GDPR Compliance Policy

Introduction

Kitchendishspot (the “Company”) is committed to protecting the privacy and personal data of our users in accordance with the General Data Protection Regulation (GDPR) and related EU data‑protection laws. This policy explains what personal data we collect, how we use it, the legal basis for processing, and your rights under the GDPR. For any questions or requests regarding your personal data, please contact us at [email protected].

Personal Data We Collect

In order to provide a seamless and personalized experience on kitchendishspot.com, we collect the following types of personal data:

• Email addresses: Collected when you subscribe to newsletters, create an account, or request recipes.
• Cookies: We use first‑party cookies for session management, authentication, and to remember your preferences.
• Analytics data: We employ Google Analytics and similar tools to understand traffic patterns, user engagement, and to improve the site’s performance. This data is anonymised and aggregated.

How We Protect Your Data

The security of your personal data is paramount. We implement multiple safeguards to prevent unauthorized access, alteration, disclosure, or destruction:

• SSL/TLS Encryption: All data transmitted between your browser and our servers is encrypted using industry‑standard SSL/TLS certificates.
• Secure Servers: We host our services on secure, dedicated servers with strict access controls and regular vulnerability assessments.
• Limited Retention: Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected or to comply with legal obligations.
• Access Controls: Only authorised personnel with a legitimate need can access personal data, and all staff undergo data‑protection training.

Legal Basis for Processing

We process personal data based on the following lawful bases:

• Consent: When you explicitly opt‑in to receive newsletters or marketing communications, we rely on your consent. You can withdraw consent at any time via the unsubscribe link or by contacting us.
• Legitimate Interest: We process data to improve user experience, maintain site functionality, and analyse traffic for optimisation. This is a proportionate, balanced approach that respects your privacy.

Your GDPR Rights

Under the GDPR, you have a range of rights regarding your personal data. Below we describe each right and how you can exercise it.

• Right to Access

  You have the right to obtain confirmation that we are processing your personal data, and if so, to receive a copy of that data in a structured, commonly used format.

• Right to Rectification

  If your personal data is inaccurate or incomplete, you may request that we correct or update it.

• Right to Erasure (Right to be Forgotten)

  You may request the deletion of your personal data where there is no compelling reason for us to continue processing it.

• Right to Restrict Processing

  When you contest the accuracy of your data or claim that the processing is unlawful, we will restrict further use of that data until the matter is resolved.

• Right to Data Portability

  You can obtain your personal data in a machine‑readable format and transfer it to another controller.

• Right to Object

  At any time you may object to the processing of your data for direct marketing or profiling purposes.

• Right to Withdraw Consent

  Consent can be withdrawn at any time without affecting the lawfulness of processing based on consent before withdrawal.

How to Exercise Your Rights

To exercise any of the rights listed above, please contact our Data Protection Officer at [email protected] with a brief description of your request. For example:

• Subject: Request for Access to Personal Data
• Subject: Request for Data Erasure
• Subject: Withdrawal of Consent

We will respond within 30 days of receiving your request, as mandated by the GDPR. If we require additional information to verify your identity or to process your request, we will notify you accordingly.

Retention Period

Personal data collected through email subscriptions and account creation is retained for a maximum of 12 months after the last interaction, unless a longer period is required by law. Cookie data is automatically deleted after the session ends or after 30 days, whichever comes first. Analytics data is stored in aggregated form for up to 2 years to support site improvement.

Amendments to This Policy

We reserve the right to modify this policy at any time. Any changes will be reflected on this page and will be effective immediately upon posting. Your continued use of the site constitutes acceptance of the updated policy.