GDPR Compliance Policy

Last Updated: April 03, 2026

Mealfoodkitchen is committed to safeguarding the privacy and personal data of all users of our website mealfoodkitchen.com. This policy explains how we collect, use, protect, and share data in accordance with the European Union General Data Protection Regulation (GDPR) and other applicable privacy laws.

1. Data We Collect

We gather the following types of information to provide and improve our services:

Email addresses: Collected when users subscribe to newsletters, register for recipe collections, or contact us for support.
Cookies: We use first‑party cookies to remember user preferences and to track session activity. Third‑party analytics cookies are also employed to understand traffic patterns.
Analytics data: We use Google Analytics and Matomo to collect anonymised metrics such as page views, bounce rates, and device information. No personal identifiers are stored in these analytics services.

2. Legal Basis for Processing

Our data processing activities are grounded in the following legal bases:

Consent: When a user explicitly opts in to receive marketing emails or newsletters, we process their email address on the basis of that consent.
Legitimate Interest: We process analytics data to improve website usability, identify technical issues, and optimise user experience. This is a legitimate interest under Article 6(1)(f) of the GDPR.
Contractual Necessity: When a user submits a contact form or requests a recipe, we process the provided data to fulfill that request.

3. Data Protection Measures

We employ industry‑standard security controls to protect personal data:

SSL/TLS Encryption: All data transmitted between users and our servers is encrypted using 256‑bit SSL certificates.
Secure Servers: Our hosting provider uses hardened Linux servers with regular security patches, firewalls, and intrusion detection.
Limited Data Retention: Email addresses are retained for up to 12 months after the last interaction, unless the user requests deletion earlier. Analytics data is anonymised and stored for 30 days.
Access Controls: Only authorised staff with a legitimate business need can access personal data. All staff receive regular privacy training.

4. GDPR Rights Explained

Under the GDPR, you have the following rights regarding your personal data. Each right is illustrated with an icon for quick reference.

Right to Access

You may request a copy of the personal data we hold about you, including the sources, purposes of processing, and recipients.

Right to Rectification

We will correct any inaccurate or incomplete data you provide, ensuring your information is up‑to‑date.

Right to Erasure

Also known as the “right to be forgotten,” you can request the deletion of your personal data, subject to legal obligations and legitimate interests.

Right to Restrict Processing

You may request that we limit the use of your data for purposes such as compliance checks or legal disputes.

Right to Data Portability

We will provide your data in a structured, machine‑readable format, enabling you to transfer it to another service provider.

Right to Object

You can object to processing for direct marketing or profiling purposes. We will stop processing unless we can demonstrate compelling legitimate grounds.

Right to Withdraw Consent

At any time, you may withdraw consent for marketing emails or data collection, and we will honor that request promptly.

5. How to Exercise Your Rights

To exercise any of the rights described above, please contact us at [email protected]. Provide a clear description of your request and, if necessary, proof of identity. We will respond within 30 days, in line with GDPR requirements.

When contacting us, you may include:

Your full name and contact details.
The specific right you are exercising.
Any relevant identifiers (e.g., email address, account number).

6. Data Retention and Deletion

Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Once the retention period expires, we securely delete or anonymise the data. If you request deletion under the Right to Erasure, we will remove your data from all active databases within the 30‑day response window.

7. Contact Information

If you have any questions, concerns, or requests regarding this policy or your personal data, please reach out to our Data Protection Officer:

Mealfoodkitchen Data Protection Officer
Email: [email protected]
Address: 123 Culinary Ave, Food City, 45678, United Kingdom

By using our website, you acknowledge that you have read, understood, and agree to this GDPR Compliance Policy.