GDPR Compliance Policy

Website: tastyfamilydishes.com
Contact Email for Data Subject Requests: gdpr@tastyfamilydishes.com
Last Updated: December 01, 2025

---

1. Introduction

At Tasty Family Dishes (the “Company”, “we”, “our”, or “us”), we are committed to protecting the privacy and security of the personal data we process in the course of providing our culinary content, newsletters, and related services. This GDPR Compliance Policy explains how we collect, use, store, and safeguard personal data of individuals located in the European Economic Area (EEA) in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR). By accessing or using tastyfamilydishes.com, you acknowledge that you have read and understood the terms set out below.

2. Data We Collect

We process the following categories of personal data:

• Email addresses – collected when you subscribe to our newsletter, request a recipe, or contact us via the website.
• Cookies and similar tracking technologies – used to remember your preferences, analyse site usage, and deliver personalized content. This includes first‑party session cookies, analytics cookies (e.g., Google Analytics), and functional cookies.
• Analytics data – aggregated information such as page views, device type, browser version, and IP address that helps us improve the website’s performance and user experience.

3. Legal Basis for Processing

We rely on the following lawful bases to process your personal data:

• Consent (Article 6(1)(a)) – when you voluntarily provide your email address to receive newsletters or marketing communications, you give explicit consent for us to process that data for the stated purpose.
• Legitimate Interests (Article 6(1)(f)) – for activities such as website security, fraud prevention, and improving the functionality of the site through analytics, we process data based on our legitimate business interests, provided that your rights and freedoms are not overridden.

4. How We Protect Your Data

We employ a layered security approach to ensure that your personal data remains confidential, integral, and available only to authorized personnel:

• Transport Layer Security (TLS/SSL) – all data transmitted between your browser and our servers is encrypted using HTTPS.
• Secure Servers – our hosting environment is protected by firewalls, intrusion detection systems, and regular vulnerability scans.
• Access Controls – only employees who need access to personal data for legitimate business purposes are granted permission, and they must adhere to strict confidentiality agreements.
• Limited Retention – we retain personal data only for as long as necessary to fulfil the purpose for which it was collected, in line with our data retention schedule (e.g., newsletter subscriptions are kept until you unsubscribe).
• Data Minimisation – we only collect the data that is strictly necessary for the intended purpose and regularly purge obsolete or redundant records.

5. Your GDPR Rights

Under the GDPR, you enjoy a series of rights regarding the personal data we hold about you. Each right is presented with a Bootstrap Icon for easy identification.

• Right to Access

  You may request a copy of the personal data we process about you, together with information about the purposes of processing, categories of data, recipients, and the envisaged retention period.

• Right to Rectification

  If any of your personal data is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.

• Right to Erasure (Right to be Forgotten)

  You may ask us to delete your personal data when it is no longer necessary for the purposes for which it was collected, when you withdraw consent, or when you object to the processing and there are no overriding legitimate grounds.

• Right to Restrict Processing

  You can request that we limit the processing of your data while we verify the accuracy of the data or while we assess the legality of the processing.

• Right to Data Portability

  You have the right to receive your personal data in a structured, commonly used, machine‑readable format and to transmit that data to another controller without hindrance.

• Right to Object

  You may object, on grounds relating to your particular situation, to the processing of your personal data for direct marketing, scientific/historical research, or statistical purposes. Upon objection, we will cease the relevant processing unless we demonstrate compelling legitimate grounds.

• Right to Withdraw Consent

  Whenever processing is based on your consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

6. How to Exercise Your Rights

To exercise any of the rights listed above, please follow these steps:

1. Send a written request to gdpr@tastyfamilydishes.com. Include your full name, the email address associated with your account (if applicable), and a clear description of the right you wish to invoke.
2. Provide proof of identity (e.g., a scanned copy of a government‑issued ID) to help us verify that the request is legitimate. This step is required only when the request concerns personal data that could identify you.
3. We will acknowledge receipt of your request within 5 business days and will respond with the outcome within the statutory period of 30 days, unless an extension is justified under Article 12(3) GDPR.
4. If your request is denied, we will explain the reasons for the denial and inform you of your right to lodge a complaint with a supervisory authority.

7. Response Time

All data subject requests are processed within 30 calendar days of receipt. In complex cases, we may extend the deadline by an additional two months, provided we inform you of the extension and the reasons for it within the initial 30‑day period.

8. Data Retention

We retain personal data only for the period necessary to achieve the purpose for which it was collected, as outlined below:

• Newsletter subscriptions: retained until you unsubscribe or request deletion.
• Analytics data: aggregated and anonymised after 12 months; raw IP addresses are deleted after 6 months.
• Cookies: session cookies expire when you close your browser; persistent cookies have a maximum lifespan of 12 months unless renewed by a new consent.

9. Changes to This Policy

We may update this GDPR Compliance Policy from time to time to reflect changes in our practices or legal requirements. Any material changes will be posted on this page with an updated “Last Updated” date. We encourage you to review the policy periodically.

10. Contact Information

If you have any questions about this policy, the data we hold about you, or wish to exercise any of your GDPR rights, please contact our Data Protection Officer at:

Email: gdpr@tastyfamilydishes.com
Website: tastyfamilydishes.com

By continuing to use our website, you confirm that you have read, understood, and agree to the terms of this GDPR Compliance Policy.