GDPR Compliance Policy

Effective Date: December 06, 2025

Website: https://dailyfoodhub.com

Contact for Data Protection Queries: gdpr@dailyfoodhub.com

---

1. Introduction

DailyFoodHub (the “Company”, “we”, “our”, or “us”) is committed to protecting the privacy and security of personal data in accordance with the European Union’s General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679). This GDPR Compliance Policy explains how we collect, use, store, and safeguard personal data, the legal bases for processing that data, and the rights you enjoy under the GDPR.

2. Personal Data We Collect

We only process personal data that is necessary for the purposes described in this policy. The categories of data we collect include:

• Email address: Provided when you subscribe to our newsletter, create an account, or contact us.
• Cookies & similar technologies: Used to remember your preferences, analyse site usage, and deliver personalized content.
• Analytics data: Aggregated information about how you interact with the site (e.g., pages visited, time spent, referral source). This data is anonymised whenever possible.

3. How We Protect Your Data

We implement a comprehensive set of technical and organisational measures to ensure the confidentiality, integrity, and availability of personal data:

• SSL/TLS Encryption: All data transmitted between your browser and our servers is encrypted using HTTPS.
• Secure Servers: Our hosting environment is hosted on servers that meet industry‑standard security certifications and undergo regular vulnerability assessments.
• Limited Retention: Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, after which it is securely deleted or anonymised.
• Access Controls: Access to personal data is restricted to authorised personnel who require it to perform their duties, and all access is logged and monitored.
• Regular Audits: We conduct periodic internal and external audits to verify compliance with GDPR and our own security policies.

4. Legal Basis for Processing

We rely on the following lawful bases to process personal data:

• Consent: When you voluntarily subscribe to our newsletter or accept cookies, you provide explicit consent for us to process your email address and cookie data for the stated purposes.
• Legitimate Interests: We process analytics data and use cookies to improve website performance, enhance user experience, and protect the security of the site. These activities are balanced against your fundamental rights and freedoms.

5. Your GDPR Rights

Under the GDPR, you have a series of rights concerning your personal data. Each right is presented with a Bootstrap Icon for quick visual reference.

• Right to Access

  You may request confirmation of whether we process your personal data and, if so, obtain a copy of that data, the purposes of processing, and the categories of data concerned.

• Right to Rectification

  If any of your personal data is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.

• Right to Erasure (Right to be Forgotten)

  You may ask us to delete your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis applies.

• Right to Restrict Processing

  You can request that we limit the processing of your data while we verify the accuracy of the data or while we consider your request to erase it.

• Right to Data Portability

  Upon request, we will provide your personal data in a structured, commonly used, and machine‑readable format, or transmit it directly to another controller where technically feasible.

• Right to Object

  You may object at any time to processing that is based on legitimate interests or the performance of a task carried out in the public interest. This includes direct marketing activities.

• Right to Withdraw Consent

  Where processing is based on your consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

6. How to Exercise Your Rights

To exercise any of the rights listed above, please follow these steps:

1. Prepare a written request that clearly identifies the right you wish to invoke (e.g., “Right of Access”, “Right to Erasure”).
2. Include sufficient information to verify your identity (e.g., the email address used on our platform, a copy of a government‑issued ID, or any other identifier we have on record).
3. Send the request to our Data Protection Officer at gdpr@dailyfoodhub.com. You may also use the contact form on our website, provided it includes the same verification details.
4. We will acknowledge receipt of your request within 5 business days and will respond with the outcome no later than 30 calendar days, unless an extension is justified under GDPR (e.g., complex requests or multiple requests from the same individual).

7. Response Time & Further Information

In accordance with Article 12 of the GDPR, we commit to responding to all legitimate requests within 30 days. If we need additional time, we will inform you of the reasons for the delay and the expected completion date, which may not exceed an additional two months.

If you are dissatisfied with our response, you have the right to lodge a complaint with a supervisory authority in the EU member state where you reside, work, or where the alleged infringement occurred. For residents of the United Kingdom, the relevant authority is the Information Commissioner’s Office (ICO).

8. International Transfers

All personal data processed by DailyFoodHub is stored on servers located within the European Economic Area (EEA). If a transfer outside the EEA becomes necessary, we will ensure appropriate safeguards (e.g., Standard Contractual Clauses) are in place to protect your data.

9. Updates to This Policy

We may amend this GDPR Compliance Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. Any material changes will be posted on this page with an updated “Last Updated” date. Continued use of the website after such changes constitutes acceptance of the revised policy.

---

This policy is provided for informational purposes and does not constitute legal advice. If you have specific questions about how the GDPR applies to you, we recommend consulting a qualified data‑protection professional.