GDPR Compliance Policy

Effective Date: December 01, 2025

1. Introduction

mummealdaily (https://mummealdaily.com) respects the privacy of its visitors, subscribers, and any other individuals whose personal data it processes. This GDPR Compliance Policy explains how we collect, use, store, and protect personal data in accordance with the European Union’s General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”). By accessing or using mummealdaily, you acknowledge that you have read and understood this policy.

2. Data We Collect

We only collect data that is necessary for the legitimate purposes described below. The categories of personal data we process are:

Email address – collected when you subscribe to our newsletter, request a password reset, or contact us.
Cookies & similar technologies – used to remember your preferences, analyse site usage, and improve user experience.
Analytics data – aggregated information such as IP address, browser type, operating system, and pages visited, gathered through services like Google Analytics.

We do not collect any sensitive personal data (e.g., health, biometric, or political information) unless you voluntarily provide it, in which case it will be handled with the same level of care.

3. How We Protect Your Data

Security is a core principle of our data‑processing activities. We employ the following technical and organisational measures:

SSL/TLS Encryption – All data transmitted between your browser and our servers is encrypted using HTTPS.
Secure Servers – Our hosting environment is hosted in data centres that comply with ISO 27001 and undergo regular security audits.
Limited Retention – Personal data is retained only as long as it is necessary for the purpose for which it was collected, or as required by law. Email addresses of unsubscribed users are deleted within 30 days of the unsubscribe request.
Access Controls – Only authorised personnel with a legitimate business need can access personal data, and they are bound by confidentiality obligations.

4. Legal Basis for Processing

Our processing activities are based on the following lawful grounds under the GDPR:

Consent – When you voluntarily sign up for our newsletter or accept our cookie banner, you provide explicit consent for us to process your email address and related data.
Legitimate Interests – We process analytics data and use cookies to improve site performance, security, and user experience. This processing is balanced against your rights and interests, and you may object at any time (see the “Right to Object” section).

5. Your GDPR Rights

Under the GDPR, you enjoy a set of specific rights concerning your personal data. Each right is described below together with a Bootstrap icon for easy reference.

Right to Access

You may request confirmation that we are processing your personal data and obtain a copy of the data we hold about you, together with information about the processing purposes, categories, recipients, and retention periods.

Right to Rectification

If any of your personal data is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.

Right to Erasure (“Right to be Forgotten”)

You may ask us to delete your personal data when it is no longer necessary for the purposes for which it was collected, when you withdraw consent, or when the processing is unlawful.

Right to Restrict Processing

You can request that we limit the processing of your data while we verify the accuracy of the data or while we consider a request to erase it.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine‑readable format and to transmit that data to another controller without hindrance.

Right to Object

You may object, on grounds relating to your particular situation, to the processing of your personal data for direct marketing, profiling, or legitimate‑interest purposes. We will cease the processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

Right to Withdraw Consent

Where processing is based on your consent, you can withdraw that consent at any time, free of charge. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

6. How to Exercise Your Rights

To exercise any of the rights listed above, please follow these steps:

Send a written request to gdpr@mummealdaily.com. Include your full name, the email address you used with us, and a clear description of the right you wish to invoke.
Provide any additional information that may help us verify your identity (e.g., a copy of a government‑issued ID). This step is required only when we cannot reasonably confirm your identity from the information already on file.
If you are requesting erasure or restriction, please specify which data you want removed or limited.
We will acknowledge receipt of your request within 5 business days and will respond with the outcome no later than 30 calendar days, as required by the GDPR.

All requests are handled free of charge, unless they are manifestly unfounded or excessive, in which case we may charge a reasonable fee to cover administrative costs.

7. Response Time

We are committed to responding to all GDPR‑related requests within 30 days of receipt. In exceptional circumstances where the request is complex or we have received a large number of requests, we may extend the deadline by an additional two months, but we will inform you of the extension within the initial 30‑day period.

8. Contact Information

If you have any questions about this policy, your data, or wish to exercise any of your GDPR rights, please contact our Data Protection Officer (DPO) at:

Data Protection Officer
mummealdaily
Email: gdpr@mummealdaily.com

9. Changes to This Policy

We review this GDPR Compliance Policy regularly and may update it to reflect changes in legislation, our data‑processing activities, or operational practices. Any material changes will be posted on this page with an updated “Last Updated” date. Continued use of mummealdaily after such changes constitutes acceptance of the revised policy.

10. Governing Law

This policy is governed by the laws of the European Union and the Member State in which mummealdaily operates. If a dispute arises concerning the processing of your personal data, you have the right to lodge a complaint with a supervisory authority in the EU member state of your habitual residence, place of work, or place of the alleged infringement.