GDPR Compliance Policy for MomDishJoy

Last Updated: April 03, 2026

MomDishJoy (“we”, “our”, “us”) is committed to protecting your personal data and respecting your privacy. This GDPR Compliance Policy explains what personal data we collect, how we use it, the legal basis for our processing activities, and your rights under the General Data Protection Regulation (EU) 2016/679.

1. Data We Collect

• Email addresses: Collected when you subscribe to our newsletter, register for events, or contact us through the website.
• Cookies and web beacons: Used to enhance your browsing experience, remember your preferences, and analyze site traffic.
• Analytics data: Aggregated and anonymized information from Google Analytics and other analytics tools to improve our services and content.

2. How We Protect Your Data

We employ industry‑standard security measures to safeguard your personal data:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your browser and our servers.
• Secure, access‑controlled servers located in the European Economic Area (EEA).
• Regular vulnerability assessments and penetration testing.
• Data retention limits: email addresses and contact information are kept only for as long as necessary to fulfil the purpose for which they were collected, typically no longer than 12 months unless a longer period is required by law.

3. Legal Basis for Processing

We process your personal data on the following legal bases:

• Consent: When you explicitly opt‑in to receive marketing communications or newsletters.
• Legitimate interests: When we need to analyze site usage, improve our services, or comply with legal obligations. We conduct a legitimate interests assessment to ensure our interests do not override your rights.

4. Your GDPR Rights

Under the GDPR, you have the following rights regarding your personal data. Use the icons below to quickly identify each right.

• Right to Access: You may request a copy of the personal data we hold about you, along with information about how we process it.
• Right to Rectification: You can ask us to correct any inaccurate or incomplete data we hold.
• Right to Erasure: Also known as the “right to be forgotten,” you may request the deletion of your personal data when it is no longer necessary or if you withdraw consent.
• Right to Restrict Processing: You can ask us to limit the processing of your data while we verify its accuracy or assess the necessity of its use.
• Right to Data Portability: You may obtain the personal data you have provided in a structured, commonly used format and request that we transmit it to another controller.
• Right to Object: You can object to our processing of your data for direct marketing or profiling purposes.
• Right to Withdraw Consent: At any time you can withdraw consent, and we will stop processing your data accordingly.

5. How to Exercise Your Rights

To exercise any of the rights listed above, please contact us at [email protected]. Provide a brief description of your request and any supporting identification documents if necessary. We will respond within 30 days of receiving your request. If you require a more detailed explanation of our processing activities or wish to lodge a complaint, please let us know in your email.

6. Contact Information

If you have any questions about this GDPR Compliance Policy or wish to exercise your rights, please reach out to:

Email: [email protected]

7. Data Retention and Deletion

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law. After the retention period, we securely delete or anonymize the data. If you request deletion, we will remove your data from our active databases and any backups where possible, within the statutory retention period.

8. Data Breach Notification

In the unlikely event of a personal data breach, we will notify the relevant supervisory authority within 72 hours and inform affected individuals if the breach poses a high risk to their rights and freedoms. We will provide details on the nature of the breach, the data involved, and the measures taken to mitigate any impact.

9. Updates to This Policy

We may update this GDPR Compliance Policy from time to time. When we do, we will revise the “Last Updated” date above and, where appropriate, notify you via email or a prominent notice on the website. We encourage you to review this policy periodically to stay informed about how we protect your personal data.

By using MomDishJoy’s services, you acknowledge that you have read, understood, and agreed to this GDPR Compliance Policy. If you do not agree with any part of this policy, please refrain from using our website.