Mealkitchencenter GDPR Compliance Policy

Last Updated: April 03, 2026

1. Introduction

Mealkitchencenter (the “Company”, “we”, or “our”) is committed to protecting the privacy and personal data of our users, customers, and partners. This policy explains how we collect, use, store, and share personal data in compliance with the General Data Protection Regulation (GDPR) (EU Regulation 2016/679). By accessing or using our website (https://mealkitchencenter.com) you acknowledge that you have read, understood, and agreed to the practices described below.

2. Personal Data We Collect

• Email Addresses: Collected when you sign up for newsletters, place orders, or contact us.
• Cookies: We use first‑party cookies to provide a personalised browsing experience, remember login sessions, and analyse traffic.
• Analytics Data: We employ tools such as Google Analytics and Hotjar to collect aggregated, anonymised data on site usage and performance.

3. Legal Basis for Processing

We process personal data on the following lawful bases:

1. Consent: When you voluntarily provide your email address or other data and explicitly agree to its use for marketing or service purposes.
2. Legitimate Interest: When we have a legitimate business interest in collecting and analysing data to improve our services, optimise marketing, and ensure site security. We conduct a balancing test to confirm that our interests do not override your fundamental rights.

4. How We Protect Your Data

We implement robust technical and organisational measures to safeguard personal data:

• SSL/TLS Encryption: All data transmitted between your browser and our servers is encrypted with up-to-date SSL/TLS protocols.
• Secure Servers: Our hosting infrastructure is protected by firewalls, intrusion detection, and regular security audits.
• Limited Retention: Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected or to comply with legal obligations.
• Access Controls: Access to personal data is restricted to authorised staff on a need‑to‑know basis, with multi‑factor authentication and role‑based permissions.

5. Your GDPR Rights

Right to Access

You have the right to obtain confirmation that we are processing your personal data and, where applicable, a copy of that data. You may request an overview of the categories of data we hold, the purposes of processing, and the recipients of your data.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you can request that we correct or update it promptly. This includes correcting email addresses, contact details, or preferences.

Right to Erasure (Right to be Forgotten)

Under certain circumstances, you may ask us to delete your personal data. We will evaluate the request and, if justified, remove your data from our systems, subject to legal or contractual retention obligations.

Right to Restrict Processing

You may request that we limit the processing of your data—for instance, if you contest its accuracy or if the processing is unlawful. During the restriction period, we will store the data but will not use it for any new purposes except those required by law.

Right to Data Portability

You can obtain a copy of your personal data in a structured, commonly used, machine‑readable format (e.g., CSV or JSON) and transfer it to another controller if you wish. We will provide this data in a format that is compatible with standard data‑processing tools.

Right to Object

You have the right to object to the processing of your data for direct marketing, profiling, or other purposes. Once you exercise this right, we will cease using your data for the specified purpose unless we can demonstrate compelling legitimate grounds.

Right to Withdraw Consent

If you previously consented to the processing of your data, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing carried out before the withdrawal, and we will stop processing thereafter unless another legal basis applies.

6. How to Exercise Your Rights

To exercise any of the rights listed above, please contact us at [email protected] with the following information:

1. Your full name and contact details.
2. A clear description of the request (e.g., “I wish to delete my email address”).
3. Any evidence that supports your request (e.g., screenshots, account IDs).

We will respond to your request within 30 days, as mandated by the GDPR. If we need additional information to verify your identity or to fulfil your request, we may contact you for clarification. In the event that we cannot comply with your request, we will provide a brief explanation of the reasons for refusal.

7. Data Retention Policy

We retain personal data only for as long as necessary to achieve the purposes for which it was collected, including compliance with legal and regulatory obligations. Typical retention periods are:

• Email subscriptions: 12 months from the last interaction unless you opt‑out.
• Order records: 7 years for tax and accounting purposes.
• Analytics data: 6 months, aggregated and anonymised.

8. Contact Information

If you have any questions, concerns, or wish to lodge a complaint regarding our privacy practices, please reach out to our Data Protection Officer at [email protected]. We are also available to discuss any of the GDPR rights you hold, and we commit to handling all inquiries with the utmost confidentiality and respect.

9. Updates to This Policy

We may update this policy from time to time to reflect changes in our data processing activities or legal obligations. Any revisions will be posted on our website with an updated effective date. Your continued use of the site after such changes constitutes your acceptance of the new terms.