GDPR Compliance Policy

Last Updated: April 03, 2026

Tastykitchenflow (“we”, “our”, “us”) respects your privacy and is committed to protecting the personal data we collect from you in accordance with the General Data Protection Regulation (GDPR). This policy explains what data we collect, why we collect it, how we protect it, and the rights you have as a data subject under the GDPR. By using our website (tastykitchenflow.com) you agree to the processing described in this policy.

1. What Personal Data We Collect

We collect the following types of personal data:

Email addresses: When you sign up for newsletters, submit recipes, or contact us, we store your email address to communicate with you.
Cookies and similar tracking technologies: We place small files on your device to remember your preferences, analyse usage, and personalise your experience.
Analytics data: Using services such as Google Analytics, we collect information about your interactions with the site (pages visited, time spent, device type, etc.) to improve content and usability.

2. Legal Basis for Processing

We process your personal data based on the following legal bases:

Consent: For optional newsletter subscriptions, cookie usage, and any marketing communications, we require your explicit consent. You can withdraw consent at any time by following the unsubscribe link or contacting us.
Legitimate Interest: We rely on legitimate interest to collect and analyse anonymised analytics data and to manage our website’s technical performance. This interest is balanced against your privacy rights and is proportionate to the benefit we provide.

3. How We Protect Your Data

We employ industry‑standard technical and organisational measures to safeguard your data:

SSL/TLS Encryption: All data transmitted between your browser and our servers is encrypted using HTTPS to prevent interception.
Secure Servers: Our hosting infrastructure uses firewalls, intrusion detection, and regular security audits to protect against unauthorised access.
Limited Retention: Personal data is retained only for as long as necessary to fulfil its purpose. Email addresses are kept for the duration of your subscription or until you request deletion. Cookies are stored for the period specified in the cookie banner or until manually cleared by you.
Access Controls: Only authorised staff with a legitimate business need can access personal data, and all staff undergo privacy training.

4. Your GDPR Rights

Under the GDPR you have the following rights regarding your personal data. We are committed to facilitating the exercise of these rights within 30 days of your request.

Right to Access

You may request a copy of the personal data we hold about you, the purposes for which it is processed, the categories of data, and the recipients or categories of recipients.

Right to Rectification

If any of your personal data is inaccurate or incomplete, you can ask us to correct it. We will promptly update the data in our records.

Right to Erasure

You may request that we delete personal data that is no longer necessary for the purposes it was collected, or if you withdraw consent and no other legal basis applies. We will remove the data from all active systems, and, where possible, from backups.

Right to Restrict Processing

You can request that we limit the processing of your data, for example, while we verify its accuracy or while you contest the lawfulness of the processing. During the restriction period, we will only store the data and not use it for further purposes.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine‑readable format. If you request this, we will provide the data in a format such as CSV or JSON, unless the request is manifestly unfounded or excessive.

Right to Object

You may object to the processing of your data for direct marketing or profiling purposes. Upon receipt of your objection, we will stop processing unless we can demonstrate compelling legitimate grounds that override your interests.

Right to Withdraw Consent

If you have given consent for any processing activity, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing based on consent prior to withdrawal. To withdraw, simply click the unsubscribe link in our emails or contact us directly.

5. How to Exercise Your Rights

To exercise any of the rights described above, please contact our Data Protection Officer at [email protected]. Provide a brief description of your request and, where necessary, proof of identity (e.g., a copy of your ID). We will acknowledge receipt within 5 business days and respond fully within 30 days, as required by the GDPR. If you need more information or assistance, you can also use the contact form on our website.

6. Contact Information

Data Protection Officer: Tastykitchenflow
Email: [email protected]
Address: 123 Flavor Avenue, Culinary City, 45678, USA

7. Changes to This Policy

We may update this policy from time to time. Any changes will be posted on this page with an updated “Last Updated” date. We encourage you to review the policy periodically to stay informed about how we protect your personal data.

If you have any questions or concerns about this policy or our data practices, please contact us at [email protected].