GDPR Compliance Policy
Foodtastekitchen (“we”, “our”, “us”) is committed to protecting the privacy and personal data of all visitors and users of our website foodtastekitchen.com. This policy explains how we collect, use, store, and share personal data in accordance with the European Union’s General Data Protection Regulation (GDPR) and applicable data‑protection laws. It also describes your rights under the GDPR and how you can exercise them.
1. Data We Collect
- Email addresses – Collected when you subscribe to our newsletter, create an account, or place an order.
- Cookies and similar technologies – Used to personalize content, analyze traffic, and improve user experience. Cookies are placed on your device when you visit the site and include session identifiers, preference settings, and marketing identifiers.
- Web analytics data – We use Google Analytics (and optional third‑party analytics) to gather aggregate information about site usage, such as page views, traffic sources, and device types. This data is anonymized and does not contain personally identifying information unless you voluntarily provide it.
2. How We Protect Your Data
- SSL/TLS encryption – All data transmitted between your browser and our servers is encrypted using industry‑standard SSL/TLS protocols.
- Secure servers – We host data on dedicated, secure servers with regular vulnerability scans, firewalls, and access controls.
- Limited data retention – Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected. Email addresses are kept for the duration of your subscription or order history, cookies are deleted after 30 days of inactivity, and analytics data is stored for 6 months.
- Staff training – All employees receive regular training on data‑protection best practices and are required to sign confidentiality agreements.
3. Legal Basis for Processing
We process personal data under the following lawful bases:
- Consent – When you opt‑in to our newsletter, marketing emails, or personalized offers, you give explicit, freely‑given, and informed consent. You can withdraw this consent at any time by using the unsubscribe link or contacting us.
- Legitimate interests – We process data necessary for the operation of our website, including the use of cookies and analytics, to improve user experience, analyze traffic patterns, and ensure site security. We conduct a legitimate interest assessment and balance your interests against our operational needs.
- Contractual necessity – When you place an order or register for an account, we process data that is essential to fulfil the contract (e.g., shipping information, payment details).
4. Your GDPR Rights
Under the GDPR you have the following rights. Each right is accompanied by an icon for easy reference.
Right to Access – You can request a copy of any personal data we hold about you. This includes the categories of data, the purposes for processing, and any third parties with whom we share data.
Right to Rectification – If any of your personal data is inaccurate or incomplete, you may ask us to correct it promptly.
Right to Erasure – Also known as the “right to be forgotten.” You may request that we delete your personal data unless we are legally required to retain it (e.g., for tax or contractual obligations).
Right to Restrict Processing – You can ask us to limit the processing of your data, for example, if you contest its accuracy or if we are no longer required to process it for the original purpose.
Right to Data Portability – You may receive your personal data in a structured, commonly used, and machine‑readable format, and transfer it to another controller.
Right to Object – If we process your data for direct marketing or profiling, you can object to such processing at any time.
Right to Withdraw Consent – You may withdraw consent at any time, and we will cease processing your data for the purposes for which you gave consent.
5. How to Exercise Your Rights
To exercise any of the rights above, please contact us via email at [email protected] with a clear description of your request and any necessary verification information (e.g., your name, email address, or order number). We will respond to all legitimate requests within 30 calendar days. If you require a faster response or have a more urgent matter, please let us know in the email subject line and we will prioritize accordingly.
6. Contact Information
Data Protection Officer (DPO): Foodtastekitchen
Email: [email protected]
Postal Address: 123 Culinary Lane, Food City, FC 12345, USA
7. Cookies and Consent Management
We use a cookie banner that appears the first time you visit the site. The banner allows you to accept or decline non‑essential cookies (e.g., analytics, advertising). Essential cookies required for the operation of the website are always enabled. You can change your cookie preferences at any time by clicking the “Cookie Settings” link in the banner or by revisiting our Privacy Policy page.
8. Data Sharing and Third‑Party Processors
We only share personal data with trusted third‑party service providers that assist us in delivering our services, such as email marketing platforms, payment processors, and web analytics services. Each provider is bound by a data processing agreement that ensures compliance with GDPR and protects your personal data. We do not sell or rent your personal data to any third party.
9. Retention and Deletion
Personal data is retained for the period necessary to fulfill the purposes for which it was collected and to comply with legal obligations. Once data is no longer needed, it is securely deleted or anonymized. For example, email addresses are stored for the duration of your subscription or order history, and cookie identifiers are automatically purged after 30 days of inactivity.
10. Updates to This Policy
We may update this policy from time to time. Any changes will be posted on this page with a new “Last Updated” date. Your continued use of the website after such changes constitutes your acceptance of the revised policy.
11. Last Updated
Last Updated: April 03, 2026