GDPR Compliance Policy

Last Updated: April 03, 2026

1. Introduction

Foodplateflow (“we”, “our”, “us”) respects your privacy and is committed to protecting your personal data in accordance with the European Union General Data Protection Regulation (GDPR). This policy explains what personal information we collect, how we use it, the legal basis for processing, and your rights under the GDPR. If you have any questions or wish to exercise any of your rights, please contact us at [email protected].

2. Data We Collect

We collect only the personal data that is necessary to provide, improve, and personalize our services. The types of data we collect include:

Email addresses: Collected when you sign up for newsletters, create an account, or contact us.
Cookies and similar technologies: We use cookies to remember your preferences, authenticate sessions, and analyze site usage.
Analytics data: We use anonymized analytics tools (e.g., Google Analytics) to understand traffic patterns and improve user experience.

3. How We Protect Your Data

We implement technical and organisational measures to safeguard your personal data:

SSL/TLS encryption: All data transmitted between your browser and our servers is encrypted via HTTPS.
Secure servers: Our hosting infrastructure uses state‑of‑the‑art security controls, including firewalls, intrusion detection, and regular vulnerability scans.
Limited retention: Personal data is retained only for as long as necessary to fulfil the purpose for which it was collected or to comply with legal obligations.
Access controls: Only authorised staff with a legitimate need to process personal data have access, and all staff undergo GDPR training.

4. Legal Basis for Processing

We rely on the following lawful bases for processing your personal data:

Consent: Where we ask you to opt‑in to marketing communications or newsletters.
Legitimate interest: For improving our services, analysing usage patterns, and ensuring the security of our platform.

5. Your GDPR Rights

Under the GDPR, you have the following rights regarding your personal data. You may exercise any of these rights by contacting us at [email protected]. We will respond within 30 days.

Right to Access

You may request a copy of the personal data we hold about you, including the purposes of processing, the categories of data, and the recipients of your data.

Right to Rectification

You can ask us to correct any inaccurate or incomplete personal data we hold about you.

Right to Erasure

Also known as the “right to be forgotten,” you may request the deletion of your personal data, provided no legal obligation requires us to retain it.

Right to Restrict Processing

You may ask us to limit the processing of your personal data, for example, if you contest its accuracy.

Right to Data Portability

We will provide your data in a structured, commonly used, and machine‑readable format, allowing you to transfer it to another controller.

Right to Object

You can object to the processing of your personal data for direct marketing or for legitimate interest purposes.

Right to Withdraw Consent

If you have provided consent to process your data, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

6. How to Exercise Your Rights

To exercise any of your GDPR rights, please send an email to [email protected] with the following details:

Your full name and contact information.
The specific right you wish to exercise (e.g., “Right to Erasure”).
Any relevant account or order numbers that help us locate your data.
Any supporting documents that confirm your identity (optional but may expedite the process).

We will acknowledge receipt of your request within 5 business days and complete the requested action within 30 days, unless the request is complex or requires additional verification, in which case we will inform you of any extensions.

7. Retention Periods

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected. Typical retention periods are:

Email addresses: 2 years after last interaction, unless you opt‑in to receive communications.
Cookies and analytics data: 6 months, with anonymised data retained for longer to improve services.

8. Contact Information

If you have any questions about this policy, wish to lodge a complaint, or need assistance exercising your rights, please contact our Data Protection Officer at:

Foodplateflow Data Protection Officer
Email: [email protected]