GDPR Compliance Policy

Welcome to flavormealspot.com. This policy explains how we collect, use, protect, and share your personal data in accordance with the European Union’s General Data Protection Regulation (GDPR). By accessing or using our website, you acknowledge that you have read, understood, and agree to the terms outlined below.

1. Data We Collect

Email addresses: When you subscribe to our newsletter, create an account, or contact us, we capture your email address to provide relevant content, updates, and support.
Cookies and similar technologies: We use first‑party cookies to remember your preferences, track session activity, and improve user experience. Third‑party analytics cookies (e.g., Google Analytics) help us understand how visitors interact with our site.
Analytics data: We collect anonymised usage statistics, such as page views, navigation paths, and device information, to optimise our services and content.

2. How We Protect Your Data

Your privacy is paramount. We employ industry‑standard security measures, including:

Transport Layer Security (TLS/SSL) encryption for all data transmitted between your browser and our servers.
Secure, access‑controlled servers located in EU‑compliant data centres.
Regular vulnerability assessments, penetration testing, and patch management.
Restricted access to personal data, limited to authorised personnel with a legitimate business need.

3. Legal Basis for Processing

We process personal data under the following lawful bases:

Consent: You explicitly consent when you sign up for our newsletter, create an account, or opt‑in to marketing communications.
Legitimate interest: We rely on legitimate interest to analyse usage patterns, improve website performance, and personalise content.

4. Your GDPR Rights

Right to Access

You have the right to request a copy of the personal data we hold about you, including the purposes of processing, categories of data, and recipients. Submit a request via email at [email protected].

Right to Rectification

If any of your personal data is inaccurate or incomplete, you may ask us to correct it. Contact us at [email protected] with the details that need updating.

Right to Erasure

You can request the deletion of your personal data when it is no longer necessary for the purposes we collected it for, or if you withdraw consent. Please email [email protected] specifying the data you wish to be erased.

Right to Restrict Processing

You may request that we suspend the processing of your data—for example, if you contest its accuracy or the processing is unlawful. Notify us at [email protected].

Right to Data Portability

You can obtain your personal data in a structured, commonly used format (e.g., CSV or JSON) and transfer it to another controller. Submit a request to [email protected] and we will provide the data within the statutory timeframe.

Right to Object

You may object to processing for direct marketing, profiling, or legitimate interest reasons. If you object, we will stop processing your data for those purposes. Contact us at [email protected].

Right to Withdraw Consent

Consent can be withdrawn at any time. When you withdraw, we will cease processing your data for the purpose that relied on that consent. Please email [email protected] to exercise this right.

5. How to Exercise Your Rights

To exercise any of the rights above, send a detailed email to [email protected] including:

Your full name and contact details.
A clear statement of the right you are invoking.
Any relevant information that will help us locate your data (e.g., email address, account ID).

6. Response Time

We will respond to your request within 30 calendar days of receiving your inquiry. If the request is complex or involves a large volume of data, we may extend the response time by an additional 30 days, but we will inform you of any delays and the reasons for the extension.

7. Retention of Personal Data

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and regulatory obligations. Typical retention periods are:

Email addresses: up to 5 years after last contact, unless you request deletion sooner.
Cookies and analytics data: 2 years for session cookies, 12 months for persistent analytics cookies.

8. Changes to This Policy

We reserve the right to update this GDPR Compliance Policy. Any amendments will be posted on our website and will become effective upon publication. The “Last Updated” date at the bottom of this page reflects the most recent revision.

Site: flavormealspot.com | Contact: [email protected] | Last Updated: April 03, 2026