GDPR Compliance Policy – flavornestrecipes

Last Updated: April 03, 2026

At flavornestrecipes we are committed to protecting the privacy and personal data of all users. This policy explains how we collect, use, and safeguard your information in accordance with the General Data Protection Regulation (GDPR). If you have any questions or concerns, please contact us at [email protected].

1. Types of Data We Collect

We collect the following categories of personal data when you interact with our website:

Email addresses – when you sign up for newsletters, recipes, or contests.
Cookies and similar technologies – for session management, personalization, and analytics.
Analytics data – aggregated information about how visitors use the site (page views, click‑through rates, etc.) via Google Analytics and Matomo.
Contact form submissions – name, email, phone number, and message content when you send inquiries or feedback.

2. Legal Basis for Processing

We process personal data under the following lawful bases:

Consent – for email newsletters, promotional offers, and when you voluntarily provide personal data through forms.
Legitimate interest – to operate the website, improve user experience, comply with legal obligations, and conduct internal analytics.

3. How We Protect Your Data

We employ robust technical and organisational measures to safeguard your personal data:

All data transmission is encrypted with TLS 1.2+ (SSL certificates issued by Let’s Encrypt).
Personal data is stored on secure, GDPR‑compliant servers hosted in the EU (Amazon Web Services – EU‑West).
Access controls restrict data handling to authorised staff only, and all staff undergo privacy training.
Data retention is limited: email addresses are kept for the duration of the subscription or until you opt‑out; analytics data is retained for 12 months; contact form data is deleted within 30 days after the inquiry is resolved.
Regular penetration testing and vulnerability scanning are performed by an external security provider.

4. Your GDPR Rights

Under the GDPR you have several rights regarding your personal data. Below are the rights you can exercise, each accompanied by an icon for quick reference.

Right to Access

Request a copy of the personal data we hold about you, including the purposes of processing and the categories of data.

Right to Rectification

Ask us to correct or update inaccurate or incomplete personal data.

Right to Erasure

Request deletion of your personal data, subject to legal retention requirements.

Right to Restrict Processing

Ask us to limit the use of your personal data while we verify its accuracy or you contest the processing.

Right to Data Portability

Obtain your personal data in a structured, commonly used format and transfer it to another controller.

Right to Object

Object to processing of your personal data for direct marketing or profiling purposes.

Right to Withdraw Consent

Revoke any previously given consent at any time; this will not affect the legality of processing based on other grounds.

5. How to Exercise Your Rights

To exercise any of the rights above, please send a written request to:

flavornestrecipes
GDPR Compliance Team
Email: [email protected]

In your request, please include:

Full name and contact information.
Specific request (e.g., “I wish to access all data we hold about me”).
Any identifying details that will help us locate your data (e.g., email address used for subscription).

We will respond within 30 calendar days from the date we receive your request. If your request is complex or requires additional verification, we may extend the response time by an additional 30 days, and we will inform you of the extension.

6. Retention of Personal Data

Personal data is retained only as long as necessary to fulfill the purposes for which it was collected, including compliance with legal obligations, dispute resolution, and the operation of our services. Typical retention periods are:

Email newsletters: until you unsubscribe.
Analytics data: 12 months, after which it is anonymised.
Contact form submissions: 30 days after resolution.

7. Data Security and Breach Notification

We maintain a comprehensive data security policy that includes:

Encryption of data at rest using AES‑256.
Two‑factor authentication for administrative accounts.
Regular backup of critical data to an encrypted, geographically separate location.
Immediate incident response procedures, including notification to supervisory authorities within 72 hours if a personal data breach occurs.

8. Contact Information

If you wish to lodge a complaint with a supervisory authority or have any questions about this policy, please contact:

GDPR Compliance Team – flavornestrecipes
Email: [email protected]
Phone: +44 20 7946 0000 (UK) – Mon‑Fri, 9 am‑5 pm GMT

By using our website, you acknowledge that you have read and understood this GDPR Compliance Policy. We reserve the right to update this policy from time to time. Any changes will be posted on this page and, where appropriate, communicated to you via email.