GDPR Compliance Policy

Site: mumdishideas (https://mumdishideas.com)
Contact for Data‑Protection Queries: gdpr@mumdishideas.com
Last Updated: December 01, 2025

1. Introduction

mumdishideas (the “Company”, “we”, “our”, or “us”) is committed to protecting the privacy and personal data of our users, visitors, and subscribers in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679 – “GDPR”). This policy explains what personal data we collect, why we process it, how we safeguard it, and the rights you have under the GDPR. By using our website, you acknowledge that you have read and understood this policy.

2. Personal Data We Collect

We only collect data that is necessary for the legitimate operation of our site and the services we provide. The categories of personal data we process are:

Email address: collected when you subscribe to our newsletter, request a recipe, or contact us via the contact form.
Cookies and similar tracking technologies: used to remember your preferences, analyse site usage, and improve user experience. This includes first‑party session cookies, analytics cookies, and marketing cookies (with your consent).
Analytics data: aggregated information such as IP address, device type, browser version, pages visited, and time spent on each page. This data is processed by third‑party analytics providers (e.g., Google Analytics) only in a pseudonymised form.

3. Legal Basis for Processing

Under the GDPR, every processing activity must have a lawful basis. For mumdishideas, the following bases apply:

Consent (Article 6(1)(a)): When you voluntarily provide your email address or accept non‑essential cookies, you give us explicit consent to process that data for the purposes described.
Legitimate Interests (Article 6(1)(f)): The use of essential cookies, server‑level security logs, and basic analytics is necessary for the proper functioning, security, and improvement of the website. We have conducted a legitimate‑interest assessment and determined that these interests do not override your fundamental rights.

4. How We Protect Your Data

We employ a range of technical and organisational measures to ensure the confidentiality, integrity, and availability of personal data:

SSL/TLS Encryption: All data transmitted between your browser and our servers is encrypted using HTTPS (TLS 1.2 or higher).
Secure Servers: Our hosting environment is hardened against unauthorised access, includes regular security patches, and is monitored 24/7.
Limited Retention: Email addresses are retained only as long as you remain subscribed or until you request deletion. Analytics data is automatically anonymised after 14 months. Cookies are deleted according to the expiry set in the cookie itself (maximum 12 months for marketing cookies).
Access Controls: Only authorised personnel with a legitimate need can access personal data, and they are bound by confidentiality agreements.
Data Breach Procedures: In the unlikely event of a breach, we will notify the relevant supervisory authority within 72 hours and communicate with affected individuals without undue delay.

5. Your GDPR Rights

As a data subject, you enjoy a series of rights under the GDPR. Each right is described below, together with an icon for quick reference.

Right to Access

You have the right to obtain confirmation that we are processing your personal data, and, where applicable, a copy of that data in a structured, commonly used format.

Right to Rectification

If any of your personal data is inaccurate or incomplete, you may request that we correct or complete it without undue delay.

Right to Erasure (“Right to be Forgotten”)

You may ask us to delete your personal data when it is no longer necessary for the purposes for which it was collected, or when you withdraw consent and no other legal basis applies.

Right to Restrict Processing

You can request that we limit the processing of your data while we verify the accuracy of the information or while a dispute concerning the data is being resolved.

Right to Data Portability

You may receive your personal data in a structured, commonly used format and transmit it to another controller without hindrance.

Right to Object

You can object, on grounds relating to your particular situation, to the processing of your data for direct‑marketing purposes or for tasks carried out in the public interest.

Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

6. How to Exercise Your Rights

To exercise any of the rights listed above, please send a written request to our Data Protection Officer at gdpr@mumdishideas.com. In your request, please include:

Your full name and contact details (so we can verify your identity).
A clear description of the right you wish to invoke (e.g., “I request a copy of all personal data you hold about me”).
Any additional information that may help us locate your data (e.g., the email address you used to subscribe).

We will acknowledge receipt of your request within 5 business days and will respond with the requested information or action within 30 calendar days, unless a longer period is justified under Article 12(3) of the GDPR. If we need more time, we will inform you of the extension and the reasons for it.

7. Data Retention

We retain personal data only for as long as necessary:

Email addresses: retained until you unsubscribe or request deletion. If no activity occurs for 24 months, the address is automatically removed.
Cookies: session cookies expire when the browser is closed; persistent cookies are set with a maximum lifespan of 12 months.
Analytics data: stored in a pseudonymised form for up to 14 months, after which it is automatically aggregated and the raw data is deleted.

8. International Data Transfers

All processing takes place on servers located within the European Economic Area (EEA). If we ever need to transfer data outside the EEA, we will ensure an adequate level of protection by using standard contractual clauses or other approved mechanisms.

9. Contact Information

If you have any questions about this policy, the data we hold about you, or wish to lodge a complaint, please contact our Data Protection Officer:

Data Protection Officer
mumdishideas
Email: gdpr@mumdishideas.com

You also have the right to lodge a complaint with a supervisory authority in the EU member state where you reside, work, or where the alleged infringement took place.

10. Changes to This Policy

We review this GDPR Compliance Policy regularly. Any material changes will be posted on this page with an updated “Last Updated” date. Continued use of the site after such changes constitutes acceptance of the revised policy.

Effective as of December 01, 2025.