GDPR Compliance Policy

Last Updated: April 03, 2026

At flavordailykitchen.com (the “Company”), we are committed to protecting your personal data and respecting your privacy in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. This policy explains what personal data we collect, how we use it, the legal basis for processing, your rights under GDPR, and how you can exercise those rights.

1. Data We Collect

Email addresses – Collected when you subscribe to our newsletter, request recipes, or contact us via the contact form.
Cookies and similar technologies – Used to remember your preferences, track site usage, and improve our services.
Analytics data – Collected via Google Analytics and Matomo to understand traffic patterns and user behavior.

2. How We Protect Your Data

We employ industry‑standard security measures to safeguard your personal data:

All data transmitted between your browser and our servers is encrypted with TLS (HTTPS).
Our servers are hosted on secure, access‑controlled infrastructure with firewalls, intrusion detection, and regular vulnerability scans.
Personal data is stored in encrypted form at rest, and only authorised staff have access.
We retain data only for as long as necessary to fulfil the purposes for which it was collected (see Retention below).

3. Legal Basis for Processing

We process your personal data under the following lawful bases:

Consent – When you explicitly opt‑in to receive newsletters or promotional emails.
Legitimate interest – For the purpose of analytics, improving website functionality, and providing a personalized user experience. We conduct a balancing test to ensure our interests do not override your rights.

4. Your GDPR Rights

Under the GDPR you have the following rights with respect to your personal data. Each right is illustrated with a Bootstrap icon for quick reference.

Right to Access

You may request a copy of the personal data we hold about you. This includes details of the categories of data, the purposes of processing, and the recipients or categories of recipients to whom your data has been disclosed.

Right to Rectification

If your personal data is inaccurate or incomplete, you can request that we correct or update it. This may involve updating your email address, correcting a name spelling, or removing a cookie identifier.

Right to Erasure

You have the right to ask us to delete your personal data, subject to legal or contractual obligations that may prevent us from doing so (e.g., financial records or statutory retention requirements).

Right to Restrict Processing

In certain circumstances, you may request that we restrict the processing of your data, meaning we can store it but not use it for marketing, analytics, or other purposes until you give further consent.

Right to Data Portability

You can obtain your personal data in a structured, commonly used, machine‑readable format and transfer it to another controller. For example, you may receive your email subscription preferences in a CSV file.

Right to Object

You may object to the processing of your personal data for direct marketing or profiling purposes. Upon receiving your objection, we will cease processing unless we can demonstrate compelling legitimate grounds.

Right to Withdraw Consent

Consent can be withdrawn at any time. If you withdraw consent for marketing communications, we will stop sending you newsletters and remove your email from our marketing list immediately.

5. How to Exercise Your Rights

To exercise any of the rights above, please contact us at [email protected]. Your request should include:

Your full name and contact details (email address or phone number).
A clear statement of the right you wish to exercise.
Any supporting evidence that helps us identify your data (e.g., a recent email subject line or subscription ID).

We will respond to your request within 30 days, in compliance with GDPR. If we need additional information to verify your identity, we may ask for a copy of a government‑issued ID or other proof. Once we have processed your request, we will confirm the action taken or explain any limitations.

6. Data Retention

We retain personal data only as long as necessary for the purposes outlined in this policy:

Email addresses are kept for up to 12 months after the last contact, unless you request deletion sooner.
Cookies are stored for 30 days, after which they expire automatically.
Analytics data is retained for 6 months and then anonymised.

7. Third‑Party Data Sharing

We may share your personal data with trusted third parties that provide essential services such as email delivery (SendGrid), analytics (Google Analytics, Matomo), and hosting (Amazon Web Services). Each third party is bound by confidentiality agreements and is required to implement appropriate security measures. No personal data is sold or traded.

8. Changes to This Policy

We reserve the right to modify this policy at any time. Any changes will be posted on this page with a new “Last Updated” date. Your continued use of the website after such changes constitutes acceptance of the revised policy.