GDPR Compliance Policy

Daily Flavor Meals (“we”, “us”, “our”) is committed to protecting the personal data of our customers, visitors, and partners in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”). This policy explains what personal data we collect, why we process it, how we protect it, and the rights you enjoy under the GDPR. It also describes how you can exercise those rights and how quickly we will respond to your requests.

Data We Collect

We collect and process the following categories of personal data:

Email addresses: collected when you subscribe to our newsletter, place an order, or contact us via the website.
Cookies and similar tracking technologies: used to remember your preferences, analyse site usage, and improve your experience.
Analytics data: aggregated information such as page views, device type, and referral source, collected through third‑party services (e.g., Google Analytics) that may include an IP address in a pseudonymised form.

Legal Basis for Processing

Under the GDPR, we must have a lawful basis for each type of processing. Our bases are:

Consent (Article 6(1)(a)): When you voluntarily provide your email address for newsletters or marketing, you give explicit consent that you may withdraw at any time.
Legitimate Interests (Article 6(1)(f)): The use of cookies and analytics is necessary for the legitimate interest of improving the website’s performance, security, and user experience. We balance this interest against your privacy rights and provide clear opt‑out mechanisms.

How We Protect Your Data

Security is a core principle of our data‑handling practices. We employ the following technical and organisational measures:

SSL Encryption: All data transmitted between your browser and our servers is protected by HTTPS (TLS 1.3) to prevent interception.
Secure Servers: Our hosting environment is hardened, regularly patched, and monitored 24/7 for suspicious activity.
Limited Retention: Personal data is retained only for as long as necessary to fulfil the purpose for which it was collected. Email addresses are kept until you unsubscribe or request deletion; analytics data is anonymised after 12 months.
Access Controls: Only authorised personnel with a business need can access personal data, and they must comply with strict confidentiality agreements.

Your GDPR Rights

The GDPR grants you a set of rights concerning your personal data. Each right is described below, accompanied by a Bootstrap icon for quick visual reference.

Right to Access

You may request a copy of the personal data we hold about you, along with information about how we process it.

Right to Rectification

If any of your personal data is inaccurate or incomplete, you can ask us to correct or complete it without undue delay.

Right to Erasure (Right to be Forgotten)

You can request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or when you withdraw consent.

Right to Restrict Processing

You may ask us to limit the way we use your data while we verify the accuracy of the information or while a dispute is being resolved.

Right to Data Portability

When processing is based on consent or a contract, you have the right to receive your personal data in a structured, commonly used, machine‑readable format and to transmit it to another controller.

Right to Object

You may object to processing that is based on legitimate interests, direct marketing, or scientific/historical research. We will cease processing unless we demonstrate compelling legitimate grounds.

Right to Withdraw Consent

Where processing is based on your consent (e.g., marketing emails), you can withdraw that consent at any time, free of charge, and without affecting the lawfulness of processing before the withdrawal.

How to Exercise Your Rights

To exercise any of the rights listed above, please follow these steps:

Prepare a written request that clearly identifies the right you are invoking (e.g., “I request a copy of all personal data you hold about me”).
Include sufficient information for us to verify your identity, such as the email address used on our site or a reference number from a recent order.
Send the request to our dedicated GDPR mailbox: gdpr@dailyflavormeals.com. You may also use the contact form on our website, provided it includes the same details.
We will acknowledge receipt of your request within 5 business days and begin processing it.

Response Time

In accordance with Article 12 of the GDPR, we will respond to all valid requests within 30 calendar days. If a request is particularly complex or numerous, we may extend the deadline by an additional two months, but we will inform you of the extension and the reasons for it within the initial 30‑day period.

Contact Information

For any questions regarding this policy, your data protection rights, or to submit a request, please contact our Data Protection Officer at:

Daily Flavor Meals – Data Protection Officer
Email: gdpr@dailyflavormeals.com
Website: https://dailyflavormeals.com

Last Updated: December 06, 2025