GDPR Compliance Statement

Absolutely! Here’s a GDPR Compliance Statement tailored for JapanDishes.com, written clearly and professionally to help ensure your site aligns with the General Data Protection Regulation (GDPR) if you have visitors or subscribers from the European Union.

You can place this section on your Privacy Policy page or as a standalone GDPR Compliance Page.

GDPR Compliance Statement

Last Updated: June 29, 2025

At JapanDishes.com, your privacy and data security are important to us. This GDPR Compliance Statement explains how we collect, use, protect, and respect the personal data of our users, particularly those residing in the European Economic Area (EEA), in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679.

🛡️ Our Commitment to GDPR

We are committed to transparency, accountability, and lawful processing of your data. We only collect and process personal information when we have a legal basis to do so.

🔍 What Personal Data We Collect

We may collect the following personal data when you use our website:

  • Name (if voluntarily submitted through forms)
  • Email address (for newsletter subscriptions, comments, or contact forms)
  • IP address and browser information (for analytics and security)
  • Usage data and cookies (to improve user experience and track website performance)

🧾 Legal Grounds for Processing

We collect and process your data based on the following legal grounds:

  • Consent: You give us permission (e.g., by subscribing to our newsletter).
  • Contractual necessity: When processing is needed to fulfill a contract or service (e.g., sending you a purchased digital product).
  • Legal obligation: When we’re required to keep records or comply with legal duties.
  • Legitimate interest: For analytics, fraud prevention, and improving our website functionality.

✉️ Email and Newsletter Consent

We use email addresses to send newsletters only if:

  • You have explicitly subscribed, or
  • You have opted-in via a form on our website.

You can unsubscribe from our emails at any time using the link provided in each email.

We never sell or share your data for marketing purposes without your consent.

🍪 Cookies and Tracking

We use cookies to enhance site performance, personalize content, and analyze traffic. You can opt out of non-essential cookies through the cookie banner that appears on your first visit.

See our full Cookie Policy for more information.

📁 Data Storage and Retention

We only retain your data as long as necessary for the purposes it was collected:

  • Newsletter subscribers: Until you unsubscribe
  • Analytics data: Automatically anonymized or deleted after a retention period
  • Contact form submissions: Retained for up to 12 months for customer service and quality purposes

🌍 International Data Transfers

If your data is transferred outside the EU (e.g., for newsletter services like Mailchimp or analytics tools like Google Analytics), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or compliance with the Privacy Shield framework.

🧑 Your Data Protection Rights (EEA Users)

Under GDPR, you have the following rights:

  • Right to Access – You can request a copy of your personal data.
  • Right to Rectification – You can ask us to correct inaccurate or incomplete data.
  • Right to Erasure – You can request deletion of your personal data (also known as the right to be forgotten).
  • Right to Restrict Processing – You can ask us to pause processing your data.
  • Right to Data Portability – You can request your data in a machine-readable format.
  • Right to Object – You can object to processing in certain cases, including direct marketing.
  • Right to Withdraw Consent – If processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at:

📧 [email protected]
📮 Or use our Contact Form

🛠️ Data Processors We Use

We may use third-party services to process your data securely, including:

  • Mailchimp (for newsletters)
  • Google Analytics (for website usage tracking)
  • Stripe / PayPal (for secure payment processing)
  • Cloudflare / hosting provider (for security and performance)

Each processor is GDPR-compliant and handles data according to their own privacy policies.

🔐 Data Security

We use SSL encryption, secure servers, and industry-standard measures to protect your data from unauthorized access, misuse, or disclosure.

📝 Changes to This GDPR Statement

We may update this page as our practices evolve or as GDPR regulations change. When we do, we’ll revise the date at the top of the page and notify you where required.

📬 Contact Us

If you have any questions about how we handle your data or wish to make a GDPR request, please reach out:

📧 [email protected]
🌐 www.japandishes.com

You also have the right to lodge a complaint with your local data protection authority if you believe we’ve violated GDPR.