GDPR Compliance Policy

Plateflavorkitchen (the “Website”) is committed to safeguarding the privacy and personal data of all visitors and users. This policy explains how we collect, use, store, and protect your personal information in compliance with the General Data Protection Regulation (GDPR) and related EU data‑protection laws. By using our Website, you acknowledge that you have read and understood this policy.

1. Data We Collect

• Email Addresses: When you subscribe to our newsletter, request a recipe, or contact us, we collect your email address to communicate with you and provide the services you have requested.
• Cookies and Tracking Technologies: Our Website uses first‑party cookies to remember your preferences (e.g., language, newsletter subscription) and third‑party analytics cookies from Google Analytics to gather anonymous usage data. Cookies are stored for a maximum of 12 months unless you delete them earlier.
• Analytics Data: We collect aggregated, anonymised data about your interaction with the Website (pages visited, time spent, referral sources). This information helps us improve content, user experience, and marketing effectiveness.

2. How We Protect Your Data

• SSL Encryption: All data transmitted between your browser and our servers is protected by TLS/SSL encryption, ensuring that sensitive information cannot be intercepted.
• Secure Servers: We host our data on secure, ISO‑27001‑certified servers with firewalls, intrusion detection, and regular vulnerability assessments.
• Limited Retention: Personal data is retained only for as long as necessary to fulfil the purpose for which it was collected or to comply with legal obligations. Email addresses are stored for up to 5 years after the last interaction unless you request deletion earlier.

3. Legal Basis for Processing

• Consent: We process your email address and certain cookies only after you have explicitly consented (e.g., by checking a box or clicking “Subscribe”). You can withdraw consent at any time.
• Legitimate Interest: We use analytics data to improve our Website and marketing strategy. This processing is justified by our legitimate interest in providing better content and user experience, provided that your interests and fundamental rights are not overridden.

4. Your GDPR Rights

Right to Access

You have the right to obtain confirmation that we are processing your personal data and to receive a copy of that data in a structured, commonly used format. This includes data collected via email subscription, cookies, and analytics.

Right to Rectification

If any of your personal data is inaccurate or incomplete, you can request that we correct it. We will update or delete the data within a reasonable time after receiving your request.

Right to Erasure

You may ask us to delete your personal data, including email addresses and cookie identifiers, unless we have a legal obligation to keep it (e.g., for tax or contractual reasons). We will delete the data from all active databases and backups within 30 days of receiving the request.

Right to Restrict Processing

You can request that we limit the processing of your personal data—for instance, if you contest its accuracy. During the restriction period, we will store the data but will not use it for any purpose other than to comply with legal obligations or to resolve disputes.

Right to Data Portability

You may receive a copy of your personal data in a machine‑readable format and request that we transmit it directly to another controller. We will provide the data in a structured, commonly used format (e.g., CSV or JSON) within 30 days of your request.

Right to Object

You can object to the processing of your personal data for direct marketing or profiling purposes. Upon receiving an objection, we will stop processing your data for those purposes immediately, unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests.

Right to Withdraw Consent

If you have provided consent for data collection, you can withdraw it at any time. Withdrawal of consent will not affect the lawfulness of any processing carried out before withdrawal. To withdraw consent, simply click the unsubscribe link in our newsletters or contact us via the details below.

5. How to Exercise Your Rights

To exercise any of the rights outlined above, please contact us at [email protected] with the following information:

• Your full name and contact details.
• A clear statement of the right you wish to exercise (e.g., “Right to Erasure”).
• Any additional information that will help us identify the personal data in question (e.g., the email address you used to subscribe).

We will respond to your request within 30 days, as required by GDPR. If we need more information to verify your identity or to comply with your request, we may request additional details. In any case, we will keep you informed of the status of your request.

6. Contact Information

If you have any questions about this policy, our data‑processing activities, or your rights, please contact us at:

Plateflavorkitchen – GDPR Office
Email: [email protected]

7. Last Updated

This policy was last updated on April 03, 2026.