GDPR Compliance Policy – Tastyfoodstudio

This policy explains how Tastyfoodstudio (the “Company”) collects, uses, stores, and protects the personal data of individuals who interact with our website tastyfoodstudio.com. It is designed in accordance with the General Data Protection Regulation (GDPR) and the EU e‑Privacy Directive. The policy was last updated on April 03, 2026.

What Data We Collect

Email Addresses: Collected when users sign up for newsletters, create an account, or contact us.
Cookies and Similar Technologies: We place first‑party cookies to remember language preferences, shopping cart contents, and session data. Third‑party cookies from analytics providers record aggregated visitor statistics.
Analytics Data: We use anonymised Google Analytics to understand traffic patterns and improve user experience. No personally identifiable information is transmitted to analytics services.
Contact Form Submissions: Name, email, phone number, and message content are stored temporarily for follow‑up.

How We Protect Your Data

All data transmitted to and from our site is encrypted using TLS 1.3 (HTTPS). Our servers reside in secure, ISO 27001‑certified data centres with physical access controls, firewalls, and intrusion detection systems. Personal data is stored on encrypted storage volumes and is only accessible to authorised personnel who require it for legitimate business purposes.

We limit data retention to the minimum necessary for each purpose: email addresses are retained for 12 months after the last interaction unless the user requests deletion. Cookies are automatically deleted after 30 days, and analytics data is anonymised and purged after 6 months. All backups are encrypted and stored off‑site with a 30‑day retention policy.

Legal Basis for Processing

We process personal data under the following lawful bases:

Consent: When users explicitly opt‑in to receive marketing communications or newsletters, we record that consent and allow them to withdraw it at any time.
Legitimate Interest: We rely on legitimate interest to provide a personalised user experience, such as maintaining shopping cart contents and customizing content. This interest is balanced against users’ privacy rights, and we provide opt‑out mechanisms where appropriate.
Contractual Necessity: When users place an order or request a service, we process data necessary to fulfil the contract and communicate with them.
Legal Obligation: We retain certain data to comply with tax, accounting, and regulatory requirements.

Your Rights Under the GDPR

Right to Access

You have the right to obtain confirmation that we are processing your personal data and to receive a copy of that data in a structured, commonly used format. This includes information about the purposes of processing, categories of data, recipients, and retention periods.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you may request that we correct it promptly. We will review your request and update our records within 30 days.

Right to Erasure

You may request that we delete all personal data relating to you, subject to legal retention obligations. If we are required to retain data for compliance or contractual reasons, we will inform you of the specific legal basis and the period of retention.

Right to Restrict Processing

If you contest the accuracy of your data or claim that processing is unlawful, you can request that we restrict its use. During the restriction period, we will only store the data for the purpose of determining your objection.

Right to Data Portability

You may obtain your personal data in a machine‑readable format and request that we transfer it to another controller. We will provide the data in a commonly used format (e.g., CSV) within 30 days of your request.

Right to Object

You may object to the processing of your data for direct marketing or profiling purposes. Upon receiving an objection, we will cease processing unless we can demonstrate compelling legitimate grounds.

Right to Withdraw Consent

Consent can be withdrawn at any time. Withdrawal does not affect the lawfulness of any processing performed before the withdrawal. To withdraw, simply unsubscribe from newsletters or contact us via the email address below.

How to Exercise Your Rights

To exercise any of the rights above, please send a written request to:

Tastyfoodstudio
Email: [email protected]

In your request, include:

Your full name and contact details.
Clear description of the data or processing activity you are concerned about.
Any supporting evidence or documents that help us identify the data.

We will acknowledge your request within 5 business days and respond within 30 days, as required by GDPR. If you require a quicker response, please indicate the urgency in your email subject line.

Contact Us

For any questions about this policy, our data practices, or to report a data breach, please contact our Data Protection Officer at [email protected]. We aim to respond to all inquiries within 30 days.

Legal Notice

This policy is provided for informational purposes only and does not constitute legal advice. Tastyfoodstudio reserves the right to modify or update this policy at any time. Any changes will be reflected on this page and, where appropriate, communicated to users via email or on the website. By continuing to use our services, you acknowledge that you have read and understood this policy.