EasyMuMeats – GDPR Compliance Policy

1. Introduction

EasyMuMeats (the “Company”, “we”, “us”, or “our”) is committed to protecting the privacy and personal data of our customers, website visitors, and any other natural persons whose data we process in the course of providing our services through https://easymumeats.com. This GDPR Compliance Policy explains how we collect, use, store, and protect personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR). By using our website or services, you acknowledge that you have read and understood the information set out in this policy.

2. Personal Data We Collect

We only collect data that is necessary for the legitimate purposes described below. The categories of personal data we process include:

• Email addresses – collected when you subscribe to newsletters, create an account, or request support.
• Cookies and similar tracking technologies – used to remember your preferences, analyse site usage, and improve the user experience.
• Analytics data – aggregated information such as page views, referral sources, and device types, collected via Google Analytics and compatible tools.

We do not collect sensitive data (e.g., health information, racial or ethnic origin, or political opinions) unless you voluntarily provide it in a support request, in which case it will be handled with the same level of protection.

3. How We Protect Your Data

Security is a core principle of our data‑processing activities. We employ a layered approach to protect personal data, including:

• Transport Layer Security (TLS/SSL) – All data transmitted between your browser and our servers is encrypted using HTTPS.
• Secure servers – Our hosting environment is hardened, regularly patched, and monitored 24/7 for unauthorized access.
• Limited retention periods – Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, after which it is securely deleted or anonymised.
• Access controls – Only authorised personnel with a legitimate business need can access personal data, and all access is logged.
• Regular audits – We conduct periodic security assessments and vulnerability scans to identify and remediate risks.

4. Legal Basis for Processing

Under the GDPR, we must have a lawful basis for each processing activity. EasyMuMeats relies on the following bases:

• Consent (Article 6(1)(a)) – When you explicitly opt‑in to receive marketing communications or accept our cookie banner, we process your data based on your freely given consent.
• Legitimate interests (Article 6(1)(f)) – Processing for purposes such as fraud prevention, network security, and improving site performance is based on our legitimate business interests, provided that your fundamental rights and freedoms are not overridden.

Where consent is the basis, you may withdraw it at any time without affecting the lawfulness of processing carried out before the withdrawal.

5. Your GDPR Rights

As a data subject, you enjoy a set of rights under the GDPR. Each right is presented with a Bootstrap Icon for easy identification.

6. How to Exercise Your Rights

To exercise any of the rights listed above, please follow these steps:

1. Send a written request to our Data Protection Officer at gdpr@easymumeats.com. Include your full name, contact details, and a clear description of the right you wish to invoke.
2. Provide sufficient information to verify your identity (e.g., the email address you used with us or a government‑issued ID). This step protects your data against unauthorized access.
3. We will acknowledge receipt of your request within 5 calendar days and will aim to fulfil the request within the statutory period of 30 days, unless a justified extension is required (e.g., for complex requests).

If you are not satisfied with our response, you have the right to lodge a complaint with the supervisory authority in your EU member state.

7. Response Time

All GDPR‑related requests will be processed without undue delay and in any case within 30 days of receipt. In exceptional cases where the request is complex or numerous, we may extend the period by a further two months, but we will inform you of the extension and the reasons for it within the initial 30‑day period.

8. Contact Information

If you have any questions about this policy, the data we hold about you, or wish to exercise any of your GDPR rights, please contact our Data Protection Officer:

9. Changes to This Policy

We may update this GDPR Compliance Policy from time to time to reflect changes in our practices or legal requirements. Any revisions will be posted on this page with an updated “Last Updated” date. We encourage you to review the policy periodically.