GDPR Policy

Last Updated: July 12, 2025

Introduction

Sienna’s Meals (www.siennasmeals.com) is committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR). This policy explains how we collect, use, and protect your personal data.

Data Controller

Sienna’s Meals

Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Consent: When you subscribe to our newsletter, leave comments, or contact us
  • Legitimate Interest: For website analytics and improving our services
  • Contract: When you enter into agreements with us

What Personal Data We Collect

Information You Provide Directly

  • Name and email address (newsletter subscriptions, comments, contact forms)
  • Comments and feedback on our posts
  • Any other information you choose to share with us

Information We Collect Automatically

  • IP address and location data
  • Browser type and version
  • Device information
  • Pages visited and time spent on our website
  • Cookies and similar tracking technologies

How We Use Your Personal Data

We use your personal data for:

  • Sending newsletters and recipe updates (with your consent)
  • Responding to your comments and inquiries
  • Improving our website and user experience
  • Analyzing website traffic and usage patterns
  • Preventing spam and maintaining website security
  • Complying with legal obligations

Data Sharing and Third Parties

We may share your data with:

Service Providers

  • Email marketing platforms (for newsletters)
  • Website hosting providers
  • Analytics services (Google Analytics)
  • Comment management systems

Legal Requirements

We may disclose your data if required by law or to protect our rights, property, or safety.

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

International Data Transfers

Some of our service providers may be located outside the European Economic Area (EEA). We ensure adequate protection through:

  • Standard Contractual Clauses
  • Adequacy decisions by the European Commission
  • Other appropriate safeguards

Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined in this policy:

  • Newsletter subscriptions: Until you unsubscribe
  • Comments: Indefinitely (unless you request deletion)
  • Contact inquiries: Up to 2 years
  • Analytics data: Up to 26 months (Google Analytics default)

Your Rights Under GDPR

You have the following rights regarding your personal data:

Right of Access

You can request information about the personal data we hold about you.

Right to Rectification

You can request correction of inaccurate or incomplete personal data.

Right to Erasure (Right to be Forgotten)

You can request deletion of your personal data in certain circumstances.

Right to Restrict Processing

You can request that we limit how we use your personal data.

Right to Data Portability

You can request a copy of your personal data in a structured, machine-readable format.

Right to Object

You can object to our processing of your personal data based on legitimate interests.

Right to Withdraw Consent

You can withdraw your consent at any time where we rely on consent for processing.

How to Exercise Your Rights

To exercise any of these rights, please contact us at:

We will respond to your request within one month of receipt.

Cookies and Tracking

We use cookies and similar technologies to:

  • Remember your preferences
  • Analyze website traffic
  • Provide social media features
  • Deliver relevant advertisements

For detailed information about our cookie usage, please see our Cookie Policy.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against:

  • Unauthorized access
  • Alteration
  • Disclosure
  • Destruction

However, no method of transmission over the internet is 100% secure.

Children’s Privacy

Our website is not directed at children under 16 years of age. We do not knowingly collect personal data from children under 16. If you believe we have collected data from a child under 16, please contact us immediately.

Changes to This Policy

We may update this GDPR policy from time to time. We will notify you of significant changes by:

  • Posting the updated policy on our website
  • Sending an email notification (if you’ve subscribed to our newsletter)

Supervisory Authority

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with your local data protection authority.

Contact Us

For any questions about this GDPR policy or our data practices, please contact us at:

Data Protection Officer

If you need to contact our Data Protection Officer, please email: [email protected]