketing or profiling purposes. Upon receiving your objection, we will cease processing your data for these purposes within 30 days, unless we can demonstrate a compelling legitimate reason that overrides your objection.

Right to Withdraw Consent

If you have given us consent to process your personal data, you can withdraw that consent at any time. Withdrawal will not affect the lawfulness of any processing carried out before the withdrawal. We will stop processing your data for the purpose of which consent was given within 30 days of receipt of your withdrawal notice.

6. How to Exercise Your Rights

To exercise any of the rights above, please contact us using the following methods:

• Email: [email protected]
• Mail: flavordishkitchen, 123 Culinary Lane, Food City, FC 45678, United Kingdom

In your request, please provide sufficient information for us to verify your identity. This may include a copy of your ID or other identifying details. We will respond to your request within 30 days, and we may extend this period if the request is complex or if we receive a large volume of requests.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Typical retention periods are:

• Email addresses: up to 2 years after the last interaction, unless you unsubscribe or request deletion.
• Cookies: session cookies are deleted when you close your browser; persistent cookies are deleted after 12 months.
• Analytics data: anonymised aggregated data is retained for up to 12 months to improve site performance.

After the retention period, all personal data is securely deleted or anonymised.

8. Contact Information

For any questions, concerns, or complaints regarding this GDPR Compliance Policy or your personal data, please contact our Data Protection Officer:

Data Protection Officer (DPO)
Email: [email protected]
Phone: +44 20 7946 0123 (UK)
Address: flavordishkitchen, 123 Culinary Lane, Food City, FC 45678, United Kingdom

9. Updates to this Policy

We may update this policy from time to time to reflect changes in our data processing practices or legal requirements. Any updates will be posted on our website and the “Last Updated” date will be revised accordingly. We encourage you to review this policy regularly.

10. Complaints

If you believe we have not complied with the GDPR, you have the right to lodge a complaint with a supervisory authority. In the UK, this is the Information Commissioner’s Office (ICO). You can find more information on how to file a complaint at https://ico.org.uk/.