GDPR Compliance Policy

Tastymealworld is committed to protecting the privacy and personal data of all users of our website (https://tastymealworld.com). This policy explains how we collect, use, store, and protect your personal information in compliance with the European Union General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. By accessing or using our site, you acknowledge that you have read, understood, and agreed to this policy.

1. Types of Personal Data We Collect

• Email addresses: When you sign up for newsletters, create an account, or place an order, we collect your email address to communicate with you, send updates, and provide customer support.
• Cookies and similar technologies: We use first‑party cookies and third‑party analytics cookies to track website usage, personalize content, and improve user experience. Cookies help us understand traffic patterns and user preferences.
• Analytics data: We collect aggregated, anonymous data through services such as Google Analytics and Matomo. This data includes page views, session duration, device information, and geographic location, enabling us to optimize our services.

2. Legal Basis for Processing

We process personal data based on the following lawful bases:

• Consent: By providing your email address or using our services, you consent to the processing of your data for the purposes stated in this policy.
• Legitimate Interest: We process data to improve our website, deliver relevant content, and provide a secure shopping experience, provided that such interest does not override your fundamental rights.

3. How We Protect Your Data

Tastymealworld employs a range of technical and organizational measures to safeguard your personal information:

• SSL/TLS Encryption: All data transmitted between your browser and our servers is encrypted using industry‑standard SSL/TLS protocols.
• Secure Servers: We host our data on secure, GDPR‑compliant servers with regular security audits and intrusion detection systems.
• Access Controls: Only authorized personnel have access to personal data, and all staff receive mandatory data protection training.
• Limited Retention: Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. After this period, data is securely deleted or anonymized.

4. Your GDPR Rights

Under the GDPR, you have the following rights regarding your personal data. Each right is illustrated with a Bootstrap icon for quick reference.

Right to Access

You may request a copy of the personal data we hold about you, including the categories of data, the purposes of processing, and the recipients of your data. To exercise this right, email [email protected] with a brief description of the information you seek. We will respond within 30 days.

Right to Rectification

If you find any inaccuracies in your data, you can request correction. Provide the correct information via the same email address, and we will update our records promptly.

Right to Erasure

You may ask us to delete your personal data, provided no legal obligations require retention. Contact us at [email protected] and specify the data you wish to erase. We will process the request within 30 days, unless we have a lawful basis to retain the data.

Right to Restrict Processing

If you contest the accuracy of your data or the legality of its processing, you can request that we suspend further processing. We will maintain the data but will not use it until the issue is resolved. Notify us via email to exercise this right.

Right to Data Portability

You can obtain your personal data in a structured, commonly used, machine‑readable format, and transfer it to another controller. Provide a request to [email protected] and we will deliver the data within 30 days, unless the data is too large or complex to provide in a portable format.

Right to Object

You may object to the processing of your data for direct marketing or profiling purposes. Upon receiving your objection, we will cease processing unless we can demonstrate a compelling legitimate interest that overrides your objection.

Right to Withdraw Consent

If you previously gave consent to process your data, you can withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal. Email [email protected] to withdraw consent. We will honor your request within 30 days.

5. How to Exercise Your Rights

To exercise any of the rights above, please contact us at [email protected]. Include your full name, email address, the specific request, and any supporting documentation that clarifies your identity or the data in question. We will confirm receipt of your request within 5 business days and respond within 30 days, unless additional time is required to verify your identity or to consult with legal counsel.

6. Data Retention

Personal data is retained for the following periods unless a longer retention period is required by law:

• Customer orders: 7 years (tax and accounting purposes).
• Newsletter subscriptions: until the user unsubscribes or requests deletion.
• Analytics data: 12 months, after which it is anonymized.

7. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or legal obligations. The “Last Updated” date at the top of this document indicates the most recent revision. We will notify users of significant changes by posting a notice on our website and, where appropriate, via email.

8. Contact Information

For any questions, concerns, or to exercise your data protection rights, please contact:

• Data Protection Officer: Tastymealworld DPO
• Email: [email protected]
• Address: 123 Foodie Lane, Culinary City, 45678, UK

Last Updated: April 03, 2026