GDPR Compliance Policy – Meltymash

Last Updated: April 03, 2026

1. Introduction

Meltymash (the “Website”, “we”, or “us”) is committed to protecting the privacy and personal data of every individual who visits or interacts with our site. This GDPR Compliance Policy explains how we collect, use, store, and protect your personal data in accordance with the European Union General Data Protection Regulation (GDPR) and related data‑protection laws. By using our Website, you acknowledge that you have read, understood, and agreed to the terms outlined herein.

2. What Personal Data We Collect

We gather only the information that is necessary to deliver our services, improve user experience, and comply with legal obligations. The types of data we collect include:

• Email addresses – collected when users sign up for newsletters, create an account, or request support.
• Cookies and similar technologies – used to remember login sessions, track usage patterns, and provide personalized content.
• Web analytics data – collected via tools such as Google Analytics to understand traffic sources, user behaviour, and to optimise our services.

3. Legal Basis for Processing

Under the GDPR, we process personal data only when we have a lawful basis. For Meltymash, we rely on:

• Consent – you explicitly agree to the collection of your email address and the use of cookies when you sign up or interact with the site.
• Legitimate interest – we process analytics data to improve website performance and user experience, which is a legitimate interest as outlined in Article 6(1)(f) of the GDPR.

4. How We Protect Your Data

Meltymash implements a comprehensive set of technical and organisational measures to safeguard your personal data:

• SSL/TLS encryption – all data transmitted between your browser and our servers is encrypted using industry‑standard HTTPS.
• Secure servers – our hosting infrastructure is protected by firewalls, intrusion detection systems, and regular security audits.
• Limited data retention – we retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or to comply with legal retention requirements. After that, data is securely deleted.

5. Your GDPR Rights

Under the GDPR, you hold several rights regarding your personal data. Below we describe each right, the icon that represents it, and how you can exercise it.

Right to Access

You have the right to obtain confirmation that we are processing your personal data, and if so, to receive a copy of that data. This includes details about the categories of data, the purposes of processing, and the recipients to whom data may have been disclosed.

Right to Rectification

If any of your personal data is inaccurate or incomplete, you can request that we correct it. We will review your request promptly and update the data accordingly.

Right to Erasure

Also known as the “right to be forgotten”, you may request that we delete your personal data. We will comply unless a legal obligation requires us to retain the information. In such cases, we will inform you of the specific legal basis for retention.

Right to Restrict Processing

You can ask us to limit the processing of your data, for example if you contest its accuracy or the lawfulness of its use. During the restriction period, we may store the data but will not use it for further processing.

Right to Data Portability

You have the right to obtain your personal data in a structured, commonly used, machine‑readable format, and to transfer it to another controller. We will provide the data in a suitable format upon request.

Right to Object

If you object to the processing of your data for direct marketing or profiling purposes, we will cease processing the data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms.

Right to Withdraw Consent

You may withdraw consent at any time. Upon withdrawal, we will stop processing your data for the purpose it was originally consented for, and will delete it unless another lawful basis applies.

6. How to Exercise Your Rights

To exercise any of the rights listed above, please contact our Data Protection Officer (DPO) at:

• Email: [email protected]
• Address: Meltymash, 123 Data Lane, Privacy City, PC 12345

When contacting us, please provide sufficient information for us to verify your identity and to identify the personal data in question. This may include:

• Full name and contact details
• Account or user ID (if applicable)
• Specific data or categories you wish to access, rectify, erase, or restrict
• Any additional information that helps us locate the data quickly

We aim to respond to all legitimate requests within 30 days of receipt. If a request is complex or requires additional time, we will inform you of the delay and the expected completion date.

7. Retention Periods

We retain personal data for no longer than necessary to achieve the purposes for which it was collected. Typical retention periods include:

• Email addresses: 12 months after last interaction unless a longer period is required by law.
• Cookie identifiers: 2 years, in line with industry standards for tracking purposes.
• Analytics data: 2 years, to support website performance analysis and improvement.

8. Security Measures and Breach Response

Meltymash follows best practices to protect data from accidental loss, misuse, or unauthorized access. Should we detect a personal data breach, we will:

• Notify the relevant supervisory authority within 72 hours, if the breach poses a high risk to individuals’ rights and freedoms.
• Inform affected individuals where the breach is likely to result in a high risk to their rights and freedoms.
• Implement remedial actions to mitigate the breach and prevent future incidents.

9. Changes to This Policy

We may update this GDPR Compliance Policy from time to time. Any changes will be posted on this page with an updated “Last Updated” date. Your continued use of the Website after any modifications constitutes acceptance of the revised policy.

10. Contact Us

For any questions, concerns, or further information regarding our privacy practices, please reach out to us at:

• Email: [email protected]
• Phone: +44 20 1234 5678

Meltymash respects your privacy and is dedicated to maintaining the highest standards of data protection. Thank you for trusting us with your personal information.