GDPR Compliance Policy – Yummyhomecook

Last Updated: April 03, 2026

Yummyhomecook (“we”, “our”, or “us”) is committed to protecting the privacy and personal data of our users, customers, and visitors in accordance with the European Union General Data Protection Regulation (GDPR) and related data‑protection laws. This policy explains what personal data we collect, how we use it, the legal bases for our processing activities, and your rights under the GDPR. If you have any questions or concerns, please contact us at [email protected].

1. Types of Personal Data We Collect

We collect the following categories of personal data:

• Email addresses – used for account registration, order confirmation, newsletters, and customer support.
• Cookies and similar tracking technologies – used to improve site usability, personalize content, and analyze traffic patterns.
• Analytics data – collected via services such as Google Analytics (with anonymisation) to understand how visitors interact with our website.

2. How We Protect Your Data

We employ industry‑standard technical and organisational measures to safeguard your personal data against unauthorised access, disclosure, alteration, or loss:

• All data transmissions are protected with HTTPS (SSL/TLS) encryption.
• Our servers are hosted on secure, geographically distributed data centres with strict physical security controls.
• We restrict access to personal data to employees and contractors who need it to perform their duties, and we require them to sign confidentiality agreements.
• Data is retained only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Personal data is securely deleted or anonymised after the retention period expires.

3. Legal Basis for Processing

We process personal data on one or more of the following legal bases:

• Consent – for optional newsletters, marketing communications, and use of certain cookies. Consent is freely given, specific, informed, and unambiguous.
• Legitimate Interest – for improving our services, analysing site usage, and ensuring the security of our platform. We conduct a balancing test to ensure that our legitimate interests do not override your rights and freedoms.
• Performance of a contract – for processing orders and providing customer support.

4. Your GDPR Rights

Under the GDPR, you have the following rights regarding your personal data. We are committed to respecting and facilitating these rights within the statutory response time of 30 days.

Right to Access

You may request a copy of the personal data we hold about you, including the purposes of processing, the categories of data, and the recipients of your data. To exercise this right, email us at [email protected] with the subject “GDPR Access Request” and a brief description of the information you seek.

Right to Rectification

If any of your personal data is inaccurate or incomplete, you may request that we correct it. Provide the specific data you wish to rectify, and we will update it promptly.

Right to Erasure (Right to be Forgotten)

You may ask us to delete your personal data, subject to legal obligations that may require us to retain certain records. Please specify the data you wish to have erased and the reason for your request.

Right to Restrict Processing

Under certain circumstances (e.g., if you contest the accuracy of the data or the processing is unlawful), you can request that we restrict the use of your data. We will store the data but will not use it for any purpose other than to comply with legal obligations or to resolve disputes.

Right to Data Portability

You can obtain your personal data in a structured, commonly used, machine‑readable format (e.g., CSV or JSON) and transfer it to another controller. Submit a request specifying the format you prefer.

Right to Object

If you object to the processing of your data for direct marketing or profiling purposes, we will cease processing those activities unless we can demonstrate compelling legitimate grounds.

Right to Withdraw Consent

You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal. To withdraw, simply reply to a marketing email with “Withdraw Consent” or contact us at [email protected].

5. How to Exercise Your Rights

To exercise any of the rights listed above, please contact us via email at [email protected]. Include your full name, contact details, a description of your request, and any supporting documentation you deem necessary. We will respond within 30 days, and if we need additional information, we will inform you promptly.

6. Contact Information

For any GDPR‑related inquiries, complaints, or to exercise your rights, please reach out to:

• Email: [email protected]
• Address: Yummyhomecook Ltd., 123 Flavor Street, Culinary City, 45678, UK

7. Updates to This Policy

We may update this GDPR Compliance Policy from time to time. Any changes will be posted on our website and, where appropriate, you will be notified by email. The “Last Updated” date at the top of this page reflects the most recent revision.

By continuing to use our website, you acknowledge that you have read, understood, and agree to the terms of this policy.