GDPR Compliance Policy – MumRecipeGuide

Last Updated: April 03, 2026

Introduction

MumRecipeGuide (“we”, “our”, “us”) is committed to protecting the privacy and personal data of our website visitors and subscribers. This policy explains how we collect, use, disclose, and safeguard your personal information in accordance with the European Union General Data Protection Regulation (GDPR) and other applicable data‑protection laws. By accessing or using mumrecipeguide.com you acknowledge that you have read, understood, and agreed to the terms of this policy.

Data We Collect

We collect the following categories of personal data:

Email addresses – when you sign up for our newsletter, request recipes, or participate in contests.
Cookies and similar tracking technologies – to remember your preferences, analyse site usage, and personalise content.
Analytics data – aggregated, non‑personal information collected through Google Analytics, Hotjar, and other tools to improve user experience.

How We Protect Your Data

Transport security. All data transmitted between your browser and our servers is encrypted using TLS 1.3 (HTTPS). Storage security. Personal data is stored on secure, ISO 27001‑certified servers with strict access controls, role‑based permissions, and regular penetration testing. Retention. We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. After the retention period, data is securely deleted or anonymised.

Legal Basis for Processing

We rely on the following lawful bases to process your personal data:

Consent. When you voluntarily provide your email address or opt‑in to newsletters, you give explicit consent for us to communicate with you and store your data for the duration of that relationship.
Legitimate interest. The use of cookies, analytics, and the provision of recipes on mumrecipeguide.com is necessary for the operation of our website and to improve user experience. We have conducted a legitimate interest assessment and determined that the benefits outweigh any potential privacy risks.

Your Rights Under GDPR

Under the GDPR you have the following rights with respect to your personal data. The icons below provide a quick visual reference for each right.

Right to Access

You may request a copy of the personal data we hold about you, including the purposes for which it is processed, the categories of data, and the recipients to whom it has been disclosed.

Right to Rectification

If any of your personal data is inaccurate or incomplete, you can ask us to correct or update it.

Right to Erasure

Also known as the “right to be forgotten.” If you request deletion of your data, we will remove it from our active databases, subject to legal retention obligations.

Right to Restrict Processing

You may request that we suspend processing of your personal data (e.g., while we verify its accuracy), and we will store it but not use it for any purpose except to comply with a legal obligation.

Right to Data Portability

When you request it, we will provide your personal data in a structured, commonly used, and machine‑readable format, allowing you to transfer it to another service provider.

Right to Object

You can object to the processing of your personal data for direct marketing, profiling, or any other legitimate interest basis. Upon receipt of your objection, we will cease processing unless we can demonstrate compelling legitimate grounds.

Right to Withdraw Consent

You may withdraw any previously given consent at any time. This will not affect the legality of processing carried out before the withdrawal.

How to Exercise Your Rights

To exercise any of the rights listed above, please contact us at [email protected] with the following information:

Your full name and contact details.
A clear statement of the right you wish to exercise (e.g., “I request erasure of my email address”).
Any relevant supporting documents or proof of identity (if required for verification).

We will respond to your request within 30 days of receipt. If your request is complex or requires additional time, we will inform you of the delay and provide an updated timeline.

Retention and Deletion

We retain personal data for the minimum period necessary to fulfil the purposes for which it was collected. Typical retention periods are:

Email addresses – until you unsubscribe or we delete them upon request.
Cookies – session cookies are deleted when the session ends; persistent cookies are removed after 12 months unless you opt‑out.
Analytics – aggregated data is kept for up to 12 months to monitor site performance.

Once the retention period expires or you request deletion, we securely erase the data from our primary databases and any backups, ensuring it cannot be recovered.

Data Sharing and Third‑Party Processors

We do not sell or trade your personal data to third parties. We may share your data with the following entities, only for the purposes described below, and under strict contractual safeguards:

Email service providers (e.g., Mailchimp) – to send newsletters and updates.
Analytics services (e.g., Google Analytics) – for site usage analysis.
Hosting providers – to maintain and secure our servers.

All third parties are bound by data‑processing agreements that require them to comply with GDPR and to implement appropriate security measures.

Security Measures

In addition to the measures described under “How We Protect Your Data,” we also employ:

Regular vulnerability scans and penetration tests.
Multi‑factor authentication for administrative access.
Encryption at rest for all databases containing personal data.

Policy Updates

We reserve the right to modify this policy at any time. Any changes will be posted on this page with a new “Last Updated” date. We encourage you to review this policy periodically to stay informed about how we protect your personal data.

Contact Us

If you have any questions about this policy, your data rights, or how we process your personal information, please contact:

Data Protection Officer
mumrecipeguide.com
Email: [email protected]