GDPR Compliance Policy – Kitchenflavorjoy

Kitchenflavorjoy (the “Website”) is committed to protecting the privacy and personal data of all users in compliance with the European Union’s General Data Protection Regulation (GDPR) and related data protection laws. This policy explains how we collect, use, store, and safeguard your personal data, and outlines your rights under the GDPR. For any questions or to exercise your rights, please contact us at [email protected].

Last Updated: April 03, 2026

1. Data We Collect

Email Addresses – collected when you subscribe to newsletters, create an account, or request recipes.
Cookies – used to remember your preferences, session data, and to provide a personalised experience.
Analytics Data – Google Analytics and similar services capture IP addresses, device information, and browsing behaviour to help us improve the Website.

2. Legal Basis for Processing

We process personal data on one of the following lawful bases:

Consent – for marketing emails, newsletters, and personalised offers. You can withdraw consent at any time.
Legitimate Interest – to provide, personalise, and improve the Website, to analyse usage patterns, and to protect against fraud or security breaches.

3. How We Protect Your Data

We employ a range of technical and organisational measures to ensure the confidentiality, integrity, and availability of your personal data:

SSL/TLS Encryption – all data transmitted between your browser and our servers is encrypted using industry‑standard TLS.
Secure Servers – hosted on reputable cloud platforms with regular security audits, firewalls, and intrusion detection systems.
Limited Retention – personal data is retained only as long as necessary to fulfil the purpose for which it was collected or as required by law. After that, it is securely deleted.

4. Your GDPR Rights

Under the GDPR, you have the following rights regarding your personal data. Below we provide a brief explanation of each right, an icon for quick reference, and the steps you can take to exercise that right.

Right to Access

You may request a copy of the personal data we hold about you, as well as information about how it is processed. We will provide this information within 30 days of your request.

Right to Rectification

If any of your personal data is inaccurate or incomplete, you can request that we correct it. We will rectify the data within 30 days of receiving your request.

Right to Erasure

Also known as the “right to be forgotten.” You can request that we delete your personal data, provided there is no legal obligation to retain it. We will delete the data within 30 days, except where we are required to keep it for legal or regulatory reasons.

Right to Restrict Processing

You may request that we suspend the processing of your personal data for a limited period (for example, while you dispute its accuracy). We will comply for up to 30 days, after which the processing will either resume or the data will be deleted.

Right to Data Portability

You can obtain the personal data we hold about you in a structured, commonly used, and machine‑readable format, and transfer it to another controller if you wish. We will provide the data within 30 days in a standard format (e.g., CSV or JSON).

Right to Object

You may object to the processing of your data for direct marketing or profiling purposes. Upon receiving your objection, we will stop processing your data for those purposes within 30 days.

Right to Withdraw Consent

If you have provided consent for marketing or other processing, you can withdraw it at any time. We will honor your withdrawal within 30 days and will stop sending marketing communications thereafter.

5. How to Exercise Your Rights

To exercise any of the rights outlined above, please contact us at [email protected] with the following information:

Your full name and contact details.
A clear statement of the right you are exercising (e.g., “I request access to my data”).
Any supporting evidence or documents that verify your identity (e.g., a copy of your ID).

We will respond to your request within 30 days. If you believe your request is not handled in a timely or satisfactory manner, you have the right to lodge a complaint with a supervisory authority.

6. Cookies and Tracking Technologies

We use both first‑party and third‑party cookies to improve your experience on Kitchenflavorjoy. These include:

Essential Cookies – necessary for the functioning of the Website (e.g., session cookies).
Analytics Cookies – collect aggregated usage data via Google Analytics.
Marketing Cookies – track user behaviour for targeted advertising (only if you have consented).

You can manage your cookie preferences via the cookie banner or by adjusting your browser settings. Refusal of non‑essential cookies may affect the functionality of certain features.

7. Data Breach Notification

In the unlikely event of a personal data breach that could pose a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and, where appropriate, inform affected individuals without undue delay.

8. Contact Information

For any GDPR‑related inquiries, data protection questions, or to exercise your rights, please contact:

Kitchenflavorjoy Data Protection Officer
Email: [email protected]
Address: 123 Culinary Lane, Flavor Town, FL 12345, USA

9. Changes to This Policy

We may update this GDPR Compliance Policy from time to time. Any changes will be posted on this page with a new effective date. We encourage you to review this policy regularly to stay informed about how we protect your personal data.