GDPR Compliance Policy

Last Updated: December 01, 2025

This GDPR (General Data Protection Regulation) compliance policy explains how mumdishdelights (https://mumdishdelights.com) collects, uses, stores, and protects personal data of visitors and customers residing in the European Economic Area (EEA). If you have any questions, please contact us at gdpr@mumdishdelights.com.

Data We Collect

We process only the data that is necessary for the legitimate purposes described below. The categories of personal data we collect include:

Email addresses – collected when you subscribe to our newsletter, place an order, or contact us through a form.
Cookies & similar tracking technologies – used to remember your preferences, analyse site usage, and improve user experience.
Analytics data – aggregated information such as page views, bounce rates, and navigation paths, gathered via Google Analytics and similar services.

How We Protect Your Data

We implement a comprehensive set of technical and organisational measures to ensure the confidentiality, integrity, and availability of personal data:

SSL/TLS encryption – all data transmitted between your browser and our servers is encrypted using HTTPS.
Secure servers – our hosting environment is hardened with firewalls, intrusion detection systems, and regular security patches.
Limited retention periods – personal data is retained only as long as necessary for the purposes for which it was collected, after which it is securely deleted or anonymised.
Access controls – only authorised personnel with a legitimate business need can access personal data, and they are bound by confidentiality obligations.

Legal Basis for Processing

Under GDPR, we must have a lawful basis for each type of processing. Our bases are:

Consent – when you voluntarily subscribe to newsletters or opt‑in to marketing communications.
Legitimate interest – for activities such as fraud prevention, improving website performance, and providing customer support.

Your GDPR Rights

As a data subject, you enjoy the following rights under GDPR. Each right is accompanied by a Bootstrap icon for easy reference.

Right to Access

You may request confirmation that we process your personal data and obtain a copy of that data in a structured, commonly used format.

Right to Rectification

If any of your personal data is inaccurate or incomplete, you can ask us to correct or complete it without undue delay.

Right to Erasure (Right to be Forgotten)

You may request the deletion of your personal data where the processing is no longer necessary, you withdraw consent, or the data was processed unlawfully.

Right to Restrict Processing

You can ask us to limit the way we use your data while we verify its accuracy or while a dispute is being resolved.

Right to Data Portability

You have the right to receive your personal data in a machine‑readable format and transmit it to another controller where technically feasible.

Right to Object

You may object to the processing of your data for direct marketing, scientific/historical research, or legitimate interest purposes.

Right to Withdraw Consent

Where processing is based on consent, you can withdraw that consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

How to Exercise Your Rights

To exercise any of the rights listed above, please follow these steps:

Send a written request to gdpr@mumdishdelights.com. Include your full name, contact details, and a clear description of the right you wish to invoke.
Provide proof of identity (e.g., a scanned ID) to help us verify that the request is legitimate. This step protects you from unauthorised access to your data.
We will acknowledge receipt of your request within 5 business days and will act on it without undue delay, and in any case within the statutory period of 30 calendar days.
If additional information is required, we will contact you promptly. If we cannot comply with the request, we will explain the reasons and inform you of your right to lodge a complaint with a supervisory authority.

Response Time

Our standard response time for all GDPR‑related requests is **30 days** from the date we receive a verifiable request. In complex cases, this period may be extended by a further two months, but you will be informed of any extension and the reasons for it within the initial 30‑day window.

Additional Information

We keep a transparent record of all processing activities in accordance with Article 30 of the GDPR. This record includes the purpose of processing, categories of data, recipients, retention periods, and the legal basis for each activity. You may request access to this record as part of your Right to Access.

For any concerns regarding the handling of your personal data, you also have the right to lodge a complaint with the competent supervisory authority in your EU member state.

This policy is provided for informational purposes only and does not constitute legal advice. mumdishdelights reserves the right to amend this policy at any time to reflect changes in law or business practice. The most recent version will always be posted on this page.