Mealchefkitchen GDPR Compliance Policy

Last Updated: April 03, 2026

1. Introduction

Mealchefkitchen (the “Site”) is committed to protecting the privacy and personal data of all users in compliance with the European Union’s General Data Protection Regulation (GDPR). This policy explains the types of personal data we collect, the purposes for which it is processed, the legal bases for processing, the safeguards we have in place, and the rights you enjoy as a data subject.

2. What Personal Data We Collect

The Site collects the following personal data:

• Email addresses: Collected when you sign up for newsletters, create an account, or request recipe information.
• Cookies: First‑party and third‑party cookies are used to remember your preferences, track session activity, and improve user experience.
• Analytics data: We use Google Analytics and Matomo to collect aggregated and anonymised data about how visitors interact with the Site (e.g., page views, time on page, referral sources). No personally identifying information is stored in these analytics tools.

3. Legal Basis for Processing

Our processing activities are based on the following legal grounds:

• Consent: When you voluntarily provide your email address or other personal data, you give explicit consent for us to store and use that data for the purposes stated in this policy.
• Legitimate Interest: We process data to improve site functionality, deliver personalized content, and comply with legal obligations. The legitimate interest is balanced against your privacy rights and is regularly reviewed.

4. Data Protection Measures

To safeguard your personal data we employ:

• SSL/TLS encryption: All data transmitted between your browser and our servers is encrypted using HTTPS.
• Secure servers: We host our infrastructure on reputable cloud providers with physical and logical security controls, including firewalls, intrusion detection, and regular vulnerability scans.
• Access controls: Only authorised personnel with a legitimate need can access personal data, and all staff undergo data protection training.
• Limited retention: Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected or to comply with legal obligations. For example, email addresses are kept for a maximum of 12 months after the last interaction unless you opt‑in to longer retention.

5. Your GDPR Rights

Under the GDPR, you have the following rights regarding your personal data. Each right is illustrated with a Bootstrap icon for quick reference.

Right to Access

You have the right to obtain confirmation that we are processing your personal data and, where applicable, a copy of the data we hold. You may request this information by contacting us at [email protected].

Right to Rectification

If any personal data is inaccurate or incomplete, you may request that we correct it. Provide the necessary evidence, and we will update or correct the data promptly.

Right to Erasure (Right to be Forgotten)

You may request the deletion of your personal data under certain circumstances, such as when the data is no longer needed for the purpose it was collected, or if you withdraw consent. We will process such requests within 30 days, unless a legal obligation requires us to retain the data.

Right to Restrict Processing

In specific situations, you can request that we limit the use of your personal data. For example, if you contest the accuracy of the data, we will restrict processing until the matter is resolved.

Right to Data Portability

You may obtain your personal data in a structured, commonly used, and machine‑readable format (e.g., CSV). We will provide this data in a reasonable format and within 30 days of your request.

Right to Object

You can object to the processing of your personal data for direct marketing or profiling purposes. Once you object, we will cease processing your data for those purposes unless we have a compelling legitimate interest that overrides your objection.

Right to Withdraw Consent

If you have given us consent to process your data, you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of any processing carried out before the withdrawal.

6. How to Exercise Your Rights

To exercise any of the rights listed above, please send an email to [email protected] with the subject line “GDPR Rights Request – [Your Name]”. In your email, specify the right you wish to exercise and provide sufficient information for us to verify your identity (e.g., email address, full name, date of birth). We will respond within 30 days, as mandated by the GDPR, and will inform you if additional information is required to process your request.

7. Contact Information

If you have any questions about this policy or your personal data, please contact us:

• Email: [email protected]
• Postal Address: Mealchefkitchen, 123 Culinary Lane, Food City, 45678, USA

8. Changes to This Policy

We may update this GDPR Compliance Policy from time to time. Any changes will be posted on this page and will be effective immediately upon publication. We encourage you to review this policy periodically to stay informed about how we protect your personal data.