HomeRecipes GDPR Compliance Policy

Effective date: December 01, 2025

1. Introduction

HomeRecipes (the “Site”, “we”, “us”, or “our”) is committed to protecting the personal data of its users in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR). This policy explains what personal data we collect, how we process it, the legal bases for processing, the security measures we employ, and the rights you enjoy under the GDPR.

2. Personal Data We Collect

When you interact with HomeRecipes we may collect the following categories of personal data:

• Email address: Provided when you subscribe to our newsletter, create an account, or contact us.
• Cookies and similar technologies: Used to remember your preferences, analyse site usage, and deliver personalized content.
• Analytics data: Including IP address, device type, browser version, pages visited, and time spent on each page. This information is collected through third‑party analytics services that we have configured to be GDPR‑compliant.

3. Legal Basis for Processing

We process your personal data only when we have a valid legal basis under the GDPR:

• Consent (Article 6(1)(a)): When you voluntarily provide your email address for newsletters or marketing communications, you give explicit consent.
• Legitimate interests (Article 6(1)(f)): The use of cookies and analytics is necessary for the proper functioning of the Site, to improve user experience, and to protect our legitimate business interests.

4. How We Protect Your Data

We take the security of your personal data seriously and have implemented technical and organisational measures, including:

• SSL/TLS encryption: All data transmitted between your browser and our servers is encrypted using HTTPS.
• Secure servers: Our hosting environment is hosted on servers that employ firewalls, intrusion detection systems, and regular security patches.
• Limited retention periods: Email addresses are retained only as long as you remain subscribed or until you request deletion. Analytics data is anonymised after 12 months, and cookies are set with expiration dates appropriate to their purpose.
• Access controls: Only authorised personnel with a legitimate need can access personal data, and they are bound by confidentiality obligations.

5. Your GDPR Rights

Under the GDPR you have a series of rights concerning your personal data. Each right is described below, together with a Bootstrap 5 icon for quick visual reference.

Right to Access

You may request confirmation that we are processing your personal data and obtain a copy of the data we hold about you.

Right to Rectification

If any of your personal data is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.

Right to Erasure (Right to be Forgotten)

You may ask us to delete your personal data when it is no longer necessary for the purposes for which it was collected, when you withdraw consent, or when you object to the processing and there are no overriding legitimate grounds.

Right to Restrict Processing

In certain circumstances, you can request that we limit the way we use your personal data, for example while we verify the accuracy of the data or when you contest its legality.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine‑readable format and to transmit that data to another controller without hindrance.

Right to Object

You may object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.

Right to Withdraw Consent

If processing is based on your consent (e.g., newsletter subscription), you can withdraw that consent at any time, and we will stop processing your data for that purpose.

6. How to Exercise Your Rights

To exercise any of the rights listed above, please send a written request to our Data Protection Officer at:

Email: gdpr@homerecipes.us
Subject line: GDPR Rights Request – [Your Name]

In your request, please include:

• Your full name and contact details (the email address you used with us).
• A clear description of the right you wish to invoke (e.g., “I would like to exercise my Right to Erasure”).
• Any information that will help us identify your data (e.g., the email address you subscribed with).
• If you are requesting a copy of data, please specify the preferred format (e.g., PDF, CSV).

We may ask for additional verification to ensure that we are responding to the rightful data subject. Once verified, we will act on your request without undue delay and in any case within 30 calendar days, as required by the GDPR. In exceptional cases where the request is complex or numerous, we may extend the period by up to two additional months, but we will inform you of any extension and the reasons for it.

7. International Data Transfers

HomeRecipes operates its servers within the United States. Where personal data is transferred outside the European Economic Area (EEA), we rely on the EU‑U.S. Data Privacy Framework and standard contractual clauses to ensure an adequate level of protection.

8. Changes to This Policy

We review this GDPR Compliance Policy regularly. Any material changes will be posted on this page with an updated “Last Updated” date. Continued use of the Site after such changes constitutes acceptance of the revised policy.

9. Contact Information

If you have any questions, concerns, or complaints regarding the processing of your personal data, please contact us at:

HomeRecipes GDPR Team
Email: gdpr@homerecipes.us

Last Updated: December 01, 2025