GDPR Compliance Policy

Effective date (Last Updated): December 01, 2025

Welcome to myflavorfulrecipes (https://myflavorfulrecipes.com). This GDPR Compliance Policy explains how we collect, use, protect, and retain personal data in accordance with the European Union’s General Data Protection Regulation (Regulation (EU) 2016/679). By accessing or using our website, you acknowledge that you have read and understood the information set out below.

1. Data We Collect

We process only the data that is necessary for the purposes described in this policy. The categories of personal data we collect include:

• Email addresses: Collected when you subscribe to our newsletter, request a recipe, or contact us via the contact form.
• Cookies and similar technologies: Used to remember your preferences, keep you logged in (if applicable), and analyse site usage.
• Analytics data: Information such as IP address, browser type, operating system, pages visited, and time spent on each page, collected through third‑party analytics services.

2. How We Use Your Data

We use the data described above for the following legitimate purposes:

• Sending newsletters, promotional offers, and updates about new recipes.
• Improving the user experience by analysing how visitors interact with the site.
• Maintaining security, preventing fraud, and complying with legal obligations.
• Responding to inquiries sent to gdpr@myflavorfulrecipes.com.

3. Legal Basis for Processing

Our processing activities are based on the following legal grounds:

• Consent (Article 6(1)(a)): When you voluntarily provide your email address to receive newsletters or marketing communications, you give us explicit consent.
• Legitimate interest (Article 6(1)(f)): The use of cookies and analytics to improve site functionality and security is pursued under our legitimate interest, balanced against your rights and expectations.

4. Data Protection Measures

We implement a comprehensive set of technical and organisational measures to safeguard your personal data:

• SSL/TLS encryption: All data transmitted between your browser and our servers is encrypted using HTTPS.
• Secure servers: Our hosting environment is protected by firewalls, intrusion detection systems, and regular security patches.
• Limited retention: Email addresses are retained only for as long as you remain subscribed or until you request deletion. Analytics data is anonymised after 12 months, and cookies are set with reasonable expiration periods.
• Access controls: Only authorised personnel with a legitimate need can access personal data, and they are bound by confidentiality obligations.

5. Your GDPR Rights

Under the GDPR, you enjoy a series of rights concerning your personal data. Each right is described below with a Bootstrap Icon for quick visual reference.

• Right to Access

  You may request confirmation that we process your personal data and obtain a copy of the data we hold about you, together with information about the processing purposes, categories, recipients, and retention periods.

• Right to Rectification

  If any of your personal data is inaccurate or incomplete, you have the right to have it corrected without undue delay.

• Right to Erasure (Right to be Forgotten)

  You may ask us to delete your personal data where the processing is no longer necessary, you have withdrawn consent, or you object to the processing and there are no overriding legitimate grounds.

• Right to Restrict Processing

  You can request that we limit the processing of your data while we verify the accuracy of the data or while we consider a request to erase it.

• Right to Data Portability

  When processing is based on consent or a contract, you may receive your personal data in a structured, commonly used, machine‑readable format and transmit it to another controller.

• Right to Object

  You have the right to object, on grounds relating to your particular situation, to the processing of your personal data for direct marketing, scientific/historical research, or statistical purposes.

• Right to Withdraw Consent

  Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

6. How to Exercise Your Rights

To exercise any of the rights listed above, please contact our Data Protection Officer (DPO) using the details provided in Section 9. Your request should include:

• A clear description of the right you wish to invoke.
• Any information that will help us identify you (e.g., the email address you used to subscribe).
• Proof of identity where appropriate (e.g., a scanned ID) to prevent unauthorised disclosure.

We will acknowledge receipt of your request within **5 business days** and will provide a substantive response within **30 calendar days**, as required by the GDPR. In exceptional cases where the request is complex or numerous, we may extend the period by an additional two months, but we will inform you of the extension and the reasons for it within the original 30‑day timeframe.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required or permitted by law. Specific retention periods are:

• Email addresses: Retained until you unsubscribe or request deletion.
• Cookies: Session cookies expire when you close your browser; persistent cookies are set with a maximum lifespan of 12 months.
• Analytics data: Anonymised after 12 months; raw IP addresses are deleted after 6 months.

8. International Transfers

All personal data is stored on servers located within the European Economic Area (EEA). If a transfer outside the EEA is ever required (e.g., for a third‑party analytics provider), we will ensure that appropriate safeguards—such as Standard Contractual Clauses—are in place.

9. Contact Information

If you have questions about this GDPR Compliance Policy, wish to exercise any of your rights, or need further assistance, please contact our Data Protection Officer:

Email: gdpr@myflavorfulrecipes.com
Website: https://myflavorfulrecipes.com

10. Changes to This Policy

We review this policy regularly and may update it to reflect changes in our practices, legal requirements, or technology. Any material changes will be posted on this page with an updated “Last Updated” date. We encourage you to review the policy periodically.

By continuing to use myflavorfulrecipes, you acknowledge that you have read, understood, and agree to the terms set out in this GDPR Compliance Policy.