GDPR Compliance Policy – DailyFlavorKitchen

Last Updated: April 03, 2026

DailyFlavorKitchen (hereafter “we”, “us”, or “our”) is committed to protecting the privacy and personal data of all visitors, subscribers, and users of our website dailyflavorkitchen.com. This GDPR Compliance Policy explains how we collect, use, store, and safeguard personal data in accordance with the European Union General Data Protection Regulation (GDPR) and other applicable privacy laws. If you have any questions or concerns, please contact us at [email protected].

1. Types of Personal Data We Collect

• Email addresses: Collected when you subscribe to our newsletter, place orders, or request customer support.
• Cookies and Tracking Technologies: We use first‑party cookies to enhance user experience, remember preferences, and analyze traffic patterns. Third‑party cookies from analytics providers (e.g., Google Analytics) are also employed to aggregate usage data.
• Analytics Data: Anonymous metrics such as page views, session duration, and referral sources help us improve content and services.

2. Legal Basis for Processing

We rely on two primary legal bases under Article 6 of the GDPR:

• Consent: For marketing communications and optional newsletter sign‑ups. Consent is freely given, specific, informed, and unambiguous.
• Legitimate Interest: For analytics, improving website functionality, and ensuring the security of our services. We conduct a legitimate interest assessment to balance our interests against the privacy rights of individuals.

3. How We Protect Your Data

• SSL Encryption: All data transmitted between your browser and our servers is protected by TLS 1.3 encryption.
• Secure Servers: Hosted on industry‑standard, ISO 27001‑certified infrastructure with regular penetration testing.
• Access Controls: Role‑based access limits who can view or modify personal data.
• Data Retention: Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected or to comply with legal obligations. For example, email addresses are stored for a maximum of 12 months after the last interaction unless the user opts to keep them longer.

4. Your GDPR Rights

Under the GDPR, you have the following rights regarding your personal data. Each right is accompanied by a Bootstrap icon for quick reference.

Right to Access

You can request a copy of the personal data we hold about you, including the purposes of processing, categories of data, and recipients. To exercise this right, send an email to [email protected] with the subject “GDPR Access Request.” We will respond within 30 days.

Right to Rectification

If any of your personal data is inaccurate or incomplete, you may ask us to correct it. Contact us at [email protected] with the details to be rectified, and we will update the records promptly.

Right to Erasure

Also known as the “right to be forgotten.” You may request deletion of your personal data, subject to legal retention obligations. Email [email protected] with the request, and we will remove the data within 30 days unless a lawful basis for retention applies.

Right to Restrict Processing

You may ask us to suspend processing of your data if you dispute its accuracy or if the processing is unlawful. Contact [email protected] and we will temporarily restrict processing while we investigate.

Right to Data Portability

You can receive your personal data in a structured, commonly used format (e.g., CSV, JSON) and transfer it to another controller. Send a request to [email protected], and we will provide the data within 30 days.

Right to Object

You may object to the processing of your personal data for direct marketing, profiling, or other purposes. Notify us at [email protected], and we will cease processing for those purposes unless we demonstrate a compelling legitimate interest.

Right to Withdraw Consent

If you previously consented to marketing communications, you may withdraw that consent at any time. Click the “unsubscribe” link in any email or email us at [email protected]. We will stop sending further communications within 30 days.

5. How to Exercise Your Rights

1. Identify the right you wish to exercise. Refer to the section above for guidance.
2. Submit a written request. Email [email protected] with a clear description of your request, your contact details, and any supporting evidence (e.g., screenshots, account numbers).
3. Verification. For security, we may request proof of identity before processing your request.
4. Response. We will acknowledge receipt within 5 business days and provide a full response within 30 calendar days, as required by the GDPR.

6. Data Retention Schedule

We retain personal data for the following periods, unless a longer retention period is required by law:

• Email addresses: 12 months after last interaction (unless opted to keep longer).
• Cookies: Session cookies (deleted on browser close); persistent cookies (maximum 2 years).
• Analytics data: Aggregated, anonymised data retained for 6 months.

7. Contact Information

If you wish to discuss this policy, exercise your rights, or report a data breach, please contact:

DailyFlavorKitchen Data Protection Officer (DPO)
Email: [email protected]

8. Changes to This Policy

We may update this GDPR Compliance Policy from time to time. The updated version will be posted on our website with the new “Last Updated” date. We encourage you to review this policy periodically.

By continuing to use our website or services, you acknowledge that you have read, understood, and agreed to this GDPR Compliance Policy.