GDPR Policy - Mealplatehub

GDPR Compliance Policy – Mealplatehub

Last Updated: April 03, 2026

1. Introduction

Mealplatehub (the “Company”) respects the privacy of all users, customers, and visitors to mealplatehub.com. This policy explains how we collect, use, store, and protect personal data in accordance with the European Union’s General Data Protection Regulation (GDPR) and other applicable data‑protection laws. By accessing or using our website, you acknowledge that you have read and understood this policy.

2. Data We Collect

We collect the following types of personal data to provide and improve our services:

Email addresses: When you register for a Mealplatehub account, subscribe to newsletters, or place an order, we store your email address to communicate with you and deliver service‑related information.
Cookies and similar tracking technologies: We use first‑party cookies to remember your preferences, session information, and to provide a personalised browsing experience. Third‑party cookies are employed for analytics and advertising purposes.
Analytics data: We collect aggregated usage statistics through tools such as Google Analytics and Matomo to monitor site performance, understand user behaviour, and optimise our services.

3. How We Protect Your Data

The security of your personal data is a top priority. We employ a multi‑layered approach that includes:

Transport Layer Security (TLS 1.3): All data transmitted between your browser and our servers is encrypted using SSL/TLS.
Secure servers and infrastructure: We host our services on reputable cloud platforms that provide physical and network security controls, regular penetration testing, and automated monitoring.
Access controls: Only authorised personnel with a legitimate need can access personal data, and all access is logged and audited.
Data minimisation and retention: We keep personal data only for as long as necessary to fulfil the purposes for which it was collected or to comply with legal obligations. Email addresses are retained for 12 months after the last interaction unless the user opts out earlier. Cookie data is automatically deleted after 30 days, and analytics data is summarised and stored for 6 months.

4. Legal Basis for Processing

We process personal data based on the following lawful bases:

Consent: When you voluntarily provide your email address or opt‑in to marketing communications, you give explicit consent for us to process that data for marketing purposes.
Legitimate Interest: We process data necessary for the operation of our website, including the use of cookies and analytics, as a legitimate interest that does not override your fundamental rights.
Contractual Necessity: When you place an order, we process your email address and order details to fulfil the contract.
Legal Obligation: We retain certain data to comply with statutory and regulatory requirements.

5. Your GDPR Rights

Under the GDPR, you have several rights regarding your personal data. The following sections outline each right, what it means for you, and how to exercise it.

Right to Access

You can request a copy of the personal data we hold about you. This includes the data we collect via email, cookies, and analytics, as well as any information you have provided directly to us.

Right to Rectification

If any of your personal data is inaccurate or incomplete, you may ask us to correct it. This includes correcting your email address or updating your preferences.

Right to Erasure

Also known as the “right to be forgotten,” you may request the deletion of your personal data, provided no legal or contractual obligations prevent us from doing so. This includes removing your email address from our mailing lists and deleting associated analytics records.

Right to Restrict Processing

You can ask us to limit the processing of your data, for example if you dispute its accuracy or the legality of its use. During the restriction period, we will only store the data for purposes such as verifying its accuracy or enforcing our contractual obligations.

Right to Data Portability

You have the right to obtain your personal data in a structured, commonly used, and machine‑readable format, and to transfer that data to another controller if you wish.

Right to Object

You may object to the processing of your data for direct marketing or profiling purposes. Once you exercise this right, we will stop processing your data for these purposes, unless we have a compelling legitimate interest that overrides your objection.

Right to Withdraw Consent

If you have given us consent to process your data for marketing or other purposes, you can withdraw that consent at any time. This will not affect the legality of any processing that occurred before the withdrawal.

6. How to Exercise Your Rights

To exercise any of the rights outlined above, please contact us at [email protected]. When you send a request, include the following information to help us identify your data:

Your full name and contact details
Any relevant identifiers (e.g., email address, account ID)
A clear description of the request (e.g., “I would like a copy of all data I have provided”)

We will respond to all requests within 30 days, as required by the GDPR. If your request requires more time, we will inform you of the reason and provide an updated timeline.

7. Changes to This Policy

We may update this policy from time to time. Any changes will be posted on this page and will become effective immediately upon publication. We encourage you to review this policy periodically to stay informed about how we protect your personal data.

8. Contact Information

If you have any questions about this policy, or if you wish to exercise your rights, please contact our Data Protection Officer at:

Mealplatehub – Data Protection Officer
Email: [email protected]
Address: 123 Foodie Lane, Culinary City, 98765, United Kingdom