Mealkitchenflow GDPR Compliance Policy

Last Updated: April 03, 2026

Mealkitchenflow (“we”, “our”, “us”) is committed to protecting the privacy of our users and customers in accordance with the General Data Protection Regulation (GDPR) and related EU data‑protection laws. This policy explains how we collect, use, store, and share personal data, and outlines the rights you have as a data subject.

1. What Personal Data We Collect

We collect the following types of personal data when you interact with our website (mealkitchenflow.com):

Email addresses: When you sign up for newsletters, create an account, or request information, we store your email address to communicate with you.
Cookies and similar tracking technologies: We use first‑party and third‑party cookies to remember your preferences, track user behaviour, and personalize content.
Web analytics data: We employ tools such as Google Analytics (or equivalent) to collect information about how visitors use our site, including IP addresses, device type, and page views. This data is anonymised where possible.

2. How We Protect Your Data

We implement a range of technical and organisational measures to safeguard your personal data:

Transport Layer Security (TLS): All data transmitted between your browser and our servers is encrypted with TLS 1.3.
Secure servers: Our hosting infrastructure uses hardened, regularly updated operating systems and web servers (Apache/Nginx). Access is controlled via multi‑factor authentication.
Limited retention: Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected or to comply with legal obligations. Email addresses are kept for the duration of the user’s account, while analytics data is automatically deleted after 90 days.
Access controls: Only authorised personnel with a legitimate business need can access personal data. All staff undergo regular data‑protection training.

3. Legal Basis for Processing

We process your personal data on the following lawful bases:

Consent: For marketing communications and the use of certain cookies, we obtain your explicit consent. You can withdraw consent at any time via the unsubscribe link or by contacting us.
Legitimate interest: We process data necessary for the operation of our website, improving user experience, and ensuring security. This includes analytics and basic session management cookies.

4. Your GDPR Rights

Under the GDPR, you have the following rights regarding your personal data. We are committed to responding to any request within 30 days of receipt.

Right to Access

You can request a copy of the personal data we hold about you, including the purposes of processing and the categories of data. Provide a brief description of the information you need, and we will supply it in a readable format.

Right to Rectification

If any personal data is inaccurate or incomplete, you may ask us to correct or update it. Submit the details of the corrections you require, and we will adjust our records promptly.

Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or if you withdraw consent and no other legal basis exists.

Right to Restrict Processing

Under certain circumstances (e.g., if you contest the accuracy of data), you can ask us to limit the processing of your data. We will then store your data but not use it for purposes such as marketing.

Right to Data Portability

You may obtain a copy of your personal data in a structured, commonly used, and machine‑readable format. We will provide it in JSON or CSV format upon request.

Right to Object

You can object to the processing of your data for direct marketing or profiling purposes. If you exercise this right, we will cease processing such data unless we can demonstrate compelling legitimate grounds.

Right to Withdraw Consent

Consent can be withdrawn at any time. When you withdraw, we will stop processing your data for the purpose it was originally granted and will delete it where possible.

5. How to Exercise Your Rights

To exercise any of the rights above, please contact us at [email protected]. When sending a request, include:

Your full name and contact details.
A description of the request (e.g., “I would like to access all personal data we hold about me”).
Proof of identity if necessary (e.g., a copy of a passport or driver’s licence). This is required for requests that involve sensitive data or to prevent misuse.

We will acknowledge receipt of your request within 5 business days and respond within 30 days. If you need to confirm your identity, we may ask for additional documentation, but we will not request more information than is reasonably necessary.

6. Contact Us

If you have any questions about this policy, wish to make a complaint, or believe we have breached your rights, please contact our Data Protection Officer:

Email: [email protected]

We will endeavour to respond to all enquiries promptly and will keep you informed of any changes to our data‑processing practices.

This policy is effective as of April 03, 2026. By continuing to use our services, you acknowledge that you have read, understood, and agreed to this GDPR Compliance Policy.