GDPR Compliance Policy

Welcome to Tastyflavorplate (the “Site”). This GDPR Compliance Policy explains how we collect, use, protect, and share your personal data in accordance with the General Data Protection Regulation (EU) 2016/679. By using our Site, you acknowledge that you have read and understood this policy.

1. Who We Are

Tastyflavorplate is a culinary content platform that delivers recipes, cooking tips, and food photography to users worldwide. Our registered office is located at 123 Culinary Street, Food City, 45678. For any GDPR‑related inquiries, you may contact us at [email protected].

2. Personal Data We Collect

We collect the following personal data:

• Email addresses – used for newsletter subscription, account creation, and communication.
• Cookies & Similar Technologies – used to remember your preferences, analyse usage patterns, and personalise content.
• Web Analytics Data – collected via Google Analytics (or similar), including IP address, device information, and page views.

All data is stored in secure, EU‑based servers. We retain personal data only for as long as necessary to fulfil the purposes listed in this policy or as required by law.

3. Legal Basis for Processing

We process your personal data based on the following lawful bases:

• Consent – when you explicitly opt‑in to receive newsletters or create an account.
• Legitimate Interest – to improve our services, analyse user behaviour, and deliver a personalised experience.

We provide clear notices at the point of data collection, and you may withdraw consent at any time.

4. How We Protect Your Data

We employ robust security measures to safeguard your data:

• SSL/TLS Encryption – all data transmitted between your browser and our servers is encrypted.
• Secure Servers – hosted on industry‑standard, ISO‑27001 certified infrastructure with regular penetration testing.
• Access Controls – only authorized staff have access to personal data, and they receive regular privacy training.
• Data Retention – personal data is automatically deleted after 12 months of inactivity, unless a longer retention period is required by law.

5. Your GDPR Rights

• Right to Access – You may request a copy of the personal data we hold about you.
• Right to Rectification – You can ask us to correct inaccurate or incomplete data.
• Right to Erasure – You may request deletion of your personal data, subject to legal obligations.
• Right to Restrict Processing – You can limit how we process your data when you contest its accuracy or legality.
• Right to Data Portability – You may obtain your data in a structured, commonly used format for transfer to another controller.
• Right to Object – You can object to processing for direct marketing or profiling purposes.
• Right to Withdraw Consent – You may withdraw consent at any time, which will not affect the lawfulness of processing based on consent before withdrawal.

6. How to Exercise Your Rights

To exercise any of the rights above, please send a written request to [email protected]. Your request should include:

• Your full name and contact information.
• A description of the request (e.g., “I want a copy of all data I have provided”).
• Any relevant evidence (e.g., account ID, email address).

We will respond within 30 days of receiving your request. If we need additional information to verify your identity, we may ask for further details.

7. Data Sharing and Transfers

We do not sell your personal data. We may share data with third‑party service providers that assist us in operating the Site (e.g., email service providers, analytics vendors). All such providers are bound by data processing agreements that ensure GDPR compliance.

8. Cookies and Tracking Technologies

We use first‑party cookies to remember your preferences and session data. We also use third‑party cookies for analytics and advertising. You can manage cookie preferences via the cookie banner on the Site. For more information, see our Cookie Policy.

9. Changes to This Policy

This policy is effective as of April 03, 2026 and may be updated from time to time. We will notify you of material changes by posting the updated policy on this page. Your continued use of the Site after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have any questions about this GDPR Compliance Policy or your personal data, please contact us at [email protected]. For complaints, you may also contact the relevant supervisory authority in your country.