GDPR Compliance Policy

At MomRecipeIdeas (https://momrecipeideas.com), we respect your privacy and are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and related data‑protection laws. This policy explains what data we collect, why we collect it, how we protect it, and your rights as a data subject.

1. Data We Collect

When you visit MomRecipeIdeas, we may collect the following types of personal data:

• Email addresses: When you sign up for newsletters, submit recipes, or use any interactive feature, we capture your email address to communicate with you.
• Cookies and similar technologies: We use first‑party and third‑party cookies to enhance your browsing experience, remember your preferences, and analyze traffic.
• Analytics data: Services such as Google Analytics, Hotjar, and Plausible collect anonymous usage data to help us improve content and usability.

2. Legal Basis for Processing

We process your personal data under the following lawful bases:

• Consent: For newsletter subscriptions, we obtain your explicit consent before sending marketing emails.
• Legitimate Interest: We process data necessary for site functionality, improving user experience, and ensuring site security. This includes analytics and cookie usage.

3. How We Protect Your Data

We implement robust technical and organisational measures to safeguard your personal data:

• All data transmission is encrypted using TLS/SSL (HTTPS).
• Our servers are hosted on secure, audited infrastructure with regular penetration testing.
• Access to personal data is limited to authorised staff who require it to perform their duties.
• We retain data only for as long as necessary to fulfil the purposes for which it was collected or to comply with legal obligations.

4. Your GDPR Rights

You have several rights under the GDPR. Below we explain each right and how you can exercise it. Icons are provided for quick visual reference.

Right to Access

You may request a copy of the personal data we hold about you, along with information about how we process it. We will provide a concise, intelligible summary within 30 days.

Right to Rectification

If your data is inaccurate or incomplete, you can ask us to correct it. We will update or complete the data within 30 days of receiving your request.

Right to Erasure

Also known as the “right to be forgotten.” You can request the deletion of your personal data, provided there is no lawful basis for us to retain it. We will comply within 30 days unless a legitimate legal obligation requires us to keep it.

Right to Restrict Processing

Under certain circumstances, you can ask us to restrict the use of your data. We will limit processing to the extent necessary until the restriction is lifted.

Right to Data Portability

We can provide your personal data in a structured, commonly used, and machine‑readable format, enabling you to transfer it to another controller if desired.

Right to Object

You can object to the processing of your data for direct marketing, profiling, or other purposes. Once you object, we will cease processing unless we can demonstrate a compelling legitimate interest that overrides your objection.

Right to Withdraw Consent

At any time, you may withdraw consent for any processing activity that relies on your consent. We will stop processing your data in accordance with your withdrawal.

5. How to Exercise Your Rights

To exercise any of the rights listed above, please contact us at:

Email: [email protected]

When contacting us, please include:

• Your full name and contact details.
• A description of the request (e.g., “I would like to request access to all personal data we hold about me”).
• Any relevant identifiers (e.g., email address, account ID).

We will respond to your request within 30 days. If the request is complex or we need more information, we may extend the response time by an additional 30 days, but we will inform you of any delay.

6. Data Retention

We retain personal data for no longer than necessary to fulfil the purposes for which it was collected. Typically, this includes:

• Newsletter subscriptions: up to 2 years after the last interaction unless you request deletion.
• Cookies: session cookies are deleted after the browser session; persistent cookies are kept for up to 12 months.
• Analytics data: anonymised logs are retained for 12 months to improve site performance.

7. Security Measures

To protect your personal data, we employ:

• HTTPS (TLS/SSL) for all website traffic.
• Regular security audits and penetration tests.
• Access controls and role‑based permissions.
• Encryption at rest for sensitive data stored in our databases.

8. Contact Information

If you have any questions about this policy, wish to exercise your rights, or believe we have processed your data incorrectly, please contact:

MomRecipeIdeas
Email: [email protected]
Last Updated: April 03, 2026