Tastydishstudio GDPR Compliance Policy

At Tastydishstudio we respect your privacy and are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and related EU data‑protection laws. This policy explains what personal data we collect, why we process it, how we protect it, and your rights under the GDPR.

1. What Personal Data We Collect

We collect the following types of personal data when you interact with our website (tastydishstudio.com):

Email addresses: When you sign up for newsletters, create an account, or contact us.
Cookies: We use first‑party and third‑party cookies to remember your preferences, track session information, and personalize your experience.
Analytics data: We use Google Analytics and similar services to gather anonymised data about how visitors use our site (e.g., page views, traffic sources, device information).

2. Legal Basis for Processing

We process your personal data on the following lawful bases:

Consent: You have explicitly opted in to receive newsletters or to create an account. We also ask for consent when we use certain cookies or share data with third‑party partners.
Legitimate Interest: We rely on legitimate interest to analyze site usage and improve our services, provided we balance this with your privacy rights. This basis is applied to the processing of analytics data.

3. How We Protect Your Data

We employ industry‑standard technical and organisational measures to safeguard your personal data:

SSL/TLS encryption: All data transmitted between your browser and our servers is encrypted with HTTPS.
Secure servers: We host our data on secure, monitored servers with regular vulnerability scans.
Access controls: Only authorised staff with a legitimate business need can access personal data. All access is logged and audited.
Data minimisation and retention: We store personal data only as long as necessary for the purposes outlined in this policy. Email addresses are retained for the duration of your subscription or account, cookies for the session or as required by law, and analytics data is anonymised and kept for a maximum of 12 months.

4. Your GDPR Rights

Under the GDPR, you have the following rights regarding your personal data. Each right is illustrated with an icon for quick reference.

Right to Access

You may request a copy of the personal data we hold about you.

Right to Rectification

You can ask us to correct inaccurate or incomplete information.

Right to Erasure

Also known as the “right to be forgotten.” You may request deletion of your data.

Right to Restrict Processing

You can ask us to limit how we use your data.

Right to Data Portability

Request a copy of your data in a structured, machine‑readable format.

Right to Object

You may object to processing for direct marketing or profiling.

Right to Withdraw Consent

You can withdraw any prior consent at any time.

5. How to Exercise Your Rights

To exercise any of the rights listed above, please contact us at:

Email: [email protected]
Address: Tastydishstudio, 123 Flavor Lane, Culinary City, 45678, USA

When you send your request, please include the following information to help us locate your data quickly:

Your full name and contact details.
A brief description of the request (e.g., “I would like a copy of my email address and any marketing preferences.”).
Any relevant identifiers such as your account username or email address.

We will respond to your request within 30 days of receipt, in line with the GDPR. If your request is complex or requires additional verification, we may extend the response time, but we will keep you informed of any delays.

6. Data Retention and Deletion

We retain personal data for the period necessary to fulfill the purposes for which it was collected and to comply with legal obligations. The retention periods are:

Email addresses: Until you unsubscribe or delete your account.
Cookies: Session cookies are deleted when the session ends. Persistent cookies are stored for the period you choose or for a maximum of 12 months.
Analytics data: Anonymised and aggregated for up to 12 months.

After the retention period, data is securely deleted or anonymised. If you request erasure, we will delete your personal data unless we are required by law to retain it (e.g., for tax or financial records).

7. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or legal requirements. The last update was made on April 03, 2026. We will notify you of significant changes via email or by posting a prominent notice on our website.

By continuing to use our website after any changes, you acknowledge that you have read and understood the updated policy.

8. Contact Us

If you have any questions about this policy, our data‑processing practices, or your personal data, please contact us at:

Email: [email protected]
Phone: +1 (555) 123‑4567

We look forward to protecting your privacy and ensuring that your data is handled responsibly and transparently.