GDPR Compliance Policy – Tastyplatecenter

Last Updated: April 03, 2026

Tastyplatecenter (“we”, “our”, “us”) is committed to protecting the privacy and personal data of our users in accordance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. This policy explains what personal data we collect, how we use it, the legal bases for processing, and the rights you have as a data subject. If you have any questions or wish to exercise any of the rights described below, please contact us at [email protected].

1. What Personal Data We Collect

Email addresses: We collect email addresses when you sign up for newsletters, register for events, or place orders. This data is used to send you relevant information, promotional offers, and order confirmations.
Cookies and similar tracking technologies: We use first‑party cookies to remember your preferences and login status, and third‑party cookies from partners such as Google Analytics to analyse site traffic. Cookie data includes device identifiers, IP addresses, and behaviour on our site.
Analytics data: Through tools like Google Analytics and Matomo, we gather anonymised usage data to improve the user experience, optimise our marketing campaigns, and monitor site performance.

2. How We Protect Your Data

SSL/TLS encryption: All data transmitted between your browser and our servers is protected by HTTPS, ensuring that personal information cannot be intercepted by third parties.
Secure servers and infrastructure: We host our website on cloud platforms that comply with ISO/IEC 27001 and ISO/IEC 27018 standards. Access to personal data is restricted to authorised personnel through role‑based access controls.
Data minimisation and retention: We retain personal data only for as long as necessary to fulfil the purpose it was collected for, and we regularly purge data that is no longer required. Email addresses are kept for 12 months after the last interaction unless you request deletion sooner.
Regular security assessments: We conduct vulnerability scans and penetration tests quarterly to identify and remediate potential security gaps.

3. Legal Basis for Processing

We process personal data under the following lawful bases:

Consent: When you opt‑in to receive marketing communications or newsletters, you provide explicit consent. This consent can be withdrawn at any time.
Legitimate Interest: We process data to improve our services, personalise content, and analyse site usage. We conduct a legitimate interest assessment to ensure that our interests do not override your fundamental rights.

4. Your GDPR Rights

Under the GDPR, you have the following rights with respect to your personal data. For each right, an icon is provided for quick visual reference.

Right to Access

Request a copy of the personal data we hold about you, including the categories of data, purposes of processing, and recipients.

Right to Rectification

Ask us to correct inaccurate or incomplete data. We will review and update your information promptly.

Right to Erasure

Request the deletion of your personal data if it is no longer necessary, or if you withdraw consent and no other lawful basis exists.

Right to Restrict Processing

Ask us to limit the use of your data while we verify its accuracy or the legality of processing.

Right to Data Portability

Obtain your personal data in a structured, commonly used format (e.g., CSV) and transfer it to another controller if you wish.

Right to Object

Object to processing that is based on legitimate interest or for direct marketing purposes. We will stop processing unless we can demonstrate a compelling legitimate reason.

Right to Withdraw Consent

Withdraw your consent at any time. We will cease all processing based on that consent and honour your request for data deletion if applicable.

5. How to Exercise Your Rights

To exercise any of the rights listed above, please send a written request to [email protected]. Your request should include:

Your full name and contact details.
A description of the request (e.g., “I would like a copy of all email addresses associated with my account”).
Any supporting information that can help us locate your data (e.g., email address used, date of registration).

We will respond to your request within 30 calendar days of receipt. If your request is complex or requires additional verification, we may need up to 60 days, but we will inform you of any such extension within the first 30 days.

6. Retention and Deletion

Personal data is retained for the period necessary to fulfil the purposes for which it was collected. For example, email addresses are kept for 12 months after the last interaction unless you request earlier deletion. Cookies that store session data are deleted automatically when the session ends. We delete or anonymise all data that is no longer needed, in accordance with our data retention policy.

7. Data Security Measures

We employ a multi‑layered security approach:

Encryption at rest (AES‑256) and in transit (TLS 1.3).
Regular patch management and vulnerability scanning.
Physical security controls at data centres.
Employee training on data protection and phishing awareness.

8. Contact Information

Data Protection Officer (DPO): Tastyplatecenter, GDPR Team, [email protected]

If you have any concerns about how we handle your data, wish to file a complaint, or need additional information, please reach out to us using the contact details above. We are committed to ensuring that your rights are respected and that your personal data is handled responsibly.