GDPR Compliance Policy

Last Updated: April 03, 2026

Introduction

At flavormealhub we respect your privacy and are committed to protecting the personal data you share with us. This GDPR Compliance Policy explains how we collect, use, store, and safeguard your information, and outlines your rights under the General Data Protection Regulation (EU) 2016/679. If you have any questions or concerns, please contact us at [email protected].

What Personal Data We Collect

We collect the following types of personal data when you interact with our website:

Email addresses – used for account creation, order confirmation, newsletters, and customer support.
Cookies and similar technologies – used to remember your preferences, analyze traffic, and personalize content.
Analytics data – collected via third‑party services (e.g., Google Analytics) to improve site performance and user experience. This data may include IP addresses, device type, and browsing behaviour.

Legal Basis for Processing

We process personal data based on the following lawful bases:

Consent – when you voluntarily subscribe to our newsletter, create an account, or provide your email address for marketing purposes.
Legitimate Interest – when we use cookies and analytics to improve our services, detect security threats, and comply with legal obligations.
Contractual Necessity – when we process your email address and order details to fulfil the purchase agreement.

How We Protect Your Data

We employ a comprehensive set of technical and organisational measures to safeguard your personal data:

SSL/TLS encryption – all data transmitted between your browser and our servers is encrypted.
Secure servers – data is stored on encrypted, access‑controlled servers hosted in the EU.
Access controls – only authorised personnel with a legitimate need can access personal data.
Limited retention – we retain personal data only for as long as necessary to fulfil the purposes outlined in this policy or as required by law.
Regular security audits – we conduct periodic vulnerability assessments and penetration tests.

Your GDPR Rights

Under the GDPR, you have the following rights with respect to your personal data. Each right is illustrated with a Bootstrap icon for quick reference.

Right to Access

You can request a copy of the personal data we hold about you, including the purposes of processing, categories of data, recipients, and retention periods. We will provide you with the information in a concise, structured, and easily accessible format within 30 days.

Right to Rectification

If any of your personal data is inaccurate or incomplete, you may request that we correct it. We will verify the request and update the data promptly, within the 30‑day response window.

Right to Erasure

You can request the deletion of your personal data when it is no longer necessary for the purposes it was collected, or if you withdraw consent. We will delete your data from all relevant systems, unless a legal obligation requires retention.

Right to Restrict Processing

You may ask us to limit the processing of your data, for example, if you contest its accuracy. During the restriction period, we will only store or use your data for compliance with legal obligations or for the establishment of a dispute.

Right to Data Portability

You can receive your personal data in a structured, commonly used, machine‑readable format, or request that we transmit it directly to another controller, subject to legal and technical constraints.

Right to Object

You may object to the processing of your data for direct marketing or profiling purposes. Upon receiving your objection, we will stop processing unless we can demonstrate compelling legitimate grounds that override your interests.

Right to Withdraw Consent

If you have provided consent for the processing of your data, you can withdraw it at any time. Withdrawal does not affect the legality of processing based on consent before withdrawal. We will cease processing your data upon receipt of the withdrawal, unless another lawful basis applies.

How to Exercise Your Rights

To exercise any of the rights described above, please contact us at [email protected]. In your request, include:

Your full name and contact details.
Any identifying information that will help us locate your data (e.g., email address, order number).
A clear statement of the right you wish to exercise.

We will respond to your request within 30 calendar days. If your request is complex or we need additional information, we may extend the response time by up to 60 days, but we will inform you of any delay and the reasons for it.

Contact Information

For any questions, concerns, or complaints regarding this policy or our data practices, please reach out to:

Phone: +44 20 7946 0958 (UK)
Email: [email protected]
Address: 123 Flavor Street, London, UK

Policy Updates

We may update this GDPR Compliance Policy from time to time. Any changes will be posted on our website with a revised “Last Updated” date. We encourage you to review the policy periodically to stay informed about how we handle your personal data.