GDPR Compliance Policy

At simpletastydishes (https://simpletastydishes.com) we are committed to protecting the personal data of our visitors, subscribers, and customers in accordance with the EU General Data Protection Regulation (GDPR). This policy explains what personal data we collect, how we use it, the legal bases for processing, and the rights you enjoy under the GDPR.

Last Updated

December 01, 2025

1. Data We Collect

We only collect personal data that is necessary for the legitimate purposes described below. The categories of data we process are:

Email addresses – collected when you subscribe to our newsletter, request a recipe, or contact us via the website.
Cookies and similar tracking technologies – used to remember your preferences, analyse site traffic, and improve user experience.
Analytics data – aggregated information such as page views, referral sources, and device types, collected through third‑party analytics services.

2. How We Protect Your Data

We implement a range of technical and organisational measures to safeguard your personal data:

SSL/TLS encryption – All data transmitted between your browser and our servers is encrypted using HTTPS.
Secure servers – Our hosting environment is protected by firewalls, intrusion‑detection systems, and regular security patches.
Limited retention periods – Email addresses are retained only as long as you remain subscribed or until you request deletion. Analytics data is stored in an anonymised form for a maximum of 24 months.
Access controls – Only authorised personnel with a legitimate need to process personal data have access, and they are bound by confidentiality agreements.
Regular audits – We conduct periodic security reviews and vulnerability assessments to ensure ongoing compliance.

3. Legal Basis for Processing

We rely on the following lawful bases under Article 6 of the GDPR:

Consent (Article 6(1)(a)) – When you voluntarily sign up for our newsletter or accept optional cookies, you give explicit consent for us to process your email address and related preferences.
Legitimate interest (Article 6(1)(f)) – We process analytics data and essential cookies to improve site performance, security, and user experience, which constitute a legitimate interest that does not override your fundamental rights.

4. Your GDPR Rights

Under the GDPR you have a set of rights regarding your personal data. Each right is presented with a Bootstrap Icon for quick reference.

Right to Access

You may request confirmation of whether we hold your personal data and obtain a copy of the data we process, together with the purposes, categories, and recipients of that data.

Right to Rectification

If any of your personal data is inaccurate or incomplete, you have the right to have it corrected without undue delay.

Right to Erasure (Right to be Forgotten)

You may ask us to delete your personal data when it is no longer necessary for the purposes for which it was collected, or when you withdraw consent and no other lawful basis applies.

Right to Restrict Processing

You can request that we limit the processing of your data while we verify the accuracy of the information or while we consider a request for erasure.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine‑readable format and to transmit that data to another controller where technically feasible.

Right to Object

You may object, on grounds relating to your particular situation, to the processing of your data for direct marketing, scientific or historical research, or statistical purposes.

Right to Withdraw Consent

Where processing is based on consent, you can withdraw that consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

5. How to Exercise Your Rights

To exercise any of the rights listed above, please contact our Data Protection Officer using the details provided below. Your request must be submitted in writing (email is acceptable) and should include enough information for us to verify your identity (e.g., the email address you used to subscribe).

Email: gdpr@simpletastydishes.com
Subject line: “GDPR Request – [Your Right]” (e.g., “GDPR Request – Right to Access”)
Required information: Full name, email address used on the site, and a clear description of the right you wish to invoke.

6. Response Time

We will acknowledge receipt of your request within 5 business days and will provide a substantive response no later than 30 calendar days from the date of receipt, in line with Article 12 of the GDPR. If additional verification is needed, we may extend the period by a further two months, but we will inform you of any such extension within the original 30‑day period.

7. International Transfers

All processing takes place within the European Economic Area (EEA). If a transfer outside the EEA is ever required (for example, to a cloud‑service provider), we will ensure that appropriate safeguards—such as Standard Contractual Clauses—are in place.

8. Changes to This Policy

We may update this GDPR Compliance Policy from time to time to reflect changes in our practices or legal requirements. Any revisions will be posted on this page with an updated “Last Updated” date. Continued use of the site after changes constitute acceptance of the revised policy.

9. Contact Information

If you have any questions, concerns, or wish to lodge a complaint regarding our handling of personal data, please contact us at:

simpletastydishes
Email: gdpr@simpletastydishes.com

We are also obligated to cooperate with supervisory authorities. If you are not satisfied with our response, you have the right to lodge a complaint with the data protection authority in your EU member state.