GDPR Compliance Policy

Daily Kitchen Flow (“we”, “us”, “our”) is committed to protecting the privacy and personal data of our users in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR). This policy explains what personal data we collect, how we process it, the legal bases for processing, the safeguards we apply, and the rights you enjoy under the GDPR.

1. Data We Collect

We collect only the data that is necessary to provide and improve our services. The categories of personal data we process are:

Email address – collected when you subscribe to our newsletter, create an account, or contact us.
Cookies and similar tracking technologies – used to remember your preferences, analyse site usage, and deliver personalised content.
Analytics data – aggregated information such as page views, device type, and referral source, collected via third‑party analytics services.

2. Legal Basis for Processing

We process your personal data only when we have a lawful basis under the GDPR:

Consent – When you voluntarily provide your email address or accept cookies, you give us explicit consent to process that data for the purposes described at the point of collection.
Legitimate Interests – We rely on legitimate interests to maintain the security of our website, prevent fraud, and improve the user experience through analytics.

3. How We Protect Your Data

We employ a range of technical and organisational measures to ensure the confidentiality, integrity, and availability of your personal data:

SSL/TLS encryption – All data transmitted between your browser and our servers is encrypted using HTTPS.
Secure servers – Our hosting environment is protected by firewalls, intrusion‑detection systems, and regular security patches.
Limited retention – Email addresses are retained only as long as you remain subscribed or until you request deletion. Analytics data is anonymised after 12 months.
Access controls – Only authorised personnel with a legitimate need can access personal data, and they are required to sign confidentiality agreements.

4. Your GDPR Rights

Under the GDPR you have a series of rights regarding your personal data. Each right is described below together with a Bootstrap icon for quick visual reference.

Right to Access

You may request a copy of the personal data we hold about you, together with information about how we process it.

Right to Rectification

If any of your personal data is inaccurate or incomplete, you have the right to have it corrected without undue delay.

Right to Erasure (Right to be Forgotten)

You may ask us to delete your personal data where there is no compelling reason for its continued processing.

Right to Restrict Processing

You can request that we limit the way we use your data while we verify the accuracy of the information or while a legal dispute is being resolved.

Right to Data Portability

You may receive your personal data in a structured, commonly used, machine‑readable format and transmit it to another controller.

Right to Object

You have the right to object, on grounds relating to your particular situation, to processing of your personal data for direct marketing, scientific or historical research, or statistical purposes.

Right to Withdraw Consent

If processing is based on your consent, you may withdraw that consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

5. How to Exercise Your Rights

To exercise any of the rights listed above, please contact us at gdpr@dailykitchenflow.com. In your request, include the following information to help us verify your identity and locate your data quickly:

Full name and email address used with Daily Kitchen Flow
A clear description of the right you wish to invoke (e.g., “I would like to exercise my Right to Access”)
Any relevant reference numbers (e.g., newsletter subscription ID)

We will acknowledge receipt of your request within 5 business days and will respond no later than 30 calendar days, in line with GDPR Article 12‑3. If additional time is required (e.g., due to the complexity of the request), we will inform you of the extension and the reasons for it within the initial 30‑day period.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law:

Email addresses – retained until you unsubscribe, request deletion, or for a maximum of 24 months after the last interaction.
Cookies – session cookies are deleted when you close your browser; persistent cookies are set for a maximum of 12 months unless you delete them earlier.
Analytics data – stored in an aggregated, non‑identifiable form for up to 12 months.

7. Contact Information

If you have any questions, concerns, or wish to exercise your GDPR rights, please contact our Data Protection Officer (DPO) at:

Daily Kitchen Flow
Email: gdpr@dailykitchenflow.com

8. Changes to This Policy

We review this GDPR Compliance Policy regularly and may update it to reflect changes in legislation, our practices, or services. Any material changes will be posted on this page with a revised “Last Updated” date.

Last Updated: December 06, 2025