GDPR Compliance Policy

This GDPR Compliance Policy (the “Policy”) explains how savorymomrecipes (“we”, “our”, or “us”) collects, uses, discloses, and protects the personal data of individuals who visit our website savorymomrecipes.com (the “Site”). By accessing or using the Site, you acknowledge that you have read, understood, and agree to the terms set forth in this Policy.

Last Updated: April 03, 2026

1. Data We Collect

We collect the following categories of personal data:

Email addresses: When you subscribe to our newsletter, register for an account, or request recipe downloads.
Cookies & Tracking Technologies: We use first‑party cookies to remember your language preference, session data, and to provide a personalized browsing experience. Third‑party cookies (e.g., Google Analytics, Facebook Pixel) are used for analytical purposes and marketing.
Analytics Data: We collect aggregated and anonymised data such as page views, click‑through rates, and geographical information through tools like Google Analytics, Matomo, and other web analytics platforms.

2. Legal Basis for Processing

We process personal data only on a lawful basis, as defined by the General Data Protection Regulation (GDPR). The legal bases we rely on are:

Consent: When you explicitly agree to receive marketing communications or to the use of cookies.
Legitimate Interest: For purposes such as improving website functionality, delivering relevant content, and conducting market research. We conduct a legitimate interests assessment to ensure that our interests do not override your fundamental rights.
Contractual Necessity: When processing is necessary to provide a service you have requested, such as managing your account or delivering recipe content.

3. How We Protect Your Data

We implement a range of technical and organisational measures to safeguard your personal data:

SSL/TLS Encryption: All data transmitted between your browser and our servers is encrypted using industry‑standard SSL/TLS protocols.
Secure Servers: We host our services on reputable, secure cloud platforms with regular vulnerability scans, intrusion detection systems, and physical security controls.
Access Controls: Data access is restricted to authorised personnel on a strict need‑to‑know basis. All employees undergo regular data protection training.
Data Retention: Personal data is retained only as long as necessary to fulfil the purposes for which it was collected, or as required by law. For example, email addresses are kept for the duration of your subscription unless you request deletion.

4. Your GDPR Rights

Under the GDPR, you have the following rights regarding your personal data. Each right is illustrated with an icon for quick reference.

Right to Access

You have the right to obtain confirmation that we are processing your personal data, and to receive a copy of that data in a structured, commonly used format.

Right to Rectification

You may request the correction of any inaccurate or incomplete personal data we hold about you.

Right to Erasure (Right to be Forgotten)

Under certain circumstances, you can ask us to delete your personal data from our systems.

Right to Restrict Processing

You may request that we limit how we process your personal data, for example while we verify its accuracy.

Right to Data Portability

You can obtain your personal data in a machine‑readable format and request that we transmit it directly to another controller.

Right to Object

You can object to the processing of your personal data for direct marketing or profiling purposes.

Right to Withdraw Consent

If you have given us consent to process your data, you may withdraw that consent at any time, and we will stop processing your data for that purpose.

5. How to Exercise Your Rights

To exercise any of the rights listed above, please contact us using the details below:

Email: [email protected]
Postal Address: 123 Savory Lane, Flavor City, FL 12345, USA

When you submit a request, please include the following information to help us process it efficiently:

Your full name and contact details.
A description of the request (e.g., “I would like to request access to all personal data we hold about me.”).
Any relevant identifiers, such as your account username or email address.

We will respond to your request within 30 days of receipt. If additional time is required, we will inform you of the reason and the expected completion date.

6. Data Retention and Deletion

We retain personal data only for as long as necessary to fulfil the purposes outlined in this Policy, or as required by law. After the retention period expires, we securely delete or anonymise the data. If you request erasure, we will delete your data from all active systems and, where feasible, from backup archives.

7. International Data Transfers

If we transfer personal data outside the European Economic Area (EEA), we ensure that the destination provides an adequate level of protection, or we implement appropriate safeguards such as Standard Contractual Clauses (SCCs) and privacy shield mechanisms.

8. Changes to This Policy

We reserve the right to update this Policy from time to time. Any changes will be posted on this page with an updated “Last Updated” date. We encourage you to review the policy periodically to stay informed about how we protect your personal data.

savorymomrecipes | Privacy Notice | Terms of Service