GDPR Compliance Policy – recipesbymums.com

At recipesbymums we are committed to protecting the privacy and personal data of our users. This policy explains how we collect, use, store, and share your information, as well as your rights under the General Data Protection Regulation (GDPR). Please read it carefully to understand how we handle your data.

Data We Collect

Our website collects the following types of personal data:

Email addresses – when you sign up for newsletters, create a recipe submission, or receive special offers.
Cookies and similar technologies – to remember your preferences, track site usage, and improve the user experience.
Analytics data – aggregated, anonymous information gathered through Google Analytics and similar services to understand traffic patterns and optimise content.

How We Protect Your Data

We employ a multi‑layered approach to safeguard your personal data:

Transport Layer Security (TLS/SSL) – all data transmitted between your browser and our servers is encrypted via HTTPS.
Secure servers and infrastructure – hosted on reputable cloud providers with regular security audits, firewalls, and intrusion detection.
Limited retention periods – email addresses are retained for up to 12 months after the last interaction, cookies are automatically deleted after 30 days unless you opt‑in for longer periods, and analytics data is anonymised and stored for 6 months.
Access controls – only authorised personnel with a legitimate need can access personal data, and all staff undergo data protection training.

Legal Basis for Processing

We process personal data based on the following lawful bases:

Consent – when you voluntarily provide your email address or opt‑in to cookies, you give us explicit consent to process that data.
Legitimate Interest – we process analytics data and non‑essential cookies to improve our website, provided this interest does not override your fundamental rights and freedoms.
Contractual Necessity – certain data, such as email addresses, are processed to fulfil contractual obligations (e.g., sending newsletters or order confirmations).

Your GDPR Rights

Under the GDPR, you have the following rights regarding your personal data. We are committed to respecting these rights and providing a straightforward process to exercise them.

Right to Access

You may request a copy of any personal data we hold about you. This includes the categories of data, the purposes for which it is processed, and the recipients to whom it has been disclosed.

Right to Rectification

If any of your personal data is inaccurate or incomplete, you can ask us to correct it. We will update or supplement the data promptly.

Right to Erasure

Also known as the “right to be forgotten”, you may request the deletion of your personal data, provided no legal obligations require us to retain it (e.g., statutory record‑keeping).

Right to Restrict Processing

You can ask us to suspend the processing of your data while we verify its accuracy or resolve disputes. During this period, the data will be stored but not used for other purposes.

Right to Data Portability

We will provide your personal data in a structured, commonly used, machine‑readable format, enabling you to transfer it to another service provider.

Right to Object

You may object to the processing of your data for direct marketing or profiling purposes. Upon receiving your objection, we will cease processing unless we can demonstrate a compelling legitimate interest that overrides your objection.

Right to Withdraw Consent

If you have provided consent to process your data, you can withdraw it at any time. Withdrawal does not affect the lawfulness of any processing carried out before the withdrawal.

How to Exercise Your Rights

To exercise any of the rights above, please contact us at [email protected] with the following information:

Your full name and contact details.
Specific details of the request (e.g., “I want a copy of all email addresses I provided”).
Any supporting documents that help verify your identity, if necessary.

We will respond to your request within 30 days of receipt. If you require a quicker response, you may contact our support team at [email protected] for immediate assistance.

Response Time and Escalation

All GDPR‑related requests will be handled within 30 calendar days. If you feel your request has not been addressed satisfactorily, you can file a complaint with the UK Information Commissioner’s Office (ICO) or the relevant supervisory authority.

Contact Information

For any questions about our privacy practices or to exercise your rights, please reach out to:

Privacy Officer
recipesbymums
Email: [email protected]

Last Updated: April 03, 2026