GDPR Compliance Policy

Last Updated: April 03, 2026
Website: dailymealspot.com
Contact for GDPR matters: [email protected]

1. Introduction

DailyMealSpot (“we”, “our”, “us”) respects your privacy and is committed to protecting your personal data. This policy explains how we collect, use, store, and share information in accordance with the General Data Protection Regulation (GDPR) and other applicable data‑protection laws. By using our website, you consent to the practices described herein.

2. Types of Data We Collect

• Email addresses: When you sign up for newsletters, create an account, or request a recipe, we collect your email address.
• Cookies and similar technologies: We use first‑party cookies to remember your preferences, track session activity, and provide a personalized experience. Third‑party analytics cookies (e.g., Google Analytics) help us understand how visitors interact with the site.
• Analytics data: We collect aggregated, anonymised data on page views, traffic sources, and device types to improve website performance and content relevance.

3. Legal Basis for Processing

Our processing activities are based on the following lawful bases:

• Consent: When you explicitly opt‑in to receive newsletters or register for an account, we rely on your consent.
• Legitimate interest: We process data necessary for maintaining the website, providing services, and improving user experience. This includes using cookies for session management and analytics to enhance content relevance.

4. How We Protect Your Data

• SSL Encryption: All data transmitted between your browser and our servers is encrypted via HTTPS.
• Secure servers: We host data on industry‑standard secure servers with firewalls, intrusion detection, and regular vulnerability scans.
• Access controls: Only authorized personnel with a legitimate business need can access personal data. Multi‑factor authentication is required for all admin accounts.
• Limited retention: Personal data is retained only as long as necessary for the purposes outlined in this policy or as required by law.

5. Your GDPR Rights

Right to Access

You have the right to request a copy of the personal data we hold about you, including the purposes of processing, categories of data, and third‑party recipients.

Right to Rectification

If any of your data is inaccurate or incomplete, you can request us to correct it. We will update the information within 30 days of receiving your request.

Right to Erasure

Under certain conditions (e.g., when consent is withdrawn or data is no longer needed), you may request the deletion of your personal data. We will remove or anonymise the data within 30 days, unless we are required to retain it for legal obligations.

Right to Restrict Processing

You can ask us to restrict the processing of your data (e.g., if you contest its accuracy). During the restriction period, we will only store your data for compliance or legal purposes.

Right to Data Portability

You may receive your personal data in a structured, commonly used format and have it transferred to another controller, where technically feasible.

Right to Object

You can object to the processing of your data for direct marketing or profiling. Upon receiving an objection, we will cease processing unless we can demonstrate compelling legitimate grounds.

Right to Withdraw Consent

If you have provided consent, you can withdraw it at any time. Withdrawal does not affect the lawfulness of processing before the withdrawal, but we will stop further processing thereafter.

6. How to Exercise Your Rights

To exercise any of the rights above, please send a written request to [email protected] with the following information:

• Your full name and contact details.
• A description of the request (e.g., “I wish to delete all data associated with my email address”).
• Any relevant evidence or identifiers (e.g., account number or email address).

We will confirm receipt of your request and respond within 30 days. If we require additional information to verify your identity, we will notify you accordingly.

7. Retention Periods

Personal data will be retained as follows:

• Email addresses: Until you unsubscribe or we delete them upon request.
• Cookies: Session cookies are deleted upon closing the browser. Persistent cookies are retained for up to 2 years, after which they are automatically removed.
• Analytics data: Aggregated, anonymised data is retained for 12 months to inform future improvements.

8. Security Measures

We employ a multi‑layered security approach, including:

• Transport Layer Security (TLS) for data in transit.
• Encrypted storage for sensitive data.
• Regular penetration testing and vulnerability assessments.
• Employee training on data protection best practices.

9. Changes to This Policy

We may update this policy from time to time. Any changes will be posted on this page with a new “Last Updated” date. We encourage you to review the policy periodically to stay informed about how we protect your data.

10. Contact Us

If you have any questions, concerns, or wish to lodge a complaint, please contact us at [email protected] or via our contact form. We are committed to resolving any issues promptly and transparently.