GDPR Compliance Policy

Effective Date: December 06, 2025

1. Introduction

DailyFlavorHub (https://dailyflavorhub.com) is committed to protecting the personal data of our visitors, subscribers, and customers. This GDPR Compliance Policy explains how we collect, use, store, and protect personal data in accordance with the European Union General Data Protection Regulation (EU) 2016/679 (GDPR). By using our website, you acknowledge that you have read and understood this policy.

2. Data We Collect

We process only the data that is necessary for the purposes described in this policy. The categories of personal data we collect include:

Email address: collected when you subscribe to our newsletter, request support, or submit a contact form.
Cookies & tracking identifiers: used to improve site functionality, remember your preferences, and analyse traffic patterns.
Analytics data: aggregated information such as IP address, browser type, device type, and pages visited, collected through third‑party analytics services.

We do not collect sensitive categories of data (e.g., health, political opinions, biometric data) unless you voluntarily provide such information through a specific request, in which case we will treat it with the same level of protection.

3. Legal Basis for Processing

Under GDPR, processing must be based on a lawful basis. DailyFlavorHub relies on the following legal grounds:

Consent (Article 6(1)(a)): When you voluntarily sign up for the newsletter or accept the cookie banner, you give explicit consent for us to process your email address and use cookies for the stated purposes.
Legitimate Interest (Article 6(1)(f)): We process analytics data and use cookies to improve website performance, security, and user experience. This processing is balanced against your rights and interests.

Where consent is the basis, you may withdraw it at any time without affecting the lawfulness of processing carried out before the withdrawal.

4. How We Protect Your Data

We employ a range of technical and organisational measures to ensure the confidentiality, integrity, and availability of personal data:

SSL Encryption: All data transmitted between your browser and our servers is encrypted using HTTPS (TLS 1.3).
Secure Servers: Our hosting environment is hosted in data centres that comply with ISO 27001 and SOC 2 standards.
Limited Retention: Email addresses are retained for as long as you remain subscribed or until you request deletion. Cookies are stored for a maximum of 12 months unless you delete them earlier. Analytics data is anonymised after 24 months.
Access Controls: Only authorised personnel with a legitimate need to access personal data are granted permission, and they are bound by confidentiality obligations.
Regular Audits: We conduct periodic security assessments and vulnerability scans to detect and remediate potential risks.

5. Your GDPR Rights

As a data subject, you enjoy a set of rights under GDPR. Each right is described below, together with an icon for quick reference.

Right to Access

You may request confirmation that we are processing your personal data and obtain a copy of that data, together with information about the purposes of processing, categories of data, recipients, and the retention period.

Right to Rectification

If any of your personal data is inaccurate or incomplete, you have the right to have it corrected without undue delay.

Right to Erasure (Right to be Forgotten)

You may request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected, when you withdraw consent, or when you object to the processing and there are no overriding legitimate grounds.

Right to Restrict Processing

You can ask us to limit the processing of your data while we verify the accuracy of the data, resolve a dispute, or assess the legality of processing.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine‑readable format and to transmit that data to another controller without hindrance.

Right to Object

You may object to processing based on legitimate interests or direct marketing. Upon objection, we will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests.

Right to Withdraw Consent

Where processing is based on your consent (e.g., newsletter subscription or cookie consent), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

6. How to Exercise Your Rights

To exercise any of the rights listed above, please contact our Data Protection Officer (DPO) using the details provided in the Contact Information section. Your request should include:

Your full name and, where applicable, your account identifier.
A valid email address where we can respond.
A clear description of the right you wish to invoke and any specific information you are requesting.

We may ask for additional information to verify your identity before fulfilling the request, in order to protect your data from unauthorised disclosure.

7. Response Time

In accordance with Article 12(3) of the GDPR, we will respond to your request without undue delay and in any event within 30 calendar days. If the request is complex or numerous, we may extend the period by a further two months, but we will inform you of any such extension within the initial 30‑day period.

8. Contact Information

If you have any questions about this policy, wish to exercise your GDPR rights, or want to lodge a complaint, please reach out to our Data Protection Officer:

DailyFlavorHub – Data Protection Officer
Email: gdpr@dailyflavorhub.com

We will acknowledge receipt of your inquiry within two business days and work diligently to resolve any concerns.

9. Changes to This Policy

We review this GDPR Compliance Policy regularly and may update it to reflect changes in law, technology, or our processing activities. Any material changes will be posted on this page with an updated “Last Updated” date. Continued use of the website after such changes constitutes acceptance of the revised policy.

Last Updated: December 06, 2025