GDPR Compliance Policy

Last Updated: April 03, 2026

1. Introduction

At TastyByMa (hereafter “we”, “our”, or “TastyByMa”), we are committed to protecting the privacy and personal data of all visitors and customers of our website https://tastybyma.com. This policy explains how we collect, use, store, and safeguard your data in compliance with the European Union General Data Protection Regulation (GDPR) and related data protection laws. If you have any questions or concerns, please contact us at [email protected].

2. Data We Collect

We collect the following types of data:

• Email addresses: When you subscribe to our newsletter, create an account, or place an order, we collect your email address to communicate with you about updates, promotions, and order status.
• Cookies: We use first‑party and third‑party cookies to remember your preferences, analyze traffic, and personalize content.
• Analytics data: We use Google Analytics and Matomo to gather anonymized information about how visitors use our site, such as page views, time on page, and navigation paths.

3. How We Protect Your Data

Your security is our priority. We employ the following measures:

• SSL/TLS encryption: All data transmitted between your browser and our servers is encrypted via HTTPS.
• Secure servers: We host our infrastructure on reputable, secure data centers with 24/7 monitoring, firewalls, and intrusion detection.
• Access controls: Only authorized personnel with a legitimate business need can access personal data, and all access is logged and audited.
• Data minimization and retention: We retain personal data only as long as necessary to fulfill the purposes for which it was collected or to comply with legal obligations. Email addresses are automatically purged after 12 months of inactivity; analytics data is retained for 30 days.

4. Legal Basis for Processing

We process your personal data on the following lawful bases:

• Consent: When you voluntarily provide your email address or other personal information, you consent to its use for the purposes specified.
• Legitimate interest: We process data that is necessary to improve our services, provide personalized content, and analyze user behavior to enhance user experience.

5. Your GDPR Rights

Right to Access

You have the right to request a copy of the personal data we hold about you. This includes data you have provided and data we have inferred through cookies and analytics. We will provide you with a clear, concise summary of the data, its source, and its purpose within 30 days of your request.

Right to Rectification

If any of your personal data is inaccurate or incomplete, you may request corrections. We will update the data promptly, ensuring that all records reflect your correct information.

Right to Erasure

Also known as the “right to be forgotten”, you may request the deletion of your personal data. We will delete your data unless it is required for legal compliance or legitimate business purposes. The deletion will be completed within 30 days of your request.

Right to Restrict Processing

You may ask us to restrict the processing of your data—for example, if you contest its accuracy or object to its use. During this period, we will only store your data and will not use it for any purpose beyond what is strictly necessary.

Right to Data Portability

You can request a structured, commonly used, machine‑readable format of your personal data. We will provide it in a format that allows you to transfer it to another service provider, where feasible.

Right to Object

You may object to the processing of your data for direct marketing or other purposes. Upon receiving your objection, we will cease using your data for those purposes immediately, unless we can demonstrate a compelling legitimate interest that overrides your objection.

Right to Withdraw Consent

If you have provided consent for the use of your data, you can withdraw it at any time. Withdrawal will not affect the lawfulness of any processing that occurred before the withdrawal, and we will stop processing your data thereafter.

6. How to Exercise Your Rights

To exercise any of the rights outlined above, please send an email to [email protected] with the following information:

1. Your full name and contact details.
2. A clear statement of the right you wish to exercise.
3. Any supporting documentation that verifies your identity (e.g., a copy of a passport or driver’s license).

We will confirm receipt of your request within 5 business days and respond within 30 days. If you are not satisfied with our response, you may lodge a complaint with the relevant supervisory authority.

7. Contact Us

If you have questions about this policy or your personal data, please contact our Data Protection Officer at [email protected]. We are here to help you understand and exercise your privacy rights.

8. Policy Updates

We may update this policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with a new “Last Updated” date. Your continued use of our website after such changes constitutes your acceptance of the updated terms.