GDPR Compliance Policy

Effective Site: cookingflavorhub.com
Contact for Data‑Protection Queries: gdpr@cookingflavorhub.com
Last Updated: December 06, 2025

1. Introduction

CookingFlavorHub (“we”, “our”, “us”) is committed to protecting the personal data of its users in accordance with the European Union General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679). This GDPR Compliance Policy explains what personal data we collect, why we process it, how we protect it, and the rights you have under the GDPR. By using our website, you consent to the practices described herein.

2. Personal Data We Collect

We collect only the data that is necessary to provide and improve our services. The categories of personal data we process are:

Email addresses: collected when you subscribe to our newsletter, create an account, or contact us via the website.
Cookies and similar tracking technologies: used to remember your preferences, analyse site usage, and deliver personalized content.
Analytics data: aggregated information such as page views, device type, and referral source, gathered through third‑party analytics services.

3. Legal Basis for Processing

Under the GDPR, processing must be based on a lawful basis. CookingFlavorHub relies on the following:

Consent (Article 6(1)(a)): When you voluntarily provide your email address or accept our cookie banner, you give explicit consent for the specified purposes.
Legitimate Interests (Article 6(1)(f)): We process analytics data and essential cookies to improve site performance, security, and user experience, which are legitimate interests that do not override your fundamental rights.

4. How We Protect Your Data

Security is a top priority. We employ a layered approach to protect personal data:

Transport Layer Security (TLS/SSL): All data transmitted between your browser and our servers is encrypted using HTTPS.
Secure Servers: Our hosting environment is hardened, regularly patched, and monitored 24/7 for suspicious activity.
Limited Retention: Email addresses are retained only for as long as you remain subscribed or until you request deletion. Cookies are automatically cleared after 12 months unless you renew consent.
Access Controls: Only authorized personnel with a legitimate need can access personal data, and they are bound by confidentiality agreements.

5. Your GDPR Rights

You enjoy a series of rights under the GDPR. Each right is presented with a Bootstrap Icon for easy reference.

Right to Access

You may request confirmation that we are processing your personal data and obtain a copy of that data, together with information about the processing purposes, categories, and recipients.

Right to Rectification

If any of your personal data is inaccurate or incomplete, you have the right to have it corrected without undue delay.

Right to Erasure (Right to be Forgotten)

You may ask us to delete your personal data when it is no longer necessary for the purposes for which it was collected, when you withdraw consent, or when you object to the processing and there are no overriding legitimate grounds.

Right to Restrict Processing

You can request that we limit the way we use your data while we verify the accuracy of the data or while a dispute is being resolved.

Right to Data Portability

You may receive your personal data in a structured, commonly used, and machine‑readable format, and you may transmit that data to another controller without hindrance.

Right to Object

You have the right to object, on grounds relating to your particular situation, to processing of your personal data for direct marketing, scientific or historical research, or statistical purposes.

Right to Withdraw Consent

Whenever you have given consent for processing, you may withdraw that consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

6. How to Exercise Your Rights

To exercise any of the rights listed above, please contact our Data Protection Officer (DPO) via the email address provided below. Your request should include:

Full name and contact details (to verify your identity).
Specific right you are invoking (e.g., “I request a copy of my data under the Right to Access”).
Any relevant details that help locate the data (e.g., the email address you used to subscribe).

We will acknowledge receipt of your request within 5 business days and aim to complete the action within the statutory period of 30 calendar days, unless an extension is justified by the complexity of the request, in which case we will inform you of the reason and the new deadline.

7. Response Time

CookingFlavorHub is committed to responding to all GDPR‑related requests within 30 days of receipt. If additional time is required, we will notify you of the extension and provide a clear justification, as permitted by Article 12(3) of the GDPR.

8. International Transfers

All personal data is stored on servers located within the European Economic Area (EEA). If a transfer outside the EEA becomes necessary (e.g., for third‑party analytics), we will ensure an adequate level of protection through Standard Contractual Clauses or other approved mechanisms.

9. Changes to This Policy

We may update this GDPR Compliance Policy from time to time to reflect changes in our practices or legal requirements. Any material changes will be posted on this page with an updated “Last Updated” date. We encourage you to review the policy regularly.

10. Contact Information

If you have any questions, concerns, or wish to exercise your GDPR rights, please contact our Data Protection Officer at:

Email: gdpr@cookingflavorhub.com
Address: CookingFlavorHub, 123 Culinary Avenue, Food City, EU

This policy is provided for informational purposes and does not constitute legal advice. CookingFlavorHub remains fully compliant with the GDPR and will continue to protect the privacy and rights of its users.