GDPR Compliance Policy

This policy explains how freshmomrecipes.com collects, uses, and protects your personal data in accordance with the General Data Protection Regulation (GDPR) and the ePrivacy Directive. It also details your rights under the GDPR and how you can exercise them.

Right to Access

You have the right to obtain confirmation that we are processing personal data about you, and if so, to receive a copy of that data. This includes the purposes of processing, the categories of personal data, and the recipients or categories of recipients to whom the data has been disclosed.

Right to Rectification

If any of the personal data we hold about you is inaccurate or incomplete, you can request that we correct it without undue delay. We will verify your identity before making changes to ensure the security of your information.

Right to Erasure

Under certain circumstances, you can request that we delete your personal data. This applies when the data is no longer necessary for the purposes for which it was collected, or if you withdraw consent and there is no other legal basis for processing.

Right to Restrict Processing

You may request that we restrict the processing of your data if you contest its accuracy, if we no longer need the data for processing but you need it for legal claims, or if you have objected to processing and we are determining whether we have legitimate grounds to continue.

Right to Data Portability

When the processing is based on your consent or a contract, you can obtain the personal data we hold about you in a structured, commonly used, and machine‑readable format. You may also request that we transfer that data directly to another controller where technically feasible.

Right to Object

At any time, you can object to the processing of your personal data for direct marketing or for profiling. If you object, we will cease processing your data unless we can demonstrate compelling legitimate grounds that override your interests, or for the establishment, exercise, or defense of legal claims.

Right to Withdraw Consent

If you have given us consent to process your personal data, you can withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of any processing carried out before the withdrawal.

What Personal Data We Collect

We collect the following types of personal data:

• Email addresses – collected when you subscribe to our newsletter, register for a cooking class, or contact us.
• Cookies and similar technologies – used to personalize content, remember preferences, and analyze traffic patterns.
• Analytics data – gathered through Google Analytics and other third‑party services to understand user behaviour and improve our website.

How We Protect Your Data

We employ a range of technical and organisational measures to safeguard your personal data:

• SSL/TLS encryption – all data transmitted between your browser and our servers is encrypted using industry‑standard SSL/TLS protocols.
• Secure servers – our hosting provider uses secure, ISO‑27001 certified data centres with strict access controls.
• Limited retention – personal data is retained only for as long as necessary to fulfil the purposes for which it was collected or as required by law.
• Access controls – only authorised staff members have access to personal data, and they undergo regular privacy training.
• Regular audits – we conduct periodic security audits and penetration tests to identify and remediate vulnerabilities.

Legal Basis for Processing

We process your personal data on one or more of the following lawful bases:

• Consent – when you voluntarily provide your email address or opt‑in to marketing communications.
• Legitimate interest – for purposes such as improving website performance, ensuring security, and providing a personalised user experience. We conduct a balancing test to confirm that our interests do not override your fundamental rights.
• Contractual necessity – when processing is necessary for the performance of a contract to which you are a party, such as processing orders or delivering newsletters.

How to Exercise Your GDPR Rights

To exercise any of the rights listed above, please contact us at:

Email: [email protected]

When you send a request, please include:

• Your full name and contact information.
• A description of the request (e.g., “I would like to access all personal data we hold about me”).
• Any supporting documentation that can help us verify your identity (e.g., a scanned ID).

We will respond to your request within 30 days. If your request is complex or requires additional time, we will notify you and provide a reason for the delay.

Changes to This Policy

We reserve the right to update this policy from time to time. Any changes will be posted on this page and will take effect immediately upon publication. The “Last Updated” date at the bottom of this page reflects the most recent revision.

Last Updated: April 03, 2026