GDPR Compliance Policy

Welcome to Dailydishcravings (hereafter referred to as “we”, “our” or “the Site”). This policy explains how we collect, use, protect, and share the personal data of visitors, subscribers, and users of the Site in accordance with the General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) and the UK GDPR. By accessing or using the Site, you acknowledge that you have read, understood, and agreed to the terms of this policy.

1. Personal Data We Collect

We collect the following categories of personal data:

Email addresses – used for newsletters, account registration, and communication.
Cookies and similar technologies – to remember preferences, enable functionality, and gather usage statistics.
Analytics data – collected via third‑party services such as Google Analytics to understand how visitors interact with the Site.

2. How We Use Your Data

We process your personal data for the following purposes:

Providing and improving the services offered on the Site.
Communicating with you, including newsletters, updates, and promotional material (only if you have given consent).
Analyzing usage patterns to enhance user experience and maintain site performance.
Ensuring compliance with legal obligations and protecting our legitimate interests in maintaining a secure and trustworthy platform.

3. Legal Basis for Processing

We rely on two main legal bases for processing personal data:

Consent – for sending newsletters, promotional emails, and any marketing communications. Consent must be freely given, specific, informed, and unambiguous.
Legitimate Interest – for improving services, analyzing traffic, and ensuring site security. We conduct a legitimate interest assessment to confirm that our interests do not override your fundamental rights.

4. Data Protection Measures

We implement robust technical and organisational safeguards to protect your personal data:

All data transmitted between your browser and our servers is encrypted with SSL/TLS (HTTPS).
Our servers are hosted on secure, ISO‑27001‑certified data centres with physical and network security controls.
Access to personal data is limited to authorised staff on a need‑to‑know basis.
We retain personal data only for as long as necessary to fulfil the purposes stated herein, or as required by law.

5. Your GDPR Rights

Under the GDPR, you have the following rights with respect to your personal data. Please see the detailed explanations below and how to exercise each right.

Right to Access

You may request a copy of the personal data we hold about you, including the purpose of processing, categories of data, and recipients.

Right to Rectification

If your personal data is inaccurate or incomplete, you can ask us to correct it.

Right to Erasure

You can request the deletion of your personal data, subject to legal obligations.

Right to Restrict Processing

You may ask us to limit the use of your data while we verify its accuracy.

Right to Data Portability

You can obtain your personal data in a structured, commonly used format.

Right to Object

You may object to processing for direct marketing or legitimate interest purposes.

Right to Withdraw Consent

You can withdraw any previously given consent at any time.

6. How to Exercise Your Rights

To exercise any of the rights above, please contact us at:

Email: [email protected]
Address: 123 Culinary Lane, Flavor Town, FL 12345, USA

In your request, please provide sufficient information for us to verify your identity and locate the data. We will respond within 30 days of receiving your request, unless the request is manifestly unfounded or excessive, in which case we will inform you of the delay and the reasons for the extension.

7. Retention of Personal Data

We retain personal data for the period necessary to fulfil the purposes for which it was collected, including legal, accounting, and regulatory requirements. For example:

Contact and newsletter data – up to 5 years from the last interaction.
Cookie and analytics data – aggregated for up to 12 months.
Security logs – retained for 24 months.

8. Cookies and Tracking Technologies

We use first‑party cookies to remember your preferences and to improve your experience. We also use third‑party cookies from analytics providers. You can manage cookie preferences through your browser settings or by using the cookie banner on the Site.

9. Data Security and Breach Notification

In the unlikely event of a data breach that could jeopardise your personal data, we will notify the relevant supervisory authority within 72 hours and inform affected individuals if the breach is likely to result in a high risk to their rights and freedoms.

10. Changes to This Policy

We may update this policy from time to time. Any changes will be posted on the Site with a new “Last Updated” date. The last update was on April 03, 2026.

11. Contact Us

For any questions or concerns regarding this policy or your personal data, please reach out to our Data Protection Officer at:

Email: [email protected]