Mealjoyhub GDPR Compliance Policy

At Mealjoyhub (https://mealjoyhub.com), we respect your privacy and are committed to protecting the personal data you share with us. This GDPR Compliance Policy explains how we collect, use, store, and safeguard your information, as well as your rights under the General Data Protection Regulation (EU) 2016/679. Please read it carefully and feel free to contact us at [email protected] if you have any questions.

1. Data We Collect

We collect the following personal data when you interact with our website:

Email addresses – when you subscribe to newsletters, create an account, or place an order.
Cookies and similar technologies – to remember your preferences, analyze site usage, and provide personalized content.
Analytics data – aggregated and anonymized data from Google Analytics and Matomo to improve our services.

2. How We Use Your Data

We process your personal data for the following purposes:

To deliver the services you request (e.g., meal planning, recipe recommendations).
To communicate with you about account activity, updates, and marketing offers (only with your consent).
To improve our website performance, user experience, and security.
To comply with legal obligations and enforce our terms of service.

3. Legal Basis for Processing

We rely on the following legal bases for processing your personal data:

Consent – for marketing communications and optional newsletters.
Legitimate interest – for analytics, improving our services, and ensuring site security.
Contractual necessity – to fulfill orders and provide customer support.
Legal obligation – to comply with tax, accounting, and regulatory requirements.

4. Security Measures

We take the protection of your personal data seriously. Our security measures include:

SSL encryption (HTTPS) to secure data in transit.
Secure, access‑controlled servers located in the European Economic Area.
Regular security audits, penetration testing, and vulnerability assessments.
Data minimization and anonymization wherever possible.
Limited data retention – we keep personal data only for as long as necessary to fulfill the purposes outlined above or as required by law.

5. Your GDPR Rights

Under the GDPR, you have the following rights regarding your personal data. Below we provide icons to help you quickly identify each right.

Right to Access

You can request a copy of the personal data we hold about you, including the purposes of processing and any third parties to whom the data has been disclosed.

Right to Rectification

You may ask us to correct any inaccurate or incomplete information we hold about you.

Right to Erasure

Under certain circumstances, you can request the deletion of your personal data (the “right to be forgotten”). This applies when the data is no longer necessary, or you withdraw consent and no other legal basis exists.

Right to Restrict Processing

You can request that we temporarily suspend the processing of your data, for example, if you contest its accuracy or if we are still investigating a claim.

Right to Data Portability

When feasible, we will provide your data in a structured, commonly used format (e.g., CSV) so you can transfer it to another service provider.

Right to Object

You may object to the processing of your data for direct marketing purposes or profiling activities that affect you.

Right to Withdraw Consent

At any time, you can withdraw consent for data processing. This will not affect the lawfulness of any processing carried out before withdrawal.

6. How to Exercise Your Rights

To exercise any of the rights listed above, please contact our Data Protection Officer at:

Mealjoyhub Data Protection Officer
Email: [email protected]

When you submit a request, please provide sufficient information for us to verify your identity and locate the data. This may include your name, email address, and any additional details that help us identify your records.

Submission Process

Send an email to [email protected] with the subject line “GDPR Rights Request – [Your Name]”.
Specify which right(s) you are exercising and provide any necessary details.
We will acknowledge receipt within 5 business days and respond within 30 calendar days, as required by the GDPR.

7. Response Time

We are committed to responding to all GDPR rights requests within 30 calendar days of receiving your request. If we need additional information to process your request, we may extend this period by an additional 30 days, and we will inform you of the delay and the reason.

8. Contact Information

If you have any questions about this policy, wish to report a privacy concern, or need assistance with a GDPR rights request, please contact: