GDPR Compliance Policy

Contact Email for GDPR Requests: [email protected]

Last Updated: April 03, 2026

1. Introduction

dailyfoodmix.com (“we”, “our”, “us”) is committed to protecting the privacy and personal data of all users in accordance with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018. This policy explains what personal data we collect, how we use it, the legal basis for processing, and the rights you have as a data subject.

2. Types of Personal Data We Collect

Email addresses: Collected when you sign up for newsletters, create an account, or contact us.
Cookies: We place non‑essential and essential cookies to enhance your browsing experience, remember your preferences, and enable certain site functionalities.
Analytics: We use third‑party analytics services (e.g., Google Analytics) to gather anonymous usage statistics. No personally identifying information is transmitted to these services.

3. How We Use Your Data

The personal data we collect is processed for the following legitimate purposes:

Account Management: To create, maintain, and secure your user account.
Communication: To send newsletters, updates, and respond to your inquiries.
Improvement of Services: To analyse usage patterns and improve website performance and content.
Marketing (with Consent): To send promotional offers if you have explicitly opted in.

4. Legal Basis for Processing

Our processing activities are based on:

Consent: For marketing communications and certain optional services.
Legitimate Interest: For account security, site functionality, and analytics that help us serve you better.
Contractual Necessity: To fulfill your requests and provide services you have subscribed to.

5. Data Protection Measures

SSL Encryption: All data transmitted between your browser and our servers is encrypted using TLS 1.3.
Secure Servers: We host our data on ISO 27001‑certified servers with regular penetration testing.
Limited Retention: Personal data is retained only for the period necessary to fulfill the purposes listed above or as required by law.
Access Controls: Only authorised personnel with a legitimate need can access personal data.

6. Your GDPR Rights

You have the following rights under the GDPR. We are committed to responding to all legitimate requests within 30 days.

Right to Access

You may request a copy of the personal data we hold about you, including the categories of data, the purposes of processing, and the recipients of that data. Provide us with a written request to [email protected].

Right to Rectification

If any of your personal data is inaccurate or incomplete, you can ask us to correct it. Send a request to [email protected] with the details that need updating.

Right to Erasure

Also known as the “right to be forgotten.” If you wish to have your personal data deleted, please email [email protected] and we will remove your data unless a legal obligation requires us to retain it.

Right to Restrict Processing

You may request that we limit the processing of your personal data (e.g., we stop using it for marketing). Contact us at [email protected] and we will comply where lawful.

Right to Data Portability

You can obtain your personal data in a structured, commonly used, machine‑readable format. Request the data via [email protected] and we will provide it within the statutory period.

Right to Object

You may object to the processing of your personal data for direct marketing or for legitimate interest purposes. Notify us at [email protected] and we will cease processing unless we can demonstrate compelling legitimate grounds.

Right to Withdraw Consent

If you have given consent for any processing activity, you may withdraw it at any time. This does not affect the lawfulness of processing before withdrawal. To withdraw, simply contact [email protected] and we will honour your request promptly.

7. How to Exercise Your Rights

All GDPR rights can be exercised by sending a clear, written request to [email protected]. We recommend including:

Your full name and contact details.
A description of the request (e.g., “I want a copy of all personal data stored about me”).
Any identifying information that will help us locate your records (e.g., email address).

For large or complex requests, we may ask for additional verification to protect your privacy. Once we receive your request, we will respond within 30 days, or sooner if the request is particularly complex or voluminous.

8. Data Retention Policy

We retain personal data for no longer than necessary to fulfil the purposes for which it was collected or as required by law. Typically, email addresses and account information are kept until account closure or a minimum of 2 years after the last interaction, whichever is longer. Cookie and analytics data are stored for a maximum of 12 months.

9. Changes to This Policy

We may update this GDPR Compliance Policy from time to time. Any changes will be posted on this page and will take effect immediately upon publication. The “Last Updated” date will reflect the most recent revision.

10. Contact Us

For any questions, concerns, or complaints regarding this policy or our data processing practices, please contact:

GDPR Officer
dailyfoodmix.com
Email: [email protected]

We appreciate your trust and are committed to safeguarding your personal information in line with the highest standards of data protection.