CookingFlavourly GDPR Compliance Policy

1. Introduction

CookingFlavourly (https://cookingflavorly.com) is committed to protecting the personal data of its visitors, subscribers, and users. This GDPR (General Data Protection Regulation) Compliance Policy explains how we collect, use, store, and protect personal data, and outlines the rights you have under the Regulation. If you have any questions, please contact us at gdpr@cookingflavorly.com.

2. Data We Collect

CookingFlavourly processes the following categories of personal data:

• Email address: collected when you subscribe to our newsletter, register for an account, or submit a contact form.
• Cookies and similar tracking technologies: used to remember your preferences, analyse site usage, and deliver personalised content.
• Analytics data: aggregated information such as IP address, browser type, device type, and pages visited, collected through Google Analytics and other statistical tools.

We do not collect sensitive data (e.g., health information, racial or ethnic origin, political opinions) unless you voluntarily provide it, in which case it will be processed only for the explicit purpose you have indicated.

3. Legal Basis for Processing

Our processing activities are based on the following lawful grounds under GDPR:

• Consent (Article 6(1)(a)): When you voluntarily sign up for the newsletter or accept our cookie banner, you give us explicit consent to process your email address and tracking data for the purposes described.
• Legitimate Interests (Article 6(1)(f)): We process analytics data and use cookies to improve website performance, enhance user experience, and protect the security of our services. Your interests and fundamental rights are carefully balanced against these legitimate interests.

If you withdraw consent, the processing based on consent will cease immediately, while processing based on legitimate interests may continue where it is necessary for the operation of the site.

4. How We Protect Your Data

CookingFlavourly employs a range of technical and organisational measures to safeguard personal data:

• SSL/TLS Encryption: All data transmitted between your browser and our servers is encrypted using HTTPS.
• Secure Servers: Our hosting environment is hosted in ISO‑27001 certified data centres with firewalls, intrusion detection systems, and regular security audits.
• Access Controls: Only authorised personnel with a legitimate need can access personal data, and they are bound by confidentiality agreements.
• Limited Retention: Email addresses are retained only as long as you remain subscribed or until you request erasure. Analytics data is stored in an aggregated, pseudonymised form for a maximum of 24 months.
• Data Breach Procedures: In the unlikely event of a breach, we have an incident‑response plan that includes prompt notification to the relevant supervisory authority and affected individuals within 72 hours, as required by GDPR.

5. Your GDPR Rights

Under GDPR, you enjoy a series of rights regarding your personal data. Each right is illustrated with a Bootstrap icon for quick reference.

How to Exercise Your Rights

To exercise any of the rights listed above, please submit a written request to our Data Protection Officer at gdpr@cookingflavorly.com. Include the following information to help us verify your identity:

• Full name and the email address used with CookingFlavourly.
• A clear description of the right you wish to invoke (e.g., “I request a copy of all data you hold about me”).
• Any supporting documentation that proves your identity (e.g., a scanned ID) if we deem it necessary.

We will acknowledge receipt of your request within 5 business days and provide a substantive response within 30 calendar days, unless a longer period is justified under GDPR (e.g., complex requests). If a delay is expected, we will inform you of the reasons and the anticipated completion date.

6. Data Retention Periods

- Email addresses: retained for as long as you remain subscribed to our newsletter or until you request erasure.
- Cookies: session cookies expire when you close your browser; persistent cookies are stored for a maximum of 12 months unless renewed by you.
- Analytics data: stored in an aggregated, pseudonymised form for up to 24 months, after which it is automatically deleted.

7. International Transfers

All personal data is processed within the European Economic Area (EEA). If a transfer outside the EEA becomes necessary (e.g., a third‑party service provider), we will ensure that appropriate safeguards such as Standard Contractual Clauses are in place.

8. Changes to This Policy

We may update this GDPR Compliance Policy from time to time to reflect changes in our practices or legal requirements. Any material changes will be posted on this page with an updated “Last Updated” date. Continued use of the site after such changes constitutes acceptance of the revised policy.

9. Contact Information

If you have any questions about this policy, the data we hold, or wish to exercise any of your GDPR rights, please contact our Data Protection Officer: