Privacy Policy

Who we are

Tasty Digital Ltd ( “Tasty Digital” ) is a company registered in England and Wales (registration number 9474918), whose registered address is at, Suite A, 10-12 Lombard Road, Wimbledon, London, SW19 3TZ. Our website address is: https://tasty.digital

Future changes to this privacy notice

We are continually working towards improving our privacy procedures and may change this privacy notice occasionally in order to reflect this and any changes in the law. While we encourage you to check this notice on our website regularly, we will notify clients should any substantial change take place.

What personal data we collect and why we collect it

If you are a customer of ours, along with recording the products and services we provide to you, we need to collect limited personal information. This may include personal data, such as name, email address, personal account preferences; transactional data, such as purchase information and technical data such as usernames and preferred platforms. We may also retain project related documentation and correspondence where this is necessary to deliver services.

We do not collect sensitive personal data, such as data concerning health, except where specifically required for researching the design of accessible products and services.

Excepting the limited instances outlined below, we do not record any personal data on general website visitors. We may however collect anonymous or aggregated usage data through cookies and similar technologies so that we can monitor and improve the site. This data does not identify you directly.

Contact forms

If you submit personal data using any of the contact forms on this website, we will retain the submitted information in an encrypted format for the sole purpose of fulfilling any communications or services associated with your message. This data is reviewed internally every year and will be removed following 24 months of user inactivity.

We use MailChimp as our marketing automation platform. By consenting to receive the occasional marketing emails (also known as the limited edition newsletter), you acknowledge that the information you provide will be transferred to MailChimp for processing in accordance with their Privacy Policy and Terms

Users can withdraw consent at any time by updating their preferences either within the subscriptions dashboard or by clicking the appropriate link within any related communications.

Cookies

Our website uses cookies to provide you with the best experience. For detailed information about how we use cookies, including how to manage your cookie preferences, please see our Cookie Policy.

Our Cookie Policy may be updated more frequently to reflect the specific technologies in use, so it should be read together with this Privacy Policy.

Log information

When you use our services or view content provided by our website, we automatically collect and store certain information in server logs. This includes:

• details of how you used our service, such as your search queries.
• Internet protocol address.
• device information, such as browser type, browser language, the date and time of your request and referral URL.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.) from third-party websites. For information about how these services use cookies, please see our Cookie Policy.

Who we share your data with

We do not share personal data with any third parties except where this is deemed necessary to fulfil our customers contractual and government regulatory obligations, and then only with trusted business partners, service providers and government agencies who are GDPR compliant. We do not sell or rent personal data.

How long we retain your data

We retain active website anonymised user and event data for a maximum of 26 months, at which point it is automatically deleted.

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

We retain financial and accounting records for up to 7 years to meet our legal and regulatory obligations.

What rights you have over your data

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where we send your data

We have managed servers in the UK and the Netherlands where a limited amount of website user data is stored.

We ensure any third party vendors we use for operational purposes have the appropriate contractual protections in place that satisfy GDPR requirements.

Visitor comments may be checked through an automated spam detection service.

How we protect your data

We take our data controller responsibilities very seriously and avoid the retention of personal data unless deemed necessary for the administration and functioning of our business.

We ensure all our third-party vendor arrangements have the appropriate contractual protections in place that satisfy GDPR requirements.

Files containing any personal data are secured in a locked cabinet or encrypted and protected by at least one strong password, and where available we will use two factor authentication.

Staff are trained in data protection and we are continually striving to enhance our data protection procedures.

What data breach procedures we have in place

We monitor our network and websites for unusual activity so that we can respond quickly should an attack become apparent.

If we deem there is a real risk of a data breach we will immediately remove all personal data from the network.

If we deem there has been a data breach we will inform all users whose data may have been compromised.

If and when that data is eventually reinstated we will force the resetting of any compromised account passwords.

Where required, we will notify the Information Commissioner’s Office and any affected individuals without undue delay, normally within 72 hours of becoming aware of the breach.

What third parties we receive data from

Currently we do not receive data from third parties except for that which is not of a personal nature and may be given freely online or through networking.

What automated decision making and/or profiling we do with user data

We sometimes use visitor segmentation in our website analytics to better understand our demographic and decide on the effects of changes we are looking to make.

Industry regulatory disclosure requirements

For the purposes of the General Data Protection Regulation (‘GDPR’), Tasty Digital is the data controller under the Regulation, which means that we determine the purposes and means of processing personal data. We are registered with the Information Commissioner’s Office with reference number: A8325173.

If you have any questions in relation to this privacy policy or how we collect, use or store your personal information, you can contact our Data Protection Officer (DPO) using the form below.

This privacy notice was last updated on the 30th October 2025.