GDPR Compliance Policy

Last Updated: April 03, 2026

1. Introduction

flavordishstudio (the “Website”) is committed to protecting the privacy and personal data of all users in accordance with the General Data Protection Regulation (EU) 2016/679 (the “GDPR”). This policy explains what personal data we collect, how we use it, the legal basis for our processing activities, and the rights you have as a data subject. If you have any questions or wish to exercise any of your rights, please contact us at [email protected].

2. Personal Data We Collect

The data we collect is limited to what is necessary for providing and improving our services. Specifically, we collect:

Email addresses: When you sign up for newsletters, create an account, or request support.
Cookies: To remember your preferences, track site usage, and personalize content.
Analytics data: Anonymised metrics collected via Google Analytics and similar tools to understand traffic patterns and improve user experience.

3. How We Protect Your Data

We employ industry‑standard technical and organisational measures to safeguard your personal data:

SSL/TLS encryption: All data transmitted between your browser and our servers is encrypted using 256‑bit SSL/TLS.
Secure servers: We host our data on reputable, ISO‑27001 certified cloud providers with multi‑factor authentication and regular penetration testing.
Limited retention: Personal data is retained only for as long as necessary to fulfil the purpose it was collected for, or as required by law. Email addresses and account information are kept for the duration of your account activity; cookies and analytics data are deleted after 30 days of inactivity.
Restricted access: Access to personal data is limited to authorized staff members who require it for legitimate business purposes.

4. Legal Basis for Processing

Our processing activities are based on the following lawful bases:

Consent: When you explicitly opt‑in to receive marketing communications or newsletters.
Legitimate interest: When we process data for site analytics, improving user experience, and ensuring security, provided that such interests do not override your fundamental rights.

5. Your GDPR Rights

Under the GDPR, you have the following rights. We are committed to respecting each of them and providing a clear process for exercising them.

Right to Access

Request a copy of any personal data we hold about you, including the source of the data, the purpose for which it is processed, and who it is shared with.

Right to Rectification

Correct inaccurate or incomplete personal data. Provide updated information and we will amend our records promptly.

Right to Erasure

Ask us to delete your personal data, subject to legal obligations that may require us to retain certain information.

Right to Restrict Processing

Limit how we process your data (e.g., for verification purposes) while still allowing us to retain it.

Right to Data Portability

Obtain your data in a structured, commonly used, machine‑readable format and transfer it to another controller if desired.

Right to Object

Object to the processing of your data for direct marketing or profiling purposes. We will stop processing unless we can demonstrate compelling legitimate grounds.

Right to Withdraw Consent

Withdraw consent at any time. This will not affect the lawfulness of any processing that relied on consent before withdrawal.

6. How to Exercise Your Rights

To exercise any of the rights above, please send a written request to [email protected] with the following information:

Your full name and contact details.
Any additional information that will help us identify you (e.g., account ID, email address).
A clear statement of the right you wish to exercise (e.g., “I request access to my personal data”).

If you prefer, you may also use the contact form on our website and indicate that your message is a GDPR request. We will acknowledge receipt within 5 business days and provide a response within 30 calendar days, as required by the GDPR. If a request is complex or requires additional verification, we may need up to 60 days, but we will keep you informed of any delays.

7. Contact Information

For any questions, concerns, or to exercise your rights, please contact our Data Protection Officer at:

[email protected]

8. Changes to This Policy

We may update this policy from time to time to reflect changes in legal requirements or our data processing practices. Any amendments will be posted on this page with an updated “Last Updated” date. We encourage you to review this policy periodically.