GDPR Compliance Policy

Myquickdishes (“we”, “our”, “us”) is committed to protecting the privacy and personal data of our users. This GDPR Compliance Policy explains what personal data we collect, how we use it, the legal bases for our processing activities, and the rights you have under the General Data Protection Regulation (EU Regulation 2016/679). By accessing or using our services at myquickdishes.link, you acknowledge that you have read and understood this policy.

1. Data We Collect

We collect the following types of personal data:

Email addresses – When you register, subscribe to newsletters, or place an order.
Cookies and web beacons – To enhance user experience, remember preferences, and analyze site traffic.
Analytics data – Including IP addresses, device type, operating system, browser, referring URLs, and page views. This data helps us improve our services and understand user behaviour.

2. Legal Basis for Processing

We process personal data on the following legal bases:

Consent – When you explicitly opt‑in to receive marketing communications or allow us to use cookies for analytics.
Legitimate interest – For improving our website, ensuring security, and providing a personalised user experience. We conduct a legitimate interest assessment to confirm that our interests do not override your rights.

3. How We Protect Your Data

We employ a range of technical and organisational measures to safeguard your personal data:

All data transmitted between your browser and our servers is encrypted with TLS (HTTPS).
Our servers are hosted on secure, dedicated infrastructure with regular security audits.
Access to personal data is limited to authorised staff who need it to perform their job functions.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by law. After this period, data is securely deleted or anonymised.

4. Your GDPR Rights

Under the GDPR, you have the following rights regarding your personal data. We provide clear guidance and support to exercise each right.

Right to Access

You can request a copy of the personal data we hold about you, including the purpose of processing, categories of data, recipients, and storage period. We will provide this information in a concise, structured format within 30 days.

Right to Rectification

If any personal data is inaccurate or incomplete, you can ask us to correct it. We will update your data promptly and confirm the changes.

Right to Erasure

You may request the deletion of your personal data where no legal basis exists to retain it, or where the data is no longer necessary for the purpose it was collected.

Right to Restrict Processing

When you contest the accuracy of your data, or we no longer need the data but you need it for legal claims, you can request that we limit its use. We will store the data but not process it further.

Right to Data Portability

Request a structured, machine‑readable copy of your personal data. We will provide it in a commonly used format (e.g., CSV, JSON) within 30 days.

Right to Object

You can object to our processing of your data for direct marketing or profiling purposes. Once we receive your objection, we will cease processing unless we can demonstrate compelling legitimate interests.

Right to Withdraw Consent

At any time, you may withdraw consent for any processing activity. Withdrawal does not affect the legality of processing before withdrawal, and we will stop using your data for the specified purpose.

5. How to Exercise Your Rights

To exercise any of the rights above, please send a written request to:

Myquickdishes – GDPR Office
Email: [email protected]
Address: 123 Culinary Way, Food City, 45678, UK

Your request should include:

Your full name and contact information.
A clear statement of the right you are exercising.
Any supporting evidence that helps identify your data (e.g., registration email, order number).

We will respond within 30 calendar days. If you need a more detailed explanation of the data we hold or the specific processing activities, we will provide a summary in a timely manner. In cases where the request is complex or requires additional verification, we may extend the response time by an additional 15 days, provided we inform you of the delay and reason.

6. Contact Us for Complaints

If you believe your rights have not been respected, you may lodge a complaint with the relevant supervisory authority. For UK residents, this is the Information Commissioner’s Office (ICO). You may also contact us directly at the email above for any concerns.

7. Updates to This Policy

We may update this GDPR Compliance Policy from time to time. The “Last Updated” date at the top of this document reflects the most recent revision. We encourage you to review this policy periodically to stay informed about how we protect your personal data.

Effective Date: April 03, 2026