GDPR Compliance Policy

Site: therecipesdaily (https://therecipesdaily.com)
Contact for Data‑Protection Queries: gdpr@therecipesdaily.com
Last Updated: December 01, 2025

1. Introduction

At therecipesdaily we are committed to protecting the personal data of our users and visitors in accordance with the European Union General Data Protection Regulation (EU) 2016/679 (“GDPR”). This policy explains what personal data we collect, why we collect it, how we protect it, the legal bases for processing, and the rights you enjoy under the GDPR. By using our website, you acknowledge that you have read and understood this policy.

2. Data We Collect

We collect only the data that is necessary for the proper functioning of the site and for providing a personalised experience. The categories of personal data we process are:

Email addresses: collected when you subscribe to our newsletter, comment on a recipe, or request a password reset.
Cookies & similar technologies: used to remember your preferences, analyse site usage, and deliver targeted content. This includes first‑party session cookies, analytics cookies (Google Analytics), and marketing cookies when you have given explicit consent.
Analytics data: aggregated information such as page views, device type, IP address (anonymised after collection), and referral source, which helps us improve the site’s performance and content relevance.

3. Legal Basis for Processing

We process personal data only when we have a lawful basis under the GDPR:

Consent (Article 6(1)(a)): When you voluntarily sign up for the newsletter or accept marketing cookies, you give us explicit consent to process your email address and related data for those purposes.
Legitimate Interests (Article 6(1)(f)): For activities such as website security, fraud prevention, and improving the user experience through analytics, we rely on legitimate interests that do not override your fundamental rights.
Performance of a Contract (Article 6(1)(b)): When you request a password reset or interact with a comment system, processing is necessary to fulfil the contract you have with us (i.e., access to the service).

4. How We Protect Your Data

Security is a core priority. We employ a layered approach to protect personal data:

Transport Layer Security (TLS/SSL): All data transmitted between your browser and our servers is encrypted using HTTPS.
Secure Servers: Our hosting environment is hosted in GDPR‑compliant data centres that implement firewalls, intrusion detection, and regular security patches.
Access Controls: Only authorised personnel with a legitimate need can access personal data, and they do so under strict confidentiality agreements.
Limited Retention: Email addresses are retained for as long as you remain subscribed or until you request deletion. Analytics data is anonymised after 14 days, and cookies are deleted automatically according to their lifespan.

5. Your GDPR Rights

Under the GDPR you enjoy a set of specific rights regarding your personal data. Each right is listed below with a brief description and an icon for quick reference.

Right to Access

You may request a copy of the personal data we hold about you, together with information about how we process it, the purposes of processing, and the recipients of that data.

Right to Rectification

If any of your personal data is inaccurate or incomplete, you have the right to have it corrected or completed without undue delay.

Right to Erasure (“Right to be Forgotten”)

You may ask us to delete your personal data when it is no longer necessary for the purposes for which it was collected, or when you withdraw consent.

Right to Restrict Processing

You can request that we limit the processing of your data while we verify the accuracy of the data or while a dispute is being resolved.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine‑readable format and to transmit it to another controller.

Right to Object

You may object to the processing of your data for direct marketing, scientific or historical research, or any other legitimate interest that we rely on.

Right to Withdraw Consent

Where processing is based on your consent, you can withdraw that consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

6. How to Exercise Your Rights

To exercise any of the rights listed above, please send a clear request to our Data Protection Officer at gdpr@therecipesdaily.com. Your request should include:

Your full name and contact details (the email address used for the request is sufficient for verification).
A description of the right you wish to invoke (e.g., “I would like to exercise my Right to Erasure”).
Any additional information that will help us identify the data you are referring to (e.g., the email address you used to subscribe).

We will acknowledge receipt of your request within 5 business days and will respond no later than 30 calendar days, as required by the GDPR. In complex cases we may extend the period by an additional two months, but we will inform you of the extension and the reasons for it within the original 30‑day window.

7. Data Retention

We retain personal data only for as long as it is necessary:

Email addresses: retained until you unsubscribe or request deletion.
Cookies: session cookies expire when the browser is closed; persistent cookies are set with a maximum lifespan of 12 months unless you delete them earlier.
Analytics data: anonymised after 14 days and stored for a maximum of 12 months for trend analysis.

8. Contact Information

If you have any questions about this policy, your personal data, or any GDPR‑related matter, please contact our Data Protection Officer:

Data Protection Officer
Email: gdpr@therecipesdaily.com
Address: therecipesdaily, 123 Culinary Avenue, Food City, EU

9. Changes to This Policy

We review this GDPR Compliance Policy regularly. Any material changes will be posted on this page with an updated “Last Updated” date. We encourage you to review the policy periodically to stay informed about how we protect your personal data.