GDPR Compliance Policy

Last Updated: April 03, 2026

1. Introduction

DailyCookFlavor (“we”, “our”, “us”) is committed to safeguarding your personal data in accordance with the European Union’s General Data Protection Regulation (GDPR) and related data protection laws. This policy explains what data we collect, why we process it, how we protect it, and your rights regarding your personal information.

2. Data We Collect

Email addresses: Collected when you subscribe to our newsletter, register for special offers, or request support.
Cookies: We use first‑party cookies to store session information, language preferences, and to remember items in your shopping cart. Third‑party cookies from analytics providers track website usage.
Analytics: We use anonymised Google Analytics and other tools to measure traffic, user behaviour and to improve our services. No personally identifiable data is shared with these providers.

3. Legal Basis for Processing

We process your personal data under the following lawful bases:

Consent: When you sign up for our newsletter or create an account, you explicitly consent to receive marketing communications and to store your data for the duration of your subscription.
Legitimate Interest: We use analytics to understand user behaviour and improve our website. This is a legitimate interest that balances our business needs with your privacy rights, provided we do not override your fundamental rights.

4. How We Protect Your Data

We employ robust technical and organisational measures to secure your personal information:

SSL/TLS Encryption: All data transmitted between your browser and our servers is encrypted using industry‑standard SSL/TLS protocols.
Secure Servers: Our hosting infrastructure is housed in data centres with 24/7 monitoring, physical access controls, and regular penetration testing.
Access Controls: Only authorised personnel with a legitimate need can access personal data. All staff undergo regular data protection training.
Retention Limits: Personal data is retained for a maximum of 12 months following your last interaction, unless a longer period is required by law.

5. Your GDPR Rights

Right to Access

You have the right to request a copy of all personal data we hold about you, including the purposes of processing, categories of data, recipients, and any transferred data.

Right to Rectification

If any of your personal data is inaccurate or incomplete, you can ask us to correct it. We will update or delete the data within a reasonable timeframe.

Right to Erasure

Under the “right to be forgotten,” you can request the deletion of your personal data, provided no legal or contractual obligations require us to retain it.

Right to Restrict Processing

You may ask us to limit the processing of your data—for example, if you contest its accuracy or the legality of the processing. We will suspend processing but continue to store the data.

Right to Data Portability

You can receive your personal data in a structured, commonly used format and transfer it to another controller, subject to legal constraints.

Right to Object

At any time you can object to the processing of your personal data for direct marketing or profiling purposes. We will stop processing unless we can demonstrate compelling legitimate grounds.

Right to Withdraw Consent

If you provided consent for marketing or data collection, you may withdraw it at any time. Withdrawal does not affect the lawfulness of any processing carried out before the withdrawal.

6. Exercising Your Rights

To exercise any of the rights above, please contact us via email at [email protected]. Include the following information to help us identify and verify your request:

Your full name and any identifying details (e.g., email address, user ID).
The specific right you wish to exercise.
Any additional details that can assist us in locating your data.

We will respond to your request within 30 days, in line with GDPR requirements. If the request is complex or requires additional verification, we may need up to 60 days to provide a thorough response.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, or resolve disputes. After the retention period expires, data is securely deleted or anonymised.

8. Changes to This Policy

We reserve the right to modify this policy at any time. Any changes will be published on this page, and the “Last Updated” date will reflect the most recent revision. We encourage you to review this policy regularly.

9. Contact Information

If you have any questions about this policy or our data processing practices, please contact our Data Protection Officer at [email protected]. For complaints, you may also contact the relevant supervisory authority in your jurisdiction.