GDPR Compliance Policy

Last Updated: April 03, 2026

Introduction

Homedishkitchen (“we”, “our”, “us”) is committed to protecting the privacy and personal data of the individuals who visit our website, https://homedishkitchen.com. This policy explains how we collect, use, store, and share your data in compliance with the European Union’s General Data Protection Regulation (GDPR) and the ePrivacy Directive. By using our site, you acknowledge that you have read, understood, and agree to the terms outlined below.

What Data We Collect

• Email addresses – collected when you sign up for our newsletter, register for events, or request recipes.
• Cookies and similar technologies – used to remember your preferences, track site usage, and personalize content. These include first‑party cookies (e.g., session identifiers) and third‑party cookies from analytics providers.
• Analytics data – anonymised information such as page views, session duration, and referral sources collected via Google Analytics and other tools.

How We Protect Your Data

• Secure Transmission – all data sent to and from our site is protected by HTTPS (TLS 1.3) to prevent eavesdropping.
• Secure Storage – personal data is stored on encrypted servers in the EU. Access is limited to authorised staff who require it for legitimate business purposes.
• Retention Limits – we retain email addresses for a maximum of 12 months after the last interaction, analytics data for 14 months, and cookies for 2 months. Data is securely deleted when no longer needed.
• Regular Audits – we conduct quarterly security audits and penetration tests to identify and mitigate vulnerabilities.

Legal Basis for Processing

We process your personal data on one or more of the following lawful bases:

• Consent – when you explicitly opt‑in to receive newsletters or event invitations.
• Legitimate Interest – for improving our website, personalising your experience, and analysing traffic patterns to better serve our community.

Your GDPR Rights

Right to Access

You have the right to obtain confirmation that we are processing your personal data, and if so, access that data. This includes details about the categories of data, the purposes of processing, and any third parties with whom we share information.

Right to Rectification

If any of your personal data is inaccurate or incomplete, you may request that we correct it. We will update your information promptly, typically within 30 days of receiving your request.

Right to Erasure

You can ask us to delete your personal data, subject to legal or regulatory obligations that may require us to retain certain information. Once deleted, your data will be permanently removed from all active databases and backups, unless retention is legally required.

Right to Restrict Processing

If you contest the accuracy of your data or if processing is unlawful, you may request that we restrict further use of your data. During the restriction period, we will only process your data for storage purposes.

Right to Data Portability

You may receive the personal data we hold about you in a structured, commonly used, and machine‑readable format. We can also transfer it directly to another data controller if requested and feasible.

Right to Object

You can object to the processing of your data for direct marketing, public interest, or legitimate interest purposes. Upon receiving an objection, we will stop processing your data for those purposes unless we can demonstrate a compelling legitimate reason that overrides your objection.

Right to Withdraw Consent

If you have given us consent to process your data, you may withdraw that consent at any time. Withdrawal of consent is as easy as providing a written request or using the unsubscribe link in our newsletters.

How to Exercise Your Rights

To exercise any of the rights above, please contact us at [email protected]. When you reach out, provide:

• Your full name and any identifiers we may use (e.g., email address, user ID).
• A clear statement of the right you wish to exercise.
• Any supporting information or documentation that helps us locate your data.

We will acknowledge receipt of your request within 5 business days and respond with the requested action within 30 days, as required by GDPR. If you do not receive a response within that timeframe, you can file a complaint with the relevant supervisory authority.

Cookies and Tracking Technologies

We use both first‑party and third‑party cookies to enhance your experience. You can manage cookie preferences through your browser settings or by using the cookie banner on our site. If you disable cookies, some features may not function correctly.

Contact Information

If you have any questions about this policy or your personal data, please contact our Data Protection Officer at [email protected]. We are committed to resolving any concerns promptly and transparently.

Homedishkitchen reserves the right to amend this policy at any time. Any changes will be posted on this page and will take effect immediately upon posting.