GDPR Compliance Policy

Site: Kitchenmealspot (https://kitchenmealspot.com)
Contact Email: [email protected]
Last Updated: April 03, 2026

1. Introduction

Kitchenmealspot (“we”, “us”, “our”) is committed to protecting the privacy of our visitors, customers and users of our website. This policy explains how we collect, use, store and share personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data‑protection laws. By using our website you acknowledge that you have read and understood this policy.

2. Personal Data We Collect

We collect the following types of personal data when you interact with our website:

• Email addresses: Collected when you sign up for newsletters, create an account or place an order.
• Cookies and tracking pixels: Used to remember your preferences, analyze site usage and provide a personalised experience.
• Analytics data: Collected via third‑party analytics services (e.g., Google Analytics) to understand traffic patterns and improve our services.

3. How We Protect Your Data

We implement a range of technical and organisational measures to safeguard your personal data:

• SSL/TLS encryption: All data transmitted between your browser and our servers is encrypted using industry‑standard HTTPS.
• Secure servers: Our hosting environment is protected by firewalls, intrusion detection systems and regular vulnerability assessments.
• Limited data retention: Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected or to comply with legal obligations.
• Access controls: Only authorised staff with a legitimate business need can access personal data, and all staff receive data‑protection training.

4. Legal Basis for Processing

We process personal data on one or more of the following lawful bases:

• Consent: When you explicitly agree to receive marketing emails or to use cookies for personalised advertising.
• Legitimate interest: We process data to improve our website, deliver relevant content, and detect fraud or abuse.
• Contractual necessity: Processing email addresses to fulfil orders and provide customer support.

5. Your GDPR Rights

Under the GDPR you have the following rights with respect to your personal data. We are committed to respecting these rights and will respond to any request within 30 days.

Right to Access

You have the right to obtain confirmation that we are processing your personal data and to receive a copy of the data we hold about you. This includes information on the purposes of processing, the categories of data, recipients and any third parties with whom we share your data.

Right to Rectification

If your personal data is inaccurate or incomplete, you may request that we correct or update it. We will verify the request and correct the data promptly.

Right to Erasure (Right to be Forgotten)

You may ask us to delete your personal data when there is no legitimate reason for us to keep it, or if you withdraw consent and no other legal basis applies. We will delete the data from all our systems, except where retention is required by law.

Right to Restrict Processing

You can request that we limit the processing of your personal data, for example while we investigate its accuracy or legality. During this period we will store the data but not use it for further processing.

Right to Data Portability

You may receive your personal data in a structured, commonly used and machine‑readable format, or request that we transfer it directly to another controller, where technically feasible.

Right to Object

You can object to the processing of your personal data for direct marketing purposes or if the processing is based on legitimate interest. Upon receiving an objection, we will cease processing unless we can demonstrate compelling legitimate grounds.

Right to Withdraw Consent

If you have given consent for the processing of your data, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before the withdrawal.

6. How to Exercise Your Rights

To exercise any of the rights listed above, please contact us at [email protected]. Include a brief description of your request and any relevant information that will help us identify the data you are referring to. We may ask for proof of identity to protect your privacy.

Response Time: We will respond to your request within 30 days of receipt. If the request is complex or we need additional information, we will notify you within 10 days and provide an updated timeframe.

7. Data Retention

Personal data is retained only as long as necessary to achieve the purposes for which it was collected or to comply with legal obligations. Typical retention periods are:

• Email addresses: up to 5 years after the last interaction, unless you opt‑out or delete your account.
• Cookies: session cookies are deleted when the browser closes; persistent cookies are deleted after 12 months unless you delete them earlier.
• Analytics data: aggregated data is stored for up to 2 years; individual user data is anonymised or deleted after 6 months.

8. Changes to This Policy

We may update this policy from time to time. Any changes will be posted on this page with an updated “Last Updated” date. We encourage you to review the policy periodically to stay informed about how we protect your personal data.

9. Contact Us

If you have any questions, concerns or complaints about our data‑processing practices, or if you wish to exercise one of your GDPR rights, please email us at [email protected].