GDPR Compliance Policy

This GDPR Compliance Policy explains how mumdishes.com (the “Website”, “we”, “our”, or “us”) collects, uses, stores, and protects personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (the “GDPR”). The policy is effective as of Last Updated: April 03, 2026.

1. Who We Are

mumdishes is an online platform that provides recipes, cooking tips, and a community forum for food lovers. We operate under the jurisdiction of the European Union and the United Kingdom. If you have any questions or concerns regarding this policy, please contact us at [email protected].

2. Types of Personal Data We Collect

Email addresses – collected when users sign up for newsletters, create accounts, or request support.
Cookies and Similar Technologies – used to enhance user experience, analyze traffic, and personalize content. This includes first‑party cookies, third‑party analytics cookies, and marketing cookies.
Analytics Data – anonymous metrics such as page views, time spent on pages, and referral sources, collected via Google Analytics and similar services.
Contact Information – name, phone number, and address when users place orders or request personalized recipes.
Technical Data – IP addresses, device identifiers, and browser information for security and performance monitoring.

3. Legal Basis for Processing

We process personal data based on the following lawful bases:

Consent – users explicitly opt‑in to receive newsletters or marketing communications.
Legitimate Interest – we use data to improve the Website, provide a better user experience, and protect against fraud.
Contractual Necessity – processing is essential to fulfill orders or provide requested services.
Legal Obligation – we retain certain data to comply with tax, accounting, and regulatory requirements.

4. How We Protect Your Data

mumdishes employs industry‑standard technical and organisational measures to safeguard personal data:

SSL/TLS Encryption – all data transmitted between your browser and our servers is encrypted using HTTPS.
Secure Servers – we host our services on reputable cloud providers that implement physical, network, and application security controls.
Access Controls – only authorised staff with a legitimate need can access personal data. Access is logged and monitored.
Data Minimisation – we only collect data that is necessary for the stated purposes.
Retention Limits – personal data is retained no longer than required for the purpose it was collected, and is securely deleted thereafter.

5. Your GDPR Rights

Right to Access

You have the right to obtain confirmation that we are processing your personal data and to receive a copy of the data we hold about you. This includes the purposes of processing, categories of data, recipients, and any transfers to third countries.

Right to Rectification

If any of your personal data is inaccurate or incomplete, you may request that we correct it promptly. This includes updating contact details or removing erroneous entries.

Right to Erasure (Right to be Forgotten)

Under certain circumstances, you can ask us to delete your personal data. This applies when the data is no longer necessary, you withdraw consent, or we have processed it unlawfully.

Right to Restrict Processing

When you contest the accuracy of your data or if the processing is unlawful, you may request that we restrict its use until the issue is resolved.

Right to Data Portability

You may receive the personal data we hold about you in a structured, commonly used, machine‑readable format, and transfer it to another controller where technically feasible.

Right to Object

At any time, you can object to the processing of your data for direct marketing, profiling, or other legitimate interests. We will stop processing unless we can demonstrate compelling legitimate grounds.

Right to Withdraw Consent

If you have given us consent to process your data, you can withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing carried out before the withdrawal.

6. How to Exercise Your Rights

To exercise any of the rights listed above, please submit a written request to [email protected] with the following information:

Your full name and contact details.
A clear description of the request (e.g., “I wish to access all personal data we hold about me”).
Any supporting documentation that helps us verify your identity (e.g., a copy of a passport or driver’s licence).

We will respond to your request within 30 calendar days of receiving it. If your request is complex or requires additional time, we will inform you of the delay and the new expected resolution date.

7. Data Retention Policy

Personal data is retained for the period necessary to fulfil the purpose for which it was collected, including legal and regulatory obligations. Typical retention periods are:

Email addresses – up to 5 years from the last interaction.
Order and payment data – up to 7 years for tax and accounting purposes.
Analytics data – 1 year, aggregated and anonymised.
Cookies – session cookies are deleted when the session ends; persistent cookies are retained for up to 6 months unless the user opts out.

8. International Data Transfers

mumdishes may transfer personal data to third‑country processors, including the United States. We ensure that such transfers are protected by standard contractual clauses, privacy shields, or equivalent safeguards as required by the GDPR.

9. Security Incidents and Breach Notification

In the event of a personal data breach, we will assess the risk to individuals and, where necessary, notify the relevant supervisory authority within 72 hours. If the breach poses a high risk to your rights and freedoms, we will inform affected individuals without undue delay.

10. Contact Information

For any questions, concerns, or complaints about how we handle your personal data, please reach out to us at [email protected]. If you are not satisfied with our response, you may lodge a complaint with the relevant supervisory authority in your country of residence.

By using mumdishes.com, you acknowledge that you have read, understood, and agreed to the terms of this GDPR Compliance Policy.