GDPR Compliance Policy

This GDPR Compliance Policy explains how Tasty Kitchen Box (the “Company”, “we”, “us” or “our”) collects, uses, discloses, and protects personal data of individuals located in the European Economic Area (the “Data Subjects”) in accordance with the General Data Protection Regulation (EU) 2016/679 (the “GDPR”). By using our website tastykitchenbox.com, you acknowledge that you have read, understood, and agreed to this policy. Last Updated: April 03, 2026.

1. What Personal Data We Collect

Email addresses – used for newsletter subscriptions, order confirmations, and customer support.
Cookies and similar technologies – used to personalise content, remember your preferences, and analyse site usage.
Web analytics data – collected via Google Analytics and Matomo to understand traffic patterns, improve user experience, and optimise marketing efforts.

2. Legal Basis for Processing

Consent – For marketing communications and optional newsletters, we obtain your explicit consent during the subscription process. You can withdraw this consent at any time by clicking the unsubscribe link or contacting us.

Legitimate Interest – We process data necessary for the operation of our website, order fulfilment, customer service, and to comply with legal obligations. This includes the use of analytics tools and cookie tracking to improve service quality.

3. How We Protect Your Data

SSL/TLS Encryption – All data transmitted between your browser and our servers is protected by industry‑standard SSL/TLS encryption.
Secure Servers and Access Controls – Data is stored on secure, fire‑walled servers with role‑based access controls and regular security audits.
Limited Retention – Personal data is retained only as long as necessary for the purpose it was collected. Email addresses are kept for 12 months after the last interaction, while analytics data is anonymised after 6 months.

4. Your GDPR Rights

Under the GDPR, you have the following rights with respect to your personal data. You may exercise these rights by contacting us at [email protected]. We will respond to all requests within 30 days, unless the request is complex, in which case we may extend the timeframe by an additional 30 days, with a clear explanation.

Right to Access

You have the right to request a copy of the personal data we hold about you, including the categories of data, the purposes for processing, and the recipients to whom the data has been disclosed.

Right to Rectification

If any of your personal data is inaccurate or incomplete, you can request that we correct it promptly.

Right to Erasure (Right to be Forgotten)

You may request the deletion of your personal data, provided no legal obligation requires us to retain it (e.g., tax or accounting records).

Right to Restrict Processing

Under certain circumstances, you can request that we limit the processing of your data (e.g., if you contest its accuracy or if we no longer need it for the original purpose).

Right to Data Portability

You can obtain your personal data in a structured, commonly used, and machine‑readable format and transfer it to another controller.

Right to Object

You may object to the processing of your personal data for direct marketing or profiling purposes. Upon objection, we will cease processing such data unless we can demonstrate compelling legitimate grounds.

Right to Withdraw Consent

At any time, you can withdraw consent for any processing activity that is based on your consent. Withdrawal does not affect the lawfulness of processing based on consent before withdrawal.

5. How to Exercise Your Rights

To exercise any of the rights above, please contact us at [email protected] with the following information:

Your full name and contact details.
A brief description of the request (e.g., “I would like to access all data we hold about me”).
Any relevant identification or verification information to confirm your identity.

6. Contact Information

If you have any questions, concerns, or complaints regarding this policy or the processing of your personal data, please contact our Data Protection Officer at:
Email: [email protected]

7. Updates to this Policy

We may update this GDPR Compliance Policy from time to time. The updated version will be posted on our website with a new “Last Updated” date. We encourage you to review the policy periodically to stay informed about how we protect your personal data.