GDPR Compliance Policy

Last Updated: April 03, 2026

This GDPR Compliance Policy explains how flavordishcenter (hereafter “we”, “our” or “the Site”) collects, processes, stores, and protects personal data in accordance with the European Union’s General Data Protection Regulation (GDPR). By using our website, you acknowledge that you have read, understood, and agree to the terms set out below.

1. Types of Personal Data We Collect

• Email Addresses: When you sign up for newsletters, place orders, or register for events, we collect your email address to communicate with you and provide requested services.
• Cookies and Similar Technologies: We use first‑party cookies to remember your preferences, track session activity, and enhance usability. Third‑party analytics cookies (e.g., Google Analytics) collect aggregated traffic data.
• Analytics Data: We gather anonymised metrics such as page views, device type, and geographic location to improve site performance and user experience.

2. Legal Basis for Processing

We process personal data under two primary legal bases:

• Consent: For marketing communications and newsletters, we obtain your explicit consent at the point of data collection.
• Legitimate Interest: For operational purposes such as order fulfilment, fraud prevention, and site optimisation, we rely on legitimate interests that are balanced against your privacy rights.

3. Your GDPR Rights

Right to Access

You have the right to obtain confirmation that we are processing your personal data and, if so, access the data, its source, the purposes of processing, and any third parties with whom it has been shared. To exercise this right, send an email to [email protected].

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you may request correction. Please contact us at [email protected] with the details to be amended.

Right to Erasure

You can request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or if you withdraw consent. Email [email protected] and we will remove the data from our active databases within 30 days, except where retention is required by law.

Right to Restrict Processing

Should you contest the accuracy of your data or object to its use, we may suspend processing while we verify the claim. Contact us at [email protected] to request restriction.

Right to Data Portability

You may obtain a copy of your personal data in a structured, machine‑readable format. Submit a request via [email protected] and we will provide the data within 30 days, unless the data is encrypted or proprietary.

Right to Object

You may object to processing for direct marketing or profiling purposes. Upon receipt of your objection, we will cease processing unless we can demonstrate a compelling legitimate interest that overrides your objection. Contact [email protected] to exercise this right.

Right to Withdraw Consent

If you have given us consent, you may withdraw it at any time. This will not affect the lawfulness of any processing carried out before withdrawal. To withdraw, email [email protected] and we will promptly stop processing your data for the purpose consent was granted.

4. Data Protection Measures

• SSL/TLS Encryption: All data transmitted between your browser and our servers is encrypted using industry‑standard SSL/TLS protocols.
• Secure Servers: We host data on dedicated, fire‑walled servers with regular penetration testing and vulnerability assessments.
• Limited Retention: Personal data is retained only for as long as necessary to fulfil the purpose of collection, comply with legal obligations, or resolve disputes. After that, it is securely deleted or anonymised.
• Access Controls: Only authorised staff with a legitimate business need can access personal data, and all access is logged and monitored.

5. How to Exercise Your Rights

To exercise any of the rights listed above, please send an email to [email protected] with the following information:

• Your full name and contact details.
• A clear statement of the request (e.g., “I request access to my personal data”).
• Any supporting documentation that can help us verify your identity (e.g., a copy of your passport or driver’s licence).

We will respond to your request within 30 days. If we need additional information to process your request, we will contact you within the same period. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant supervisory authority or seek judicial remedy.

6. Contact Information

If you have any questions about this policy, wish to exercise a GDPR right, or have concerns about how we handle your personal data, please contact us:

GDPR Contact: [email protected]
Address: flavordishcenter, 123 Culinary Lane, Food City, FC 45678

7. Policy Updates

We reserve the right to update this policy at any time. Any changes will be posted on this page, and the “Last Updated” date will reflect the most recent revision. Your continued use of the Site after any changes constitutes acceptance of the new terms.