GDPR Compliance Policy

Site: Myyummydishes

Contact for GDPR matters: [email protected]

Last Updated: April 03, 2026

1. Introduction

Myyummydishes (the “Website”) is committed to protecting the privacy and personal data of our users in accordance with the General Data Protection Regulation (GDPR) and other applicable data‑protection legislation. This policy explains what personal data we collect, how we use it, the legal basis for processing, the rights you have as a data subject, and how you can exercise those rights.

2. Data We Collect

• Email addresses: Collected when you sign up for newsletters, create an account, or contact us.
• Cookies and similar technologies: We use first‑party cookies to enable site functionality (e.g., language preference, session tracking) and third‑party analytics cookies (e.g., Google Analytics) to understand how visitors use the site.
• Analytics data: IP addresses, browser type, device information, operating system, and referral URLs captured via analytics services.

3. Legal Basis for Processing

Consent: When you voluntarily provide your email address or interact with our newsletter subscription, you give explicit consent for us to process that data for marketing and communication purposes.

Legitimate Interest: We process analytics and cookie data to improve website performance, personalize user experience, and analyze traffic patterns. This processing is necessary for the legitimate interests of providing a functional and user‑friendly website.

4. Your GDPR Rights

Under the GDPR you have the following rights. The icons below represent each right for quick visual reference.

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You may ask us to correct inaccurate or incomplete data.
• Right to Erasure (Right to be Forgotten): You can request deletion of your personal data where no legal obligation requires us to retain it.
• Right to Restrict Processing: You may request that we limit how we use your data, e.g., for a period of time.
• Right to Data Portability: You can obtain your data in a machine‑readable format and transfer it to another controller.
• Right to Object: You can object to processing for direct marketing or profiling purposes.
• Right to Withdraw Consent: You may withdraw any consent you have previously given at any time.

5. How to Exercise Your Rights

To exercise any of the rights listed above, please contact us at [email protected]. Include the following information in your request:

1. Your full name and contact details.
2. A description of the data you wish to access, rectify, erase, or otherwise act upon.
3. Any relevant identifiers (e.g., email address, user ID) to help us locate your records.

We will respond to your request within 30 calendar days. If your request is complex or we need additional information, we may extend the period by a reasonable time and will inform you of the extension.

6. Data Security Measures

We employ industry‑standard security measures to protect your personal data:

• SSL/TLS Encryption: All data transmitted between your browser and our servers is encrypted using HTTPS.
• Secure Servers: Our hosting environment is protected by firewalls, intrusion detection systems, and regular security audits.
• Access Controls: Only authorized staff members with a legitimate business need can access personal data, and all access is logged.
• Data Minimisation: We only collect the data necessary for the purposes we have stated.

7. Data Retention

Personal data is retained only for as long as necessary to fulfill the purposes outlined in this policy, or as required by law. For example:

• Email addresses are kept for 12 months after the last interaction unless you request deletion sooner.
• Cookie and analytics data are stored for a maximum of 6 months, in line with the retention periods set by the third‑party providers.

8. Contact Us

If you have any questions about this policy, our data‑processing practices, or your rights under the GDPR, please reach out to our Data Protection Officer:

GDPR Contact: [email protected]

We are committed to ensuring that your personal data is handled with the utmost care and in full compliance with all applicable data‑protection laws.

9. Updates to This Policy

We may update this GDPR Compliance Policy from time to time. Any changes will be posted on this page, and the “Last Updated” date will be revised accordingly. Your continued use of the Website after any changes constitutes your acceptance of the updated policy.