GDPR Policy - myrecipesdaily

GDPR Compliance Policy

MyRecipesDaily (“we”, “our”, “us”) is committed to protecting the privacy and personal data of our users in accordance with the European Union General Data Protection Regulation (GDPR). This policy explains what data we collect, how it is used, the legal bases for processing, and the rights you have under GDPR. By accessing or using our website, you acknowledge that you have read and understood this policy.

1. Data We Collect

Email addresses: When you sign up for newsletters, create an account, or request recipe information, we collect your email address to send you updates, promotions, and personalized content.
Cookies and similar technologies: We use cookies to remember your preferences, track site usage, and provide a smoother browsing experience. This includes first‑party cookies for session management and third‑party cookies from analytics services.
Analytics data: We employ Google Analytics and similar tools to gather anonymised usage statistics such as page views, bounce rates, and traffic sources. This data helps us improve the site and tailor content to user interests.

2. How We Protect Your Data

SSL/TLS Encryption: All data transmitted between your browser and our servers is encrypted using HTTPS to prevent interception.
Secure Servers: We store data on encrypted, access‑controlled servers located in the EU. Regular security audits and penetration testing are performed to detect and mitigate vulnerabilities.
Limited Retention: Personal data is retained only for the period necessary to fulfil the purpose for which it was collected or as required by law. Email addresses are deleted after 12 months of inactivity, cookies are cleared upon browser exit, and analytics data is retained in aggregate form for 6 months.

3. Legal Basis for Processing

We process your data under the following lawful bases:

Consent: When you voluntarily provide your email address or opt‑in to receive newsletters, you give explicit consent. You may withdraw this consent at any time by clicking the unsubscribe link or contacting us.
Legitimate Interest: We process data necessary to maintain the website, provide a better user experience, and analyze site performance. This interest is balanced against your privacy rights and is documented in our internal policy.

4. Your Rights Under GDPR

The following icons represent the rights you have. Click or tap on each to learn how to exercise them.

Right to Access

You can request a copy of the personal data we hold about you. We will provide a summary of the data, its source, and how it is used within 30 days.

Right to Rectification

If any of your personal data is incorrect or incomplete, you may ask us to correct it. We will update the data promptly, usually within 30 days.

Right to Erasure

Under certain circumstances, you can request that we delete your personal data. We will remove it from all active systems and backups, where feasible, within 30 days.

Right to Restrict Processing

You can ask us to limit how we use your data. We will process it only for the purposes you have agreed to or for legal obligations, and we will notify you of any changes.

Right to Data Portability

You can receive your personal data in a structured, commonly used, and machine‑readable format. We will provide it in a CSV or JSON file within 30 days of your request.

Right to Object

You may object to the processing of your data for direct marketing or profiling. Once we receive your objection, we will stop using the data for those purposes within 30 days.

Right to Withdraw Consent

If you initially gave us consent, you can withdraw it at any time. This will stop us from using your data for the purpose you consented to, and we will delete it where appropriate.

5. How to Exercise Your Rights

To exercise any of the rights above, please contact us at [email protected]. In your email, include:

Your full name and the email address associated with your account.
A clear statement of the right you wish to exercise (e.g., “Request for data erasure”).
Any additional information that will help us locate your data (e.g., account ID, date of registration).

We will acknowledge receipt of your request within 5 business days and respond with the requested action within 30 days, as required by GDPR. If we need more information to verify your identity or to process your request, we will contact you promptly.

6. Last Updated

This GDPR Compliance Policy was last updated on April 03, 2026. We reserve the right to modify this policy at any time; any changes will be posted on this page and will take effect immediately upon publication.

7. Contact Us

If you have any questions about this policy or your personal data, please reach out to our Data Protection Officer at [email protected]. We are committed to responding to all inquiries within the statutory 30‑day period and to maintaining the highest standards of data protection.