GDPR Compliance Policy

Last Updated: April 03, 2026

1. Introduction

dinnerflavorhub (the “Site”) is committed to protecting the privacy and personal data of all users in accordance with the European Union’s General Data Protection Regulation (GDPR) and related data‑protection laws. This policy explains what personal data we collect, how it is used, the legal basis for processing, and the rights you have as a data subject. By using the Site, you acknowledge that you have read and understood this policy.

2. Data We Collect

Email addresses: Collected when you sign up for newsletters, create an account, or contact us for support.
Cookies and similar technologies: Used to store preferences, session information, and to provide a personalized browsing experience.
Analytics data: We employ third‑party analytics services (e.g., Google Analytics) that gather information about device type, operating system, browser, IP address, and referral source. This data helps us improve the Site’s performance and user experience.

3. How We Protect Your Data

Secure Transmission: All data transmitted between your device and our servers is encrypted using TLS 1.3 (HTTPS). This ensures that personal data cannot be intercepted by third parties.

Secure Storage: Personal data is stored on encrypted servers hosted in data centers that comply with ISO/IEC 27001 and GDPR security standards. Access to these servers is restricted to authorized staff only, and all access is logged.

Limited Retention: We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy. For example, email addresses are kept while the user remains subscribed, and analytics data is retained for 12 months before automatic deletion.

4. Legal Basis for Processing

We process personal data under the following lawful bases:

Consent: When you voluntarily provide your email address or click on a consent cookie banner, you agree to the processing of that data for the purposes stated.
Legitimate Interest: We rely on legitimate interest to analyze site usage patterns and improve our services, provided that such interest does not override your fundamental rights.

5. Your GDPR Rights

Under the GDPR, you have the following rights regarding your personal data. Each right is illustrated with a Bootstrap 5 icon for quick reference.

Right to Access

You may request a copy of the personal data we hold about you.

Right to Rectification

You can correct inaccurate or incomplete data.

Right to Erasure

Also known as the “right to be forgotten.”

Right to Restrict Processing

You may limit how we use your data.

Right to Data Portability

Request your data in a machine‑readable format.

Right to Object

Object to processing for marketing or profiling.

Right to Withdraw Consent

At any time, you can revoke consent granted for data processing.

6. Exercising Your Rights

To exercise any of the rights listed above, please contact us via email at [email protected]. In your email, include:

Your full name and email address.
A clear statement of the request (e.g., “I would like to exercise my Right to Access”).
Any additional information that will help us locate your data (e.g., account ID, date of last login).

We will respond to your request within 30 calendar days, as required by GDPR. If you need a response sooner, please let us know in your email and we will make every effort to expedite the process.

7. Data Retention

Personal data is retained only for the duration necessary to achieve the purposes for which it was collected. For example:

Email addresses: Until you unsubscribe or we no longer have a legitimate reason to retain them.
Cookie data: 12 months from the last user interaction.
Analytics: 12 months, after which the data is anonymised or deleted.

8. Security Measures

We employ a combination of technical and organisational measures to protect personal data, including:

Encryption of data at rest and in transit.
Multi‑factor authentication for administrative access.
Regular security audits and penetration testing.
Employee training on data protection and privacy best practices.

9. Data Breach Notification

In the unlikely event of a personal data breach, we will notify the relevant supervisory authority within 72 hours and, where appropriate, inform affected individuals. We will provide details on the nature of the breach, the data involved, and the measures taken to mitigate impact.

10. Changes to This Policy

We may update this policy from time to time. Any changes will be posted on this page with a new “Last Updated” date. We encourage you to review the policy regularly to stay informed about how we protect your data.

11. Contact Us

If you have any questions, concerns, or wish to exercise your rights, please contact our Data Protection Officer at:

Address: 42 Culinary Lane, Food City, 12345, USA
Email: [email protected]
Phone: +1 555‑123‑4567

We are committed to addressing all inquiries promptly and in accordance with GDPR obligations.