GDPR Compliance Policy

Foodplatestudio (the “Company”) is committed to protecting the privacy and personal data of all visitors, users and customers of our website foodplatestudio.com. This policy explains how we collect, use, store and safeguard your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and the Data Protection Act 2018. The policy was last updated on April 03, 2026.

1. Data We Collect

• Email addresses – collected when you subscribe to our newsletter, register for an account, or contact us via the “Contact Us” form.
• Cookies and similar tracking technologies – used to enhance your browsing experience, analyze traffic, and personalize content. We set first‑party cookies for session management and third‑party cookies from services such as Google Analytics.
• Analytics data – aggregated and anonymised data collected through Google Analytics and Matomo to understand how visitors use our site, which pages are most popular, and how we can improve our services.

2. How We Protect Your Data

• SSL/TLS Encryption – all data transmitted between your browser and our servers is encrypted using industry‑standard SSL/TLS protocols.
• Secure Servers – we host our website on reputable, GDPR‑compliant cloud providers with regular security audits, firewalls, intrusion detection systems and physical access controls.
• Limited Retention – personal data is retained only as long as necessary to fulfil the purposes for which it was collected. Email addresses are kept for the duration of your subscription or until you unsubscribe. Cookies are deleted when you close your browser or after 30 days, whichever comes first.
• Access Controls – only authorised staff with a legitimate business need have access to personal data. All staff undergo regular data protection training.

3. Legal Basis for Processing

We process personal data under the following lawful bases:

• Consent – when you voluntarily provide your email address or other personal data, we rely on your explicit consent to communicate with you.
• Legitimate Interest – we use analytics and cookies to improve our website and services, which is a legitimate interest that does not override your fundamental rights.

4. Your GDPR Rights

Right to Access

You have the right to request a copy of the personal data we hold about you. We will provide a concise, easy‑to‑read summary of the data, the purposes of processing, and the categories of recipients.

Right to Rectification

If any personal data is inaccurate or incomplete, you can request that we correct it. We will respond within 30 days and update the data accordingly.

Right to Erasure (Right to be Forgotten)

You may ask us to delete your personal data. We will do so unless we have a lawful obligation to retain the data, such as a legal claim or regulatory requirement.

Right to Restrict Processing

If you contest the accuracy of your data or the legality of our processing, you can request that we restrict its use. We will temporarily suspend processing while investigating your claim.

Right to Data Portability

You can receive your personal data in a structured, commonly used, machine‑readable format and transfer it to another controller.

Right to Object

You may object to the processing of your data for direct marketing or profiling purposes. Upon receipt, we will cease processing unless we can demonstrate compelling legitimate grounds.

Right to Withdraw Consent

At any time you can withdraw consent for any processing activity. Withdrawal does not affect the lawfulness of processing before withdrawal. We will respect your choice and stop processing accordingly.

5. How to Exercise Your Rights

To exercise any of the rights above, please contact us at [email protected]. Your request should include:

• Your full name and contact details.
• A clear statement of the right you are exercising (e.g., “I request a copy of all personal data I have provided”).
• Any supporting documentation that verifies your identity, if required.

We will acknowledge receipt of your request within 5 business days and respond within 30 days, as mandated by GDPR. If you are not satisfied with our response, you have the right to lodge a complaint with a supervisory authority.

6. Contact Information

Data Protection Officer (DPO): Foodplatestudio

Email: [email protected]

Website: https://foodplatestudio.com

Last Updated: April 03, 2026