GDPR Compliance

01 — Data Controller

Who is responsible for your data

For the purposes of the GDPR, www.therecipecraft.com is the data controller of any personal information collected through this website. This means we determine the purposes and means by which your personal data is processed.

If you have any questions about how your data is being handled, or wish to contact our data protection point of contact, please use the details provided in the Contact section at the bottom of this page.

02 — Legal Basis for Processing

Why we are allowed to process it

Under Article 6 of the GDPR, we only process your personal data when at least one of the following lawful bases applies:

• Consent — when you have given clear, freely‑given permission for a specific purpose (e.g., subscribing to our newsletter).
• Contract — when processing is necessary to fulfil a contract or take steps at your request before entering one.
• Legal obligation — when we must process data to comply with applicable law or regulation.
• Legitimate interests — when processing is necessary for our legitimate interests (such as site security or analytics) and your rights do not override those interests.

03 — What Data We Collect

Categories of personal data

Depending on how you interact with our site, we may collect the following categories of personal information:

• Identity data — your name or display name when you leave a comment or subscribe.
• Contact data — your email address when you sign up for the newsletter or use a contact form.
• Technical data — IP address, browser type and version, operating system, device information, and time zone.
• Usage data — pages viewed, links clicked, time spent, referring URLs, and other analytics.
• Marketing data — your preferences for receiving updates, newsletters, or promotional emails.

We do not knowingly collect special categories of data (such as health, religious beliefs, or political opinions) and we do not collect personal data from children under the age of 16 without verifiable parental consent.

04 — Your Rights Under GDPR

You are in control

If you are located in the European Economic Area (EEA) or the United Kingdom, the GDPR grants you the following rights regarding your personal data:

• Right to be informed — to know what data we collect and how it is used.
• Right of access — to request a copy of the personal data we hold about you.
• Right to rectification — to ask us to correct any inaccurate or incomplete data.
• Right to erasure — to request deletion of your data (“the right to be forgotten”).
• Right to restrict processing — to ask us to pause certain uses of your data.
• Right to data portability — to receive your data in a structured, machine‑readable format.
• Right to object — to object to processing based on legitimate interests or direct marketing.
• Rights related to automated decision‑making — to not be subject to decisions based solely on automated processing that produce legal or similarly significant effects.
• Right to withdraw consent — at any time, where processing is based on your consent.

To exercise any of these rights, please contact us using the details below. We will respond to verified requests within 30 days, as required by the regulation.

05 — How We Use Your Data

Purposes of processing

• To deliver and personalize the content you request, including blog posts and newsletters.
• To respond to inquiries, comments, or support requests sent through our forms.
• To analyze how our site is used and improve its functionality, security, and performance.
• To send marketing or promotional communications, where you have consented to receive them.
• To comply with legal obligations and enforce our terms and policies.

06 — Data Sharing & International Transfers

Who we share data with

We do not sell your personal data. We may share limited information with carefully selected third‑party processors who help us run the site, such as email service providers, analytics platforms, and hosting providers. Each of these partners is bound by contract to handle your data only on our instructions and to maintain appropriate security standards.

If your data is transferred outside the European Economic Area, we ensure that an adequate level of protection is in place — typically through Standard Contractual Clauses approved by the European Commission, an adequacy decision, or another lawful transfer mechanism recognised under the GDPR.

07 — Data Retention

How long we keep your data

We retain personal data only for as long as it is needed to fulfil the purpose for which it was collected — for example, for as long as you remain subscribed to our newsletter, or for the period required by law for accounting and reporting obligations.

When personal data is no longer required, we securely delete it or irreversibly anonymize it so that you can no longer be identified.

08 — Security & Breach Notification

How we protect your data

We implement appropriate technical and organizational measures to safeguard your personal data — including encryption in transit (HTTPS/SSL), restricted internal access, secure hosting, and regular security reviews. These measures are designed to protect against unauthorized access, accidental loss, alteration, or disclosure.

In the unlikely event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and, where required, inform affected users without undue delay.

09 — Cookies & Consent

Your cookie choices

When you first visit www.therecipecraft.com, you will be asked to accept or decline non‑essential cookies through our cookie consent banner. Essential cookies, which are required for basic site functionality, are always active. You may change or withdraw your cookie preferences at any time through your browser settings or by clearing site data.

For full details on the cookies we use and how to control them, please refer to our Privacy Policy.

10 — Complaints & Policy Updates

If something doesn’t feel right

We would always prefer the chance to address any concerns directly, so please reach out to us first if you believe your data has been mishandled. You also have the right to lodge a complaint with your local data protection authority — for example, the Information Commissioner’s Office (ICO) in the United Kingdom or your national supervisory authority within the EU.

We may update this GDPR Compliance page from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will revise the “Last Updated” date at the top of this page and, where appropriate, notify you through the site or by email.