GDPR Compliance Policy

Last Updated: April 03, 2026
Contact for GDPR matters: [email protected]

1. Introduction

FoodBlendKitchen (the “Website”) is committed to protecting the privacy and personal data of all visitors and users. This GDPR Compliance Policy explains what personal data we collect, how we use it, and your rights under the General Data Protection Regulation (EU) 2016/679. By using the Website, you acknowledge that you have read and understood this policy.

2. Personal Data We Collect

We collect the following types of personal data:

• Email Addresses: When you subscribe to our newsletter, request a recipe, or contact us via the contact form.
• Cookies: We use first‑party and third‑party cookies to remember your preferences, track session activity, and gather statistical data.
• Analytics Data: Google Analytics and similar tools collect anonymous usage data such as page views, time on site, and referral sources.

3. Legal Basis for Processing

We process your personal data on the following legal bases:

• Consent: Your email address is processed when you explicitly opt‑in to receive newsletters or other marketing communications.
• Legitimate Interest: We use analytics data and non‑personal cookies to improve the Website’s functionality and user experience. This is a legitimate interest under Article 6(1)(f) of the GDPR.

4. How We Protect Your Data

We employ industry‑standard technical and organisational measures to protect your personal data:

• SSL Encryption: All data transmitted between your browser and our servers is encrypted using TLS 1.3.
• Secure Servers: Our hosting environment is protected by firewalls, intrusion detection systems, and regular security audits.
• Limited Retention: We retain email addresses only for the period necessary to fulfil the purpose of collection or to comply with legal obligations. Analytics and cookie data are retained for a maximum of 12 months.

5. Your GDPR Rights

Right to Access

You have the right to obtain confirmation that we are processing your personal data and, if so, access the data we hold. This includes information about the purposes of processing, categories of data, recipients, and the intended period of storage.

Right to Rectification

If any of your personal data is inaccurate or incomplete, you may request that we correct or complete it. We will respond within 30 days of receiving your request.

Right to Erasure

You may ask us to delete your personal data where no legal basis exists to continue processing, or where you withdraw consent. We will remove data from our active databases and, where possible, from backups, within 30 days.

Right to Restrict Processing

You can request that we limit the processing of your data if you challenge its accuracy or if we no longer need it for the original purpose. We will store your data but will not use it for any further processing until the restriction is lifted.

Right to Data Portability

You may obtain a copy of your personal data in a structured, commonly used, and machine‑readable format. We will provide the data in a format such as CSV or JSON upon request.

Right to Object

You can object to the processing of your data for direct marketing purposes or for profiling. Upon receiving such an objection, we will cease processing the data for the specified purpose and will inform you of the outcome.

Right to Withdraw Consent

If you have given us consent to process your data, you can withdraw it at any time. Withdrawal does not affect the legality of any processing carried out before the withdrawal, nor does it affect any lawful processing that continues to be necessary.

6. How to Exercise Your Rights

To exercise any of the rights above, please contact us at [email protected] and include the following information:

• Full name
• Email address or other identifier
• Clear statement of the right you are exercising (e.g., “Right to Access”)
• Any supporting documentation that confirms your identity (optional but may expedite processing)

We will acknowledge receipt of your request within 5 business days and respond within 30 calendar days, as required by the GDPR. If additional time is necessary, we will inform you of the delay and the reason.

7. Data Retention

We retain personal data only as long as necessary to fulfill the purposes for which it was collected, or as required by law. Specifically:

• Email addresses: up to 3 years after last interaction, unless consent is withdrawn earlier.
• Cookies and analytics data: up to 12 months, after which they are automatically deleted.

8. Third‑Party Links and Services

The Website may contain links to third‑party sites or use third‑party services (e.g., Google Analytics). These third parties are separate from FoodBlendKitchen and have their own privacy policies. We recommend reviewing those policies before providing any personal data to them.

9. Updates to this Policy

We may update this GDPR Compliance Policy from time to time. When we make changes that affect how we process personal data, we will update the “Last Updated” date and, where appropriate, provide a summary of the changes. We encourage you to review this policy regularly.

10. Contact Information

If you have any questions about this policy, wish to report a data breach, or want to lodge a complaint with a supervisory authority, please contact:

FoodBlendKitchen – Data Protection Officer
Email: [email protected]
Address: 123 Culinary Lane, Food City, FC 45678