Dishplatter GDPR Compliance Policy

Last Updated: April 03, 2026

Who We Are

Dishplatter (“we”, “our”, or “us”) operates the website dishplatter.com. We are committed to protecting the personal data of our users in accordance with the General Data Protection Regulation (GDPR) and other applicable privacy laws.

What Personal Data We Collect

Email addresses: Collected when users sign up for newsletters, create an account, or place an order.
Cookies and similar technologies: Used to remember login sessions, shopping carts, and preferences.
Analytics data: Anonymous usage statistics gathered via Google Analytics and Matomo to improve website performance and user experience.

How We Protect Your Data

SSL/TLS encryption: All data transmitted between your browser and our servers is encrypted using HTTPS.
Secure servers: We host our services on industry‑standard, hardened servers with firewalls, intrusion detection, and regular security audits.
Limited retention: Personal data is kept only as long as necessary for the purposes for which it was collected. After that, it is securely deleted.
Access controls: Only authorised staff with a legitimate business need can access personal data, and all staff undergo privacy training.

Legal Basis for Processing

We process personal data under the following legal bases:

Consent: For marketing communications and newsletters. You can opt‑in at the point of data collection and opt‑out at any time.
Legitimate interest: For analytics, fraud prevention, and improving our services. We ensure that these interests do not override your rights.
Contractual necessity: When processing data to fulfill orders, support requests, or provide user accounts.

Your GDPR Rights

Right to Access

You have the right to obtain confirmation that we are processing your personal data and to receive a copy of that data in a structured, commonly used format.

Right to Rectification

Should any of your personal data be inaccurate or incomplete, you may request that we correct or update it promptly.

Right to Erasure

Under certain circumstances, you may request the deletion of your personal data, such as when it is no longer necessary or if you withdraw consent.

Right to Restrict Processing

You can ask us to limit the processing of your data, for example, while we verify its accuracy.

Right to Data Portability

Request a copy of your data in a machine‑readable format that can be transferred to another controller.

Right to Object

You may object to the processing of your data for direct marketing or profiling purposes, and we will stop processing unless we can demonstrate compelling legitimate grounds.

Right to Withdraw Consent

At any time, you can withdraw consent for any processing activity, and we will cease processing that data immediately.

How to Exercise Your Rights

To exercise any of the rights above, please contact us at [email protected] with the following information:

Your full name and contact details.
Proof of identity (e.g., a scanned copy of a passport or driver’s licence).
A clear statement of the specific request (e.g., “I wish to delete all my personal data”).

We will respond to your request within 30 days. If the request is complex or requires additional information, we may extend the response time by a reasonable period and will inform you of the delay.

Contact Information

If you have any questions about this policy, our data practices, or wish to lodge a complaint with a supervisory authority, please email us at [email protected] or use the contact form on our website.

Changes to This Policy

We may update this GDPR Compliance Policy from time to time. We will notify you of any material changes by posting a notice on our website and updating the “Last Updated” date above.