GDPR Compliance Policy for Tastykitchenspot

At Tastykitchenspot we respect your privacy and are committed to protecting the personal data you share with us. This policy explains how we collect, use, and safeguard your information in accordance with the European Union’s General Data Protection Regulation (GDPR). If you have any questions or concerns, please contact us at [email protected].

Last Updated: April 03, 2026

1. What Data We Collect

We collect the following types of personal data:

Email addresses: When you subscribe to our newsletter, register for an account, or place an order.
Cookies and similar technologies: We use first‑party cookies to remember your preferences, shopping cart contents, and to provide a personalized browsing experience.
Analytics data: Tools such as Google Analytics capture anonymized information about how visitors interact with our site, including pages visited, time spent, and referral sources.

2. How We Protect Your Data

Security is a top priority for us. We employ a multi‑layered approach to protect your information:

SSL/TLS encryption: All data transmitted between your browser and our servers is encrypted using up‑to‑date TLS protocols.
Secure servers: Our hosting infrastructure is housed in data centres that meet ISO 27001 and GDPR security standards.
Access controls: Only authorised personnel with a legitimate business need can access personal data. All staff undergo regular data protection training.
Limited retention: Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. After that, data is securely deleted or anonymised.

3. Legal Basis for Processing

We process your personal data under the following lawful bases:

Consent: For newsletters, marketing communications, and any non‑essential services you opt into.
Legitimate interest: For improving our website, providing personalized content, and analysing usage patterns to enhance user experience.
Contractual necessity: For processing orders, delivering products, and providing customer support.

4. Your Rights Under GDPR

Right to Access

You have the right to obtain confirmation that we are processing your personal data and, where applicable, to receive a copy of that data in a structured, commonly used format.

Right to Rectification

Should any of your personal data be inaccurate or incomplete, you can request that we correct it without undue delay.

Right to Erasure (Right to be Forgotten)

You may ask us to delete your personal data, subject to legal obligations that may require us to retain certain records.

Right to Restrict Processing

Under certain circumstances, you can request that we limit how we use your personal data (e.g., if you contest its accuracy).

Right to Data Portability

You can obtain your personal data in a machine‑readable format and transfer it to another controller, where technically feasible.

Right to Object

You can object to the processing of your personal data for direct marketing or other purposes, and we will cease processing unless we have a compelling legitimate reason to continue.

Right to Withdraw Consent

If you have given us consent to process your data, you can withdraw it at any time. Withdrawal does not affect the legality of processing carried out before the withdrawal.

5. How to Exercise Your Rights

To exercise any of the rights listed above, please send a written request to:

Tastykitchenspot – Data Protection Officer
Email: [email protected]
Subject: GDPR Right – [Specify Right]

We will respond to your request within 30 calendar days, as required by GDPR. If the request is complex, we may extend the period by an additional 30 days, provided we inform you of the delay and the reason for the extension.

6. Retention of Data

We keep personal data only as long as necessary to fulfil the purposes outlined in this policy or as required by applicable law. For example:

Email addresses used for marketing are retained for up to 12 months after the last interaction, unless you request deletion earlier.
Order records are kept for 7 years to comply with tax and financial regulations.
Analytics data is stored in an anonymised form for 12 months to improve site performance.

7. Changes to This Policy

We may update this GDPR Compliance Policy from time to time. Any material changes will be posted on our website with a new “Last Updated” date. We encourage you to review this policy periodically to stay informed about how we protect your personal data.

8. Contact Us

If you have any questions about this policy, your personal data, or how we process it, please reach out to our Data Protection Officer at [email protected]. We are committed to addressing your concerns promptly and transparently.