GDPR Compliance Policy

This GDPR Compliance Policy (“Policy”) explains how easyflavorkitchen (“we”, “our” or “us”) collects, processes, stores and protects the personal data of individuals in the European Economic Area (“EEA”) who visit our website easyflavorkitchen.com (“Site”). By accessing or using the Site, you acknowledge that you have read, understood and agreed to the terms of this Policy.

Last Updated: April 03, 2026

1. What Personal Data We Collect

We collect the following types of personal data:

Email addresses – used to send newsletters, order confirmations, and marketing communications.
Cookies and similar tracking technologies – to improve your browsing experience, personalize content, and analyze traffic.
Analytics data – including IP addresses, browser type, device information, pages visited, and time spent on the Site, collected via Google Analytics and other third‑party analytics services.

2. Legal Basis for Processing

We process personal data under the following lawful bases:

Consent – where you explicitly agree to receive marketing communications or to the use of certain cookies.
Legitimate Interest – to maintain and improve the Site, to analyze usage patterns, and to ensure the security of our services.

3. How We Protect Your Data

We employ a range of technical and organisational measures to safeguard your personal data:

Transport Layer Security (TLS/SSL) encryption for all data transmitted between your browser and our servers.
Secure, access‑controlled servers hosted in data centres with physical security, firewalls, and intrusion detection.
Regular vulnerability assessments and penetration testing.
Data minimisation – only the necessary data is retained, and we delete it after the retention period (typically 12 months for email addresses and 6 months for analytics data).
Encryption of stored data and restricted access for authorised staff only.

4. Your GDPR Rights

Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:

Right to Access

Request a copy of the personal data we hold about you.

Right to Rectification

Ask us to correct any inaccurate or incomplete data.

Right to Erasure

Request deletion of your personal data, where applicable.

Right to Restrict Processing

Ask us to limit the use of your data under certain circumstances.

Right to Data Portability

Receive your data in a structured, commonly used format.

Right to Object

Object to the processing of your data for direct marketing or profiling.

Right to Withdraw Consent

Withdraw any consent you have given us at any time.

5. How to Exercise Your Rights

To exercise any of the rights listed above, please contact us at [email protected] with a brief description of your request. We will verify your identity before processing any request to protect your privacy.

For example, if you wish to request a copy of your data, you can send an email stating: “I would like to exercise my Right to Access. Please provide me with a copy of all personal data you hold about me.” If you want your data deleted, state: “I wish to exercise my Right to Erasure. Please delete all personal data related to my email address.” The same format applies to other rights.

We will respond to all valid requests within 30 calendar days of receipt, as required by the GDPR. If we need more time to verify your identity or to investigate the request, we will inform you and provide a reasonable extension.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal and regulatory obligations. Typical retention periods are:

Email addresses – up to 12 months after the last interaction, unless the user opts out earlier.
Cookies – session cookies are deleted when the browser is closed; persistent cookies are retained for 12 months.
Analytics data – anonymised aggregated data is retained for 6 months; raw data (IP addresses) is deleted after 30 days.

7. Contact Us

If you have any questions or concerns about this Policy or how we handle your personal data, please reach out to our Data Protection Officer:

easyflavorkitchen
GDPR Office
Email: [email protected]

8. Changes to This Policy

We may update this Policy from time to time. Any changes will be posted on this page and, where appropriate, communicated via email. The “Last Updated” date at the top of this page reflects the most recent revision. We encourage you to review this Policy periodically to stay informed about how we protect your personal data.