GDPR Compliance Policy – Easy Mom Recipes

Effective Date: December 01, 2025

1. Introduction

Easy Mom Recipes (the “Site”, “we”, “us”, or “our”) is committed to protecting the privacy and personal data of our visitors, subscribers, and users in accordance with the European Union’s General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679). This GDPR Compliance Policy explains what personal data we collect, how we process it, the legal bases for that processing, the security measures we employ, and the rights you have under the GDPR. By using our Site, you acknowledge that you have read, understood, and agreed to the terms set out in this policy.

2. Data We Collect

We collect and process the following categories of personal data:

• Email address: Provided when you subscribe to our newsletter, comment on a recipe, or contact us.
• Cookies & similar technologies: Used to remember your preferences, analyse traffic, and deliver targeted content.
• Analytics data: Information such as IP address, browser type, device type, and pages visited, collected via Google Analytics and similar tools.

3. Legal Basis for Processing

We rely on the following lawful bases to process your personal data:

• Consent (Article 6(1)(a)): When you voluntarily subscribe to our newsletter or accept cookies, you give explicit consent for those specific processing activities.
• Legitimate Interests (Article 6(1)(f)): The collection of analytics data and the use of cookies for improving site functionality and user experience are pursued under our legitimate interest in operating a secure, efficient website.

4. How We Protect Your Data

We employ a comprehensive set of technical and organisational measures to safeguard your personal data:

• SSL Encryption: All data transmitted between your browser and our servers is encrypted using HTTPS (TLS 1.2 or higher).
• Secure Servers: Our hosting environment is regularly patched, monitored, and protected by firewalls, intrusion‑detection systems, and access‑control policies.
• Limited Retention: Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Email addresses are deleted 24 months after the last interaction unless you have an active subscription.
• Access Controls: Only authorised personnel with a legitimate need can access personal data, and they are bound by confidentiality obligations.

5. Your GDPR Rights

Under the GDPR you enjoy a series of specific rights concerning your personal data. Each right is listed below together with a brief description and a representative Bootstrap Icon.

• Right to Access – You may request a copy of the personal data we hold about you, together with information about how it is processed.
• Right to Rectification – If any of your personal data is inaccurate or incomplete, you can ask us to correct or complete it without undue delay.
• Right to Erasure (Right to be Forgotten) – You can request that we delete your personal data where there is no overriding legitimate reason for retaining it.
• Right to Restrict Processing – You may ask us to limit the way we process your data, for example while we verify the accuracy of the information.
• Right to Data Portability – You have the right to receive your personal data in a structured, commonly used format and to transmit it to another controller.
• Right to Object – You can object to the processing of your data for direct marketing, scientific/historical research, or any other legitimate‑interest basis.
• Right to Withdraw Consent – Where processing is based on your consent, you may withdraw that consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

6. How to Exercise Your Rights

To exercise any of the rights listed above, please contact us using the details provided in Section 9. Your request should include:

• Your full name and, where applicable, the email address associated with the data you wish to access.
• A clear description of the right you are invoking (e.g., “I would like to exercise my right to erasure”).
• Proof of identity (such as a scanned ID) when the request could affect another individual’s privacy.

We will acknowledge receipt of your request within 5 business days and will endeavour to provide a substantive response within 30 calendar days, as required by GDPR Article 12(3). In exceptional cases where the request is complex or numerous, we may extend the period by a further two months, but you will be informed of any such extension and the reasons for it.

7. Data Retention Periods

The length of time we retain personal data depends on the purpose for which it was collected:

• Newsletter subscriptions: Retained for as long as you remain subscribed, plus an additional 24 months after the last interaction.
• Analytics data: Aggregated and anonymised data is kept for up to 14 months; raw IP addresses are deleted after 30 days.
• Cookies: Session cookies expire at the end of your browsing session; persistent cookies are set to expire after 12 months unless you delete them earlier.

8. International Data Transfers

When we use third‑party services (e.g., Google Analytics), your data may be transferred to countries outside the European Economic Area (EEA). All such transfers are protected by appropriate safeguards, including Standard Contractual Clauses (SCCs) and the EU‑U.S. Data Privacy Framework, ensuring an adequate level of protection.

9. Contact Information

If you have any questions, concerns, or wish to exercise any of your GDPR rights, please contact our Data Protection Officer (DPO) at:

Easy Mom Recipes
Email: gdpr@easymomrecipes.com

10. Changes to This Policy

We review this GDPR Compliance Policy regularly and may update it to reflect changes in legislation, our practices, or the services we provide. Any material changes will be posted on this page with an updated “Last Updated” date. Continued use of the Site after such modifications constitutes acceptance of the revised policy.

Easy Mom Recipes respects your privacy and is committed to maintaining the highest standards of data protection. Thank you for trusting us with your culinary inspiration.