GDPR Compliance Policy

Effective Date: February 6, 2026
Website: ritamugcakes.com
Operated by: Rita


1. Our Commitment to Privacy

At ritamugcakes.com, we are committed to protecting your personal data and respecting your privacy rights.

This GDPR Privacy Notice explains how we collect, use, process, and safeguard personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”).

This notice applies to individuals located in the European Economic Area (EEA), the United Kingdom, and other jurisdictions with similar data protection laws.

This page should be read together with our Privacy Policy, Cookie Policy, and Terms of Use.


2. What Is the GDPR?

The GDPR is a European data protection law designed to give individuals greater control over their personal information while establishing strict standards for organizations that process such data.

Under the GDPR, personal data must be:

  • Processed lawfully, fairly, and transparently
  • Collected for legitimate purposes
  • Limited to what is necessary
  • Kept accurate and up to date
  • Stored securely
  • Retained only as long as needed

We adhere to these principles when handling personal data.


3. Personal Data We May Collect

Depending on how you interact with our website, we may collect the following categories of personal data:

  • Name and email address when you contact us or subscribe to communications
  • IP address and approximate geographic location
  • Browser type, device information, and operating system
  • Usage data such as pages visited, time spent on pages, and interactions
  • Cookies and similar tracking technologies
  • Messages, comments, or form submissions
  • Data collected through trusted third-party services such as analytics and advertising providers

We do not intentionally collect sensitive personal data, including information related to health conditions, religious beliefs, ethnicity, or biometric identifiers.


4. How We Use Personal Data

We process personal data to operate our website efficiently and provide a safe user experience. Uses may include:

  • Responding to inquiries or support requests
  • Delivering website functionality
  • Improving site performance and content quality
  • Understanding visitor behavior through analytics
  • Displaying advertising to support the website
  • Sending newsletters or updates when you have opted in
  • Detecting security threats or fraudulent activity
  • Complying with legal obligations

We do not sell or trade personal data.


5. Lawful Bases for Processing

Under the GDPR, we rely on one or more of the following legal bases:

Consent

When you voluntarily provide information, subscribe to communications, or accept non-essential cookies.

Legitimate Interests

To operate, secure, and improve our website, analyze traffic, and maintain business continuity provided such interests do not override your fundamental rights.

Legal Obligations

When processing is necessary to comply with applicable laws or regulatory requirements.


6. Cookies and Tracking Technologies

We use cookies and similar technologies to ensure website functionality, analyze traffic patterns, remember user preferences, and support advertising.

When you first visit our website, you will be presented with a cookie consent banner that allows you to:

  • Accept cookies
  • Reject non-essential cookies
  • Customize your preferences

You may withdraw consent at any time via the “Manage Consent” link on our website.

For detailed information, please review our Cookie Policy.


7. Your GDPR Rights

If you are located in the EEA, UK, or a region with similar protections, you have the following rights:

  • Right of Access — Request a copy of the personal data we hold about you
  • Right to Rectification — Request correction of inaccurate data
  • Right to Erasure — Request deletion of your personal data
  • Right to Restrict Processing — Request limited use of your data
  • Right to Data Portability — Receive your data in a structured format
  • Right to Object — Object to processing based on legitimate interests, including certain advertising activities
  • Right to Withdraw Consent — Withdraw consent at any time

To exercise these rights, please contact us at:

📧 contact@ritamugcakes.com
Subject line: GDPR Request

We may request verification of your identity before fulfilling a request.

You also have the right to lodge a complaint with your local data protection authority.


8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this notice, unless a longer retention period is required by law.

Typical retention periods include:

  • Contact inquiries — retained until resolved
  • Newsletter data — retained until you unsubscribe
  • Analytics data — retained according to provider settings

After this period, data is securely deleted or anonymized.


9. Third-Party Data Processors

We may rely on trusted third-party providers to help operate our website, including:

  • Analytics providers
  • Advertising partners
  • Email communication platforms
  • Consent management tools
  • Hosting and security services

Some providers may process data outside the EEA or UK. When this occurs, we implement appropriate safeguards such as Standard Contractual Clauses (SCCs) or equivalent legal mechanisms approved under GDPR.


10. Data Security

We implement reasonable technical and organizational safeguards designed to protect personal data, including:

  • HTTPS encryption
  • Secure hosting infrastructure
  • Firewall protections
  • Software updates and monitoring
  • Restricted access to personal information

However, no method of transmission over the internet can be guaranteed completely secure.


11. Children’s Data

Our website is not directed toward children under the age of 13, and we do not knowingly collect personal data from them.

If you believe a child has provided personal data, please contact us promptly so we can remove the information.


12. Updates to This GDPR Notice

We may update this notice periodically to reflect changes in legal requirements, technology, or data practices.

The updated version will always be posted on this page with a revised effective date.

Continued use of the website after updates constitutes acceptance of the revised notice.


13. Contact Information

For GDPR-related questions or privacy concerns, please contact us:

📧 Email: contact@ritamugcakes.com
🌐 Website: ritamugcakes.com