GDPR Compliance Policy

This GDPR Compliance Policy (the “Policy”) explains how DailyFlavorHub (the “Company”, “we”, “us” or “our”) collects, processes, stores and protects the personal data of visitors to dailyflavorhub.com (“the Site”) in accordance with the European Union General Data Protection Regulation (GDPR) and related data‑protection laws. The last update to this Policy was made on April 03, 2026.

1. What Personal Data We Collect

We collect the following types of personal data when you interact with the Site:

• Email addresses – for newsletter subscription, account creation, order confirmation and customer support.
• Cookies and similar tracking technologies – to remember your preferences, analyse site usage, personalise content and improve performance.
• Analytics data – aggregated, anonymised information such as page views, traffic sources, device types and IP addresses, collected via tools such as Google Analytics and Matomo.

2. How We Protect Your Data

Your personal data is protected through a combination of technical and organisational measures:

• SSL/TLS encryption – all data transmitted between your browser and our servers is encrypted using industry‑standard SSL/TLS protocols.
• Secure servers – we host our infrastructure on reputable cloud providers with physical and network security controls, including firewalls, intrusion detection and regular vulnerability assessments.
• Access controls – only authorised personnel with a legitimate need can access personal data, and all access is logged and monitored.
• Limited data retention – we retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Email addresses are kept for the duration of your subscription or until you unsubscribe. Cookies are deleted after 30 days unless you explicitly opt‑in for persistent cookies.

3. Legal Basis for Processing

We rely on two lawful bases for processing personal data:

• Consent – when you sign up for our newsletter or create an account, you provide explicit consent to receive communications and to process the data required for those services.
• Legitimate interest – we process data for purposes such as improving site usability, analysing traffic patterns, and providing personalised content, which we consider a legitimate interest that does not override your fundamental rights.

4. Your GDPR Rights

Under the GDPR you have the following rights with respect to your personal data. We provide clear mechanisms to exercise each right. Please see the details below:

Right to Access

You can request a copy of any personal data we hold about you. To do so, send an email to [email protected] with the subject line “Access Request – [Your Name]”. We will provide you with the information we have in a structured, commonly used format within 30 days.

Right to Rectification

If you find any inaccuracies in your personal data, you may request correction. Contact us at [email protected] with the details of the error and the correct information. We will rectify the data promptly and confirm the update within 30 days.

Right to Erasure

Also known as the “right to be forgotten”, you may ask us to delete your personal data. Send an email to [email protected] with the subject “Erase Request – [Your Name]”. We will remove your data from our active systems, but may retain anonymised copies for legal or compliance purposes. A response will be sent within 30 days.

Right to Restrict Processing

You can request that we limit the processing of your data (e.g., for a period of time or only for specific purposes). Notify us by email at [email protected] with the details of the restriction. We will comply and inform you of the outcome within 30 days.

Right to Data Portability

You may obtain your personal data in a machine‑readable format and transfer it to another controller. Contact us at [email protected] with the subject “Portability Request – [Your Name]”. We will provide the data in a commonly used format (e.g., CSV or JSON) within 30 days.

Right to Object

You can object to the processing of your data for direct marketing or profiling purposes. Email [email protected] with the subject “Object – [Your Name]” and we will stop processing your data for those purposes and confirm the action within 30 days.

Right to Withdraw Consent

If you previously gave consent (e.g., for newsletters), you may withdraw it at any time. To do so, simply click the “unsubscribe” link in any email or send us an email to [email protected] with the subject “Withdraw Consent – [Your Name]”. We will honour your request and confirm within 30 days.

5. How to Exercise Your Rights

For any of the rights above, please contact us using the following details:

• Email: [email protected]
• Address: 123 Flavor Lane, Culinary City, 56789, United Kingdom
• Telephone (optional): +44 20 7946 0958

When contacting us, please provide sufficient information for us to verify your identity and locate the data we hold. This may include your full name, email address, and any relevant order or subscription identifiers. We will respond to your request within 30 days, or within 45 days if the request is complex or if we receive multiple requests from the same individual.

6. Data Retention

Personal data is retained only as long as necessary to fulfil the purposes for which it was collected or as required by law. Typical retention periods are:

• Email addresses – until you unsubscribe or we receive a request to delete.
• Cookies – 30 days unless you opt‑in for persistent cookies.
• Analytics data – anonymised data is retained for up to 12 months for trend analysis.

After the retention period, all personal data is securely deleted or anonymised to prevent re‑identification.

7. Contact Us

If you have any questions about this GDPR Compliance Policy, or if you wish to report a data‑protection concern, please email us at [email protected]. We are committed to addressing any concerns promptly and transparently.

DailyFlavorHub – Your privacy, our priority.