GDPR Compliance Policy

Last Updated: December 01, 2025

1. Introduction

Mumflavors (https://mumflavors.com) respects the privacy of its visitors, customers, and partners. This GDPR Compliance Policy explains how we collect, use, store, and protect personal data in accordance with the European Union’s General Data Protection Regulation (Regulation (EU) 2016/679 – “GDPR”). By using our website or services, you consent to the practices described herein.

2. Personal Data We Collect

We only process personal data that is necessary for the purposes described in this policy. The categories of data we collect include:

Email addresses – collected when you subscribe to newsletters, create an account, or contact us.
Cookies and similar technologies – used for session management, analytics, and personalised content.
Analytics data – IP address (anonymised where possible), device type, browser version, and navigation paths collected through Google Analytics and other web‑analytics tools.

3. How We Protect Your Data

We implement a range of technical and organisational measures to ensure the confidentiality, integrity, and availability of personal data:

SSL/TLS encryption – all data transmitted between your browser and our servers is encrypted using HTTPS.
Secure servers – our hosting environment is protected by firewalls, intrusion‑detection systems, and regular security patches.
Limited retention periods – personal data is retained only for as long as it is necessary to fulfil the purpose for which it was collected, after which it is securely deleted or anonymised.
Access controls – only authorised personnel have access to personal data, and they must adhere to strict confidentiality obligations.
Regular audits – we conduct periodic security assessments and vulnerability scans to identify and remediate potential risks.

4. Legal Basis for Processing

Our processing activities are based on the following lawful grounds under GDPR:

Consent – when you voluntarily provide your email address for newsletters or marketing communications, you give explicit consent for us to use that data for the stated purpose.
Legitimate interests – we process cookies and analytics data to improve website performance, understand visitor behaviour, and protect the security of our services. These interests are balanced against your rights and freedoms.

5. Your GDPR Rights

Under GDPR, you enjoy a series of specific rights concerning your personal data. Each right is described below together with a Bootstrap icon for quick visual reference.

Right to Access

You have the right to obtain confirmation that we are processing your personal data and, where applicable, a copy of that data in a structured, commonly used format.

Right to Rectification

If any of your personal data is inaccurate or incomplete, you may request that we correct or complete it without undue delay.

Right to Erasure (Right to be Forgotten)

You may ask us to delete your personal data when it is no longer necessary for the purposes for which it was collected, or when you withdraw consent and there is no other legal ground for processing.

Right to Restrict Processing

You can request that we limit the processing of your data while we verify the accuracy of the data or while we consider your request to erase it.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine‑readable format and to transmit that data to another controller where technically feasible.

Right to Object

You may object, on grounds relating to your particular situation, to the processing of your personal data for direct marketing, scientific/historical research, or statistical purposes.

Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing carried out before the withdrawal.

6. How to Exercise Your Rights

To exercise any of the rights listed above, please follow these steps:

Send a written request to our Data Protection Officer at gdpr@mumflavors.com. Include your full name, contact details, and a clear description of the right you wish to invoke.
Provide proof of identity (e.g., a scanned government ID) to help us verify that the request is legitimate. This step is required only when we have reasonable doubts about the identity of the requester.
We will acknowledge receipt of your request within 5 business days and will endeavour to complete the action within the statutory period of 30 days.
If additional time is needed (e.g., due to the complexity or number of requests), we will inform you of the extension and the reasons for it, but never exceeding an additional 2 months.

7. Response Time

All requests made under GDPR will be responded to within 30 calendar days from the date we receive a verifiable request. In exceptional cases where the request is complex or numerous, we may extend this period by up to two additional months, and we will notify you of any such extension.

8. Changes to This Policy

We review this policy regularly and may update it to reflect changes in our practices or applicable law. Any material changes will be posted on this page with an updated “Last Updated” date. We encourage you to revisit this page periodically.

9. Contact Information

If you have any questions, concerns, or wish to exercise any of your GDPR rights, please contact our Data Protection Officer:

Mumflavors – Data Protection Officer
Email: gdpr@mumflavors.com
Website: https://mumflavors.com