GDPR Compliance Policy – Flavor Me Kitchen

At Flavor Me Kitchen we take your privacy seriously. This policy explains how we collect, use, store, and protect your personal data in accordance with the European Union General Data Protection Regulation (GDPR). By visiting our website or engaging with our services, you acknowledge that you have read, understood, and agreed to this policy.

1. Data We Collect

Email addresses: Collected when you subscribe to our newsletter, request a recipe, or contact us.
Cookies: We use first‑party cookies to remember your preferences, language choice, and shopping cart contents.
Analytics data: Anonymous data from Google Analytics and similar tools to understand traffic patterns and improve user experience.

2. Legal Basis for Processing

We rely on two primary legal bases for processing your data:

Consent: For newsletters, marketing emails, and certain promotional offers. Your consent is freely given, specific, informed, and unambiguous.
Legitimate interest: To provide, improve, and secure our services, and to comply with legal obligations. This interest is balanced against your privacy rights and is regularly reviewed.

3. Data Protection Measures

All data transmission occurs over HTTPS (SSL/TLS) to ensure encryption in transit.
Data is stored on secure, access‑controlled servers located in the EU.
We retain personal data only as long as necessary for the purposes it was collected (typically 12 months for marketing lists, 6 months for analytics).
Strict access controls, regular penetration testing, and employee training mitigate the risk of unauthorized access.

4. Your GDPR Rights

Under the GDPR, you have the following rights regarding your personal data. Each right is accompanied by an icon for quick reference.

Right to Access

You may request a copy of all personal data we hold about you. We will provide this information in a structured, commonly used format within 30 days.

Right to Rectification

If any of your data is inaccurate or incomplete, you can request corrections. We will update or rectify the data promptly.

Right to Erasure

Under certain circumstances, you may request the deletion of your personal data. We will comply unless a legal obligation requires us to retain the data.

Right to Restrict Processing

When you contest the accuracy of your data or our legal basis for processing, you can request that we limit how we use it.

Right to Data Portability

We can provide your data in a machine‑readable format, allowing you to transfer it to another service provider.

Right to Object

You may object to the processing of your data for direct marketing or profiling. Upon objection, we will stop processing for those purposes.

Right to Withdraw Consent

Consent can be withdrawn at any time. Once withdrawn, we will cease all processing that relies on that consent.

5. How to Exercise Your Rights

To exercise any of the rights above, please contact us at:

Flavor Me Kitchen – GDPR Office
Email: [email protected]

When contacting us, include:

Your full name and contact details.
A clear statement of the right you wish to exercise.
Any supporting documentation (e.g., a screenshot of a subscription confirmation).

We will respond within 30 days of receiving your request. If we need additional information to verify your identity, we may ask for it, but we will not disclose personal data to third parties without your consent.

6. Data Retention and Deletion

We retain personal data for the period necessary to fulfil the purposes for which it was collected. Typical retention periods are:

Data Type	Retention Period	Reason
Email addresses	12 months after last interaction	Marketing and communication purposes
Cookie identifiers	90 days	Technical functionality and analytics
Analytics logs	6 months	Statistical analysis and performance monitoring

7. Contact and Updates

If you have any questions, concerns, or wish to report a data breach, please contact our Data Protection Officer at [email protected].

This policy was last updated on April 03, 2026. We reserve the right to modify this policy at any time; any changes will be posted on this page with an updated date.