GDPR Compliance Policy for RecipeHomeBase

Last Updated: April 03, 2026

RecipeHomeBase (“we”, “our”, “us”) is committed to protecting the privacy and personal data of our users in accordance with the General Data Protection Regulation (GDPR) and related EU data‑protection legislation. This policy explains what data we collect, why we collect it, how we use it, and the rights you have as a data subject. By using our website https://recipehomebase.com, you agree to the processing described herein.

1. Data We Collect

Email addresses: Collected when you sign up for newsletters, create an account, or request recipe downloads.
Cookies: We use first‑party cookies to maintain session state, remember your preferences, and provide a personalized experience. Third‑party cookies from analytics services track aggregate usage patterns.
Analytics data: We employ Google Analytics and Matomo to collect anonymous traffic data, such as page views, device type, and geographic location, to improve site performance and content relevance.

2. How We Protect Your Data

Your data is protected through:

SSL/TLS encryption: All data transmitted between your browser and our servers is encrypted with industry‑standard HTTPS.
Secure servers: We host our data on reputable cloud providers that implement multi‑layered physical and virtual security controls, including firewalls, intrusion detection, and regular penetration testing.
Limited retention: Personal data is retained only for as long as necessary to fulfill the purposes outlined in this policy or to comply with legal obligations. Email addresses are kept for 12 months after the last interaction unless you opt‑in for a longer subscription.
Access controls: Only authorized staff with a legitimate business need can access personal data. All employees undergo privacy training and sign confidentiality agreements.

3. Legal Basis for Processing

We rely on the following lawful bases to process your personal data:

Consent: When you voluntarily provide your email address or other personal data, we obtain explicit consent to send newsletters and promotional material. Consent can be withdrawn at any time.
Legitimate interest: We process data to improve our services, personalize content, and protect the security of our website. We conduct a legitimate interest assessment to ensure that our interests do not override your rights.

4. Your GDPR Rights

Under the GDPR you have the following rights. We are committed to facilitating the exercise of these rights in a timely and transparent manner.

Right to Access

Request a copy of the personal data we hold about you, including the purposes of processing, categories of data, and recipients.

Right to Rectification

Ask us to correct inaccurate or incomplete data, ensuring it reflects your current information.

Right to Erasure (Right to be Forgotten)

Request deletion of your personal data when it is no longer necessary for the purposes it was collected, or if you withdraw consent.

Right to Restrict Processing

Ask us to limit the processing of your data while we verify its accuracy or investigate a complaint.

Right to Data Portability

Obtain your data in a structured, commonly used format (e.g., CSV) and transfer it to another controller.

Right to Object

Object to the processing of your data for direct marketing or profiling purposes, and we will stop processing unless we have a compelling legitimate interest.

Right to Withdraw Consent

Withdraw previously granted consent at any time, which will immediately cease any further processing based on that consent.

5. How to Exercise Your Rights

To exercise any of the rights listed above, please contact us:

Email: [email protected]
Mailing Address: 123 Culinary Lane, Kitchen City, 98765, USA

When contacting us, provide sufficient information for us to verify your identity (e.g., full name, email address associated with the account, and any relevant order or transaction details). For email requests, please include the subject line “GDPR Request – [Your Right]” to expedite processing.

6. Response Time

We will respond to your request within 30 days of receipt. If we require additional information to confirm your identity or to clarify the request, we may extend this period by up to an additional 30 days, and we will inform you of any such extension.

7. Changes to This Policy

We reserve the right to modify this policy at any time. Any changes will be posted on this page with an updated “Last Updated” date. Continued use of the website after such changes constitutes your acceptance of the revised policy.

8. Contact Information

If you have any questions, concerns, or complaints regarding this policy or our data‑processing practices, please reach out to us at [email protected]. Our Data Protection Officer is also available for more complex inquiries.