Yummymealkitchen GDPR Compliance Policy

Last Updated: April 03, 2026

Yummymealkitchen (“we”, “our”, “us”) is committed to protecting your personal data and respecting your privacy rights under the General Data Protection Regulation (EU) 2016/679 (GDPR). This policy explains what personal data we collect, how we use it, the legal bases for processing, and how you can exercise your rights as a data subject.

1. Types of Personal Data We Collect

We collect the following categories of personal data:

• Email addresses – used for account registration, newsletter subscription, order confirmations, and customer support.
• Cookies and similar technologies – used to personalize your experience, remember your preferences, analyze site traffic, and provide social media features.
• Analytics data – collected via third‑party services (e.g., Google Analytics) to understand how visitors interact with our website, which helps us improve content and services.

2. How We Protect Your Personal Data

We employ a range of technical and organisational measures to safeguard your personal data:

• SSL/TLS encryption – all data transmitted between your browser and our servers is encrypted using industry‑standard HTTPS.
• Secure servers – our hosting environment is protected by firewalls, intrusion detection systems, and regular security audits.
• Limited retention – personal data is retained only for as long as necessary to fulfil the purposes for which it was collected or to comply with legal obligations.
• Access controls – only authorised personnel with a legitimate need to access personal data are granted access, and all staff undergo privacy training.

3. Legal Basis for Processing

We process personal data on the following lawful bases:

• Consent – when you voluntarily provide your email address to receive newsletters or promotional offers, we rely on your explicit consent.
• Legitimate interests – we process data to improve our website, deliver personalized content, and provide customer support, provided these interests do not override your fundamental rights.

4. Your GDPR Rights

You have the following rights regarding your personal data. We encourage you to exercise these rights by contacting us at [email protected]. We will respond within 30 days of receiving your request.

Right to Access

You can request a copy of the personal data we hold about you, including the purposes of processing, categories of data, recipients, and your rights. We will provide this information in a concise, intelligible, and easily accessible format.

Right to Rectification

If any of your personal data is inaccurate or incomplete, you may ask us to correct it. We will update the data promptly and notify any third parties we have shared it with, where applicable.

Right to Erasure

Also known as the “right to be forgotten,” you may request deletion of your personal data when it is no longer needed for the purposes we collected it for, or if you withdraw consent and there is no other legal basis to continue processing.

Right to Restrict Processing

You can request that we limit the processing of your personal data, for example, if you contest its accuracy or if the processing is unlawful. While we restrict processing, we may still store the data but will not use it for any purpose other than those required for legal compliance.

Right to Data Portability

You can obtain your personal data in a structured, commonly used, machine‑readable format and transfer it to another controller. We will provide the data in a format such as CSV or JSON where feasible.

Right to Object

At any time, you can object to the processing of your personal data for direct marketing or profiling purposes. Upon receiving your objection, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

Right to Withdraw Consent

If you have provided consent for the processing of your data, you may withdraw it at any time. Withdrawal will not affect the lawfulness of any processing carried out before the withdrawal, but we will stop processing thereafter.

5. How to Exercise Your Rights

To exercise any of the rights listed above, please send a written request to:

Yummymealkitchen
GDPR Department
[email protected]

Include the following information in your request:

• Your full name and contact details.
• A clear statement of the right you wish to exercise.
• Any identifying information that will help us locate your personal data (e.g., email address, account number).

We may ask for additional information to verify your identity before processing your request. This is a necessary step to protect your data from unauthorized access.

6. Response Time and Follow‑Up

We will acknowledge receipt of your request within 5 business days and provide a full response within 30 days, as required by the GDPR. If we need more time, we will inform you of the delay and provide a new deadline.

7. Contact Information

If you have any questions about this policy, our data processing practices, or if you wish to report a concern, please contact:

GDPR Officer
Yummymealkitchen
Email: [email protected]

8. Updates to This Policy

We may update this GDPR Compliance Policy from time to time. Any changes will be reflected on this page with an updated “Last Updated” date. We encourage you to review the policy periodically to stay informed about how we protect your personal data.