GDPR Policy - flavordishspot

GDPR Compliance Policy

Welcome to flavordishspot.com (the “Site”). This policy explains how we collect, use, store, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and related European data‑protection laws. By using the Site, you acknowledge that you have read and understood this policy.

1. Data We Collect

Email addresses: When you sign up for newsletters, create an account, or contact us, we store your email address to provide the requested services and communications.
Cookies and tracking technologies: We use first‑party and third‑party cookies, including Google Analytics, to analyze traffic, improve user experience, and personalize content.
Analytics data: We collect anonymous usage statistics such as page views, device type, operating system, and referral source to optimize the Site and services.

2. Legal Basis for Processing

We process your personal data under the following lawful bases:

Consent: When you voluntarily provide your email address or opt‑in to newsletters, you give explicit consent for us to use that data for communications.
Legitimate interest: We process analytics and cookie data to improve the Site, provide relevant content, and detect security threats. This activity is balanced against your privacy interests and is documented in our internal privacy impact assessment.

3. How We Protect Your Data

SSL/TLS encryption: All data transmitted between your browser and our servers is encrypted via HTTPS.
Secure servers: We host data on industry‑standard, ISO 27001 certified servers with physical and logical access controls.
Limited retention: Personal data is retained only as long as necessary to fulfill the purpose for which it was collected, or as required by law. Email addresses are deleted after 24 months of inactivity unless the user opts to stay subscribed.
Regular audits: We conduct quarterly privacy audits and penetration tests to identify and remediate vulnerabilities.

4. Your GDPR Rights

You have the following rights with respect to your personal data. Each right is represented with a Bootstrap 5 icon for quick reference.

Right to Access

You may request a copy of the personal data we hold about you. This includes the categories of data, the purposes of processing, and the recipients.

Right to Rectification

You can correct inaccurate or incomplete personal data we hold. We will update the data within 30 days of receiving your request.

Right to Erasure

Under certain circumstances (e.g., data is no longer needed, you withdraw consent), you can request deletion of your personal data. We will remove it from all active systems within 30 days, except where retention is required by law.

Right to Restrict Processing

You may ask us to limit the processing of your data (e.g., for accuracy verification). We will store your data but will not use it for marketing or analytics until the restriction is lifted.

Right to Data Portability

Request a structured, machine‑readable copy of your data, which you can transfer to another service. We will provide the data in a commonly used format (e.g., CSV) within 30 days.

Right to Object

You can object to the processing of your data for direct marketing or profiling. Upon objection, we will cease processing for those purposes unless we can demonstrate compelling legitimate grounds.

Right to Withdraw Consent

At any time, you may withdraw consent for any processing activity. We will stop processing your data for that activity immediately and confirm the withdrawal within 30 days.

5. How to Exercise Your Rights

To exercise any of the rights above, please contact us at [email protected]. In your email, include:

Your full name and contact details.
A clear statement of the right you wish to exercise.
Any supporting evidence that helps us identify your data (e.g., account ID, email address).

We will respond to your request within 30 days. If you need a faster response for urgent requests (e.g., to prevent harm), please indicate that in your email and we will make reasonable efforts to expedite the process.

6. Contact Information

For any questions about this policy, data protection practices, or to exercise your GDPR rights, please reach out to our Data Protection Officer:

flavordishspot.com
Email: [email protected]

7. Policy Updates

This policy may be updated from time to time. We will notify you of significant changes by posting a notice on the Site and updating the “Last Updated” date. The current version was last updated on April 03, 2026.