Cozydishkitchen GDPR Compliance Policy

Last Updated: April 03, 2026

Cozydishkitchen (hereinafter “Cozydishkitchen”, “we”, “our” or “us”) is committed to protecting your personal data and respecting your privacy rights. This policy explains how we collect, use, store and safeguard the information you provide to us, and outlines your rights under the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. If you have any questions, please contact us at [email protected].

1. Data We Collect

Email addresses: When you subscribe to our newsletter, register for an account, place an order, or contact us via the contact form, we collect your email address to communicate with you about your orders, promotions, and relevant updates.
Cookies and similar technologies: We use first‑party cookies to remember your preferences, shopping cart contents, and to provide a personalized browsing experience. We also use third‑party cookies from analytics and advertising partners to understand how visitors interact with our site and to improve our services.
Analytics data: We use Google Analytics (with anonymized IP addresses) and other analytics tools to collect aggregated information such as page views, session duration, and traffic sources. This data helps us to improve site performance and user experience.

2. How We Protect Your Data

SSL/TLS Encryption: All data transmitted between your browser and our servers is encrypted using industry‑standard SSL/TLS protocols, ensuring that your personal information cannot be intercepted during transmission.
Secure Servers: We host our data on secure, dedicated servers with physical access controls, firewalls, and intrusion detection systems. Regular security audits and penetration tests are performed to maintain a high level of protection.
Limited Retention: Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected. For example, email addresses are kept for 12 months after the last interaction unless you request deletion earlier. Cookies are automatically deleted after a predefined period, typically 30 days, unless you explicitly choose to keep them.

3. Legal Basis for Processing

We process your personal data based on the following lawful bases:

Consent: By subscribing to our newsletter or creating an account, you explicitly consent to receive marketing communications and to the processing of your data for these purposes.
Legitimate Interest: We process data for legitimate interests such as improving website functionality, delivering personalized content, and analyzing user behaviour to enhance our services. We perform a balancing test to ensure that these interests do not override your fundamental rights.

4. Your GDPR Rights

Under the GDPR, you have the following rights regarding your personal data. Below we provide a brief explanation of each right, an icon for quick reference, and instructions on how to exercise them.

Right to Access

You may request a copy of any personal data we hold about you, along with information about how we process it. This includes the purposes of processing, categories of data, and recipients of your data.

How to exercise: Send an email to [email protected] requesting your data. We will respond within 30 days.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you can request that we correct it. We will verify the request and update the data promptly.

How to exercise: Email [email protected] with the details of the incorrect data. We will correct it within 30 days.

Right to Erasure

You have the right to request the deletion of your personal data in certain circumstances, such as when it is no longer necessary for the purposes it was collected or if you withdraw consent.

How to exercise: Email [email protected] with a clear statement of the data you wish to be erased. We will delete it within 30 days, except where we are legally required to retain it.

Right to Restrict Processing

If you contest the accuracy of your data or if the processing is unlawful, you can request that we restrict the use of your data. During the restriction period, we will only store the data for necessary purposes.

How to exercise: Contact [email protected] specifying the data and the reason for restriction. We will comply within 30 days.

Right to Data Portability

You can request that we provide the personal data we hold about you in a structured, commonly used, and machine‑readable format, enabling you to transfer it to another controller.

How to exercise: Email [email protected] with your request. We will deliver the data in a suitable format within 30 days.

Right to Object

You may object to the processing of your data for direct marketing purposes or for profiling. Once you object, we will cease processing your data for those purposes unless we can demonstrate a compelling legitimate interest that overrides your interests.

How to exercise: Send an email to [email protected] stating your objection. We will honor it within 30 days.

Right to Withdraw Consent

If you have given us consent to process your data, you can withdraw that consent at any time. Withdrawal will not affect the legality of any processing carried out before the withdrawal.

How to exercise: Email [email protected] indicating your wish to withdraw consent. We will stop processing your data for the purposes you withdrew consent for within 30 days.

5. Exercising Your Rights

To exercise any of the rights listed above, please send a clear, written request to [email protected]. Your request should include:

Your full name and contact details.
A description of the data you are requesting or the action you wish us to take.
Any supporting documents that help us identify you (e.g., a copy of your order confirmation or account details).

We will respond to your request within 30 days of receipt. If the request is complex or if we need additional information, we may extend the response period by an additional 30 days, but we will inform you of the delay and the reasons for it.

6. Contact Us

If you have any concerns about how we handle your personal data, or if you wish to lodge a complaint with a supervisory authority, please contact us at:

Cozydishkitchen
Email: [email protected]