GDPR Compliance Policy – MumFoodCorner

Last Updated: April 03, 2026

At MumFoodCorner (“we”, “our”, “us”), we are committed to protecting the privacy and personal data of our visitors, customers, and partners. This policy explains how we collect, use, store, and share personal data in accordance with the European Union’s General Data Protection Regulation (GDPR) and related data‑protection laws.

1. Who We Are

MumFoodCorner is a UK‑based online food community and recipe platform. For any GDPR‑related inquiries, please contact our Data Protection Officer at [email protected].

2. What Personal Data We Collect

Email addresses: Collected when users sign up for newsletters, create an account, or place an order.
Cookies: We use first‑party cookies to remember login status, preferences, and shopping cart contents. Third‑party cookies are used for analytics and advertising.
Analytics data: We collect anonymised usage data (page views, click paths, device information) through tools such as Google Analytics and Matomo to improve website performance.

3. How We Protect Your Data

Security is paramount. We employ the following measures:

SSL/TLS encryption: All data transmitted between your browser and our servers is encrypted via HTTPS.
Secure servers: We host data on industry‑standard, ISO 27001‑certified data centres with 24/7 monitoring.
Access controls: Only authorised personnel with a legitimate business need can access personal data.
Limited retention: Personal data is retained only for the period necessary to fulfil the purpose for which it was collected (e.g., 12 months after account deletion).
Regular audits: We conduct quarterly security audits and penetration tests to identify and remediate vulnerabilities.

4. Legal Basis for Processing

We process personal data under the following lawful bases:

Consent: When you sign up for newsletters or use our site’s interactive features, you provide explicit consent.
Legitimate interest: We process data to improve our services, ensure security, and comply with legal obligations. For example, analysing traffic patterns helps us optimise page load times.

5. Your GDPR Rights

Under the GDPR, you have the following rights regarding your personal data. Below we explain each right and how you can exercise it.

Right to Access

Request a copy of the personal data we hold about you. We will provide a concise, easily understandable summary within 30 days.

Right to Rectification

If you discover inaccuracies, you can ask us to correct or update your data. We will respond within 30 days.

Right to Erasure

Also known as the “right to be forgotten.” If you wish to delete your personal data, submit a request. We will remove it unless a legal obligation requires retention.

Right to Restrict Processing

Ask us to limit how we use your data (e.g., stop marketing emails). We will comply, subject to legal constraints, within 30 days.

Right to Data Portability

Request your data in a structured, machine‑readable format (e.g., CSV). We will provide it in a standard format within 30 days.

Right to Object

Object to the processing of your data for direct marketing or profiling. We will stop processing for those purposes once your objection is confirmed.

Right to Withdraw Consent

Withdraw any consent you have given. We will honour your withdrawal immediately and cease processing based on that consent.

6. How to Exercise Your Rights

To exercise any of the above rights, please contact our Data Protection Officer at [email protected]. Provide your name, email address, a description of your request, and any supporting documentation. We will respond within 30 days, and if your request is complex, we may need up to 60 days to fully comply.

7. Data Retention

We retain personal data only for as long as necessary to achieve the purposes for which it was collected or to comply with legal obligations. Typical retention periods are:

Email newsletters: 12 months after the last interaction.
User accounts: until account deletion or 12 months after last activity.
Cookies: session cookies expire when you close the browser; persistent cookies expire after 30 days.
Analytics: anonymised data is stored for 6 months.

8. International Transfers

If we transfer personal data outside the European Economic Area, we ensure that the destination provides an adequate level of protection, or we use standard contractual clauses approved by the European Commission. All transfers are carried out with appropriate safeguards.

9. Changes to This Policy

We may update this policy to reflect changes to our practices or legal requirements. We will notify users of significant changes via email or a prominent banner on our website. The “Last Updated” date above indicates the most recent revision.

10. Contact Us

If you have any questions about this policy, your data, or any of your GDPR rights, please reach out:

Email: [email protected]
Address: 12 Kitchen Lane, London, UK, EC1A 1AA

Thank you for trusting MumFoodCorner with your personal data. We are dedicated to safeguarding your privacy and ensuring compliance with all applicable data‑protection laws.