GDPR Compliance Policy

FoodDishKitchen (the “Company”) is committed to protecting the privacy and personal data of all visitors to fooddishkitchen.com. This policy explains how we collect, use, and safeguard your data in accordance with the General Data Protection Regulation (GDPR) and other applicable data‑protection laws.

Last Updated: April 03, 2026

---

Data We Collect

When you interact with our website, we may collect the following types of personal data:

• Email addresses – when you sign up for newsletters, submit contact forms, or place orders.
• Cookies and similar tracking technologies – to improve site usability, analyze traffic, and personalize content.
• Analytics data – including IP addresses, device information, and browsing behavior, collected via Google Analytics and similar services.

Legal Basis for Processing

We rely on the following legal bases to process your personal data:

• Consent – for marketing communications and newsletter subscriptions. You can withdraw consent at any time.
• Legitimate interest – to enhance website functionality, analyze usage patterns, and deliver relevant content. We conduct a proportionality assessment to ensure that our interests do not override your fundamental rights.
• Contractual necessity – when you place an order or request a service, we process data essential to fulfil the contract.

How We Protect Your Data

We implement robust technical and organisational measures to protect your personal data:

• SSL/TLS encryption – all data transmitted between your browser and our servers is encrypted.
• Secure servers – we host data on ISO‑27001 certified servers with physical and network security controls.
• Access controls – only authorised personnel with a legitimate business need can access personal data.
• Limited retention – we retain personal data only for as long as necessary to achieve the purposes for which it was collected, and then securely delete or anonymise it.
• Regular audits – we conduct periodic security audits and penetration tests to identify and remediate vulnerabilities.

Your Rights Under GDPR

Under the GDPR, you have several rights regarding your personal data. The following sections detail each right, the associated icon, and how you can exercise it with FoodDishKitchen.

Right to Access

You have the right to obtain confirmation that we are processing your personal data, and if so, to receive a copy of that data. This includes information on the categories of data we hold, the purposes of processing, and any third parties with whom we share data.

Right to Rectification

If your personal data is inaccurate or incomplete, you can request us to correct it. We will update or complete your data promptly, ensuring it remains accurate and up to date.

Right to Erasure

Also known as the “right to be forgotten,” you may request the deletion of your personal data if it is no longer necessary for the purposes it was collected, if you withdraw consent, or if you object to processing and there are no overriding legitimate grounds.

Right to Restrict Processing

You can ask us to restrict the processing of your data when you contest its accuracy, or when we are no longer authorised to process it but you require it for the establishment, exercise, or defence of legal claims.

Right to Data Portability

You may receive your personal data in a structured, commonly used, and machine‑readable format. If you wish to transfer that data to another controller, we will facilitate the transfer, provided it is technically feasible.

Right to Object

At any time, you can object to the processing of your personal data for direct marketing or profiling purposes. Upon receiving your objection, we will stop processing your data for those purposes unless we can demonstrate compelling legitimate grounds that override your interests.

Right to Withdraw Consent

If you have provided consent for any processing activity, you may withdraw that consent at any time. Withdrawal is as easy as asking us to stop processing your data and is effective immediately.

How to Exercise Your GDPR Rights

To exercise any of the rights listed above, please send a written request to:

GDPR Contact Email: [email protected]

In your message, include:

• Your full name and contact details (email, phone, or postal address).
• A clear statement of the right you are exercising (e.g., “I request access to my personal data”).
• Any identifying information that will help us locate your data (e.g., email address used on the site).
• Any supporting documentation if you believe it is necessary (e.g., a copy of your ID for identity verification).

Response Time

We will respond to your request within 30 days from the date we receive it. If we need additional time, we will inform you of the reason and provide an estimated completion date.

Verification

For certain requests (e.g., deletion or access), we may need to verify your identity to ensure that the request is legitimate. We will request reasonable proof of identity, such as a scanned copy of a government ID, before proceeding.

Policy Updates

We reserve the right to modify this policy at any time. Any changes will be posted on this page and will become effective immediately upon publication. We encourage you to review the policy regularly to stay informed about how we protect your data.

Contact Us

If you have any questions about this policy, how we handle your personal data, or your rights under GDPR, please contact us at [email protected] or by writing to:

FoodDishKitchen Privacy Officer
123 Culinary Ave, Suite 200
New York, NY 10001, USA