GDPR Compliance Policy

Last Updated: April 22, 2026

1. Introduction

recipemagichome (“we”, “our”, “us”) is committed to protecting the privacy and personal data of our visitors, subscribers and customers. This GDPR Compliance Policy explains how we collect, use, store and share personal data in accordance with the General Data Protection Regulation (EU) 2016/679 and the UK Data Protection Act 2018. By accessing or using our website recipemagichome.com, you acknowledge that you have read, understood and agreed to the terms set out herein.

2. What Data We Collect

We collect only the data necessary to provide and improve our services. The types of personal data we collect include:

• Email addresses – when you sign up for newsletters, create an account or request recipes.
• Cookies – small text files stored on your device that help us remember your preferences and track site usage.
• Web analytics data – information gathered through tools such as Google Analytics (IP addresses, device type, pages viewed, time spent).

3. Legal Basis for Processing

We rely on the following lawful bases to process your personal data:

• Consent – for newsletters, marketing communications and any optional services you opt into.
• Legitimate Interest – to provide and improve our services, manage user accounts, and ensure site security.

4. Data Protection Measures

We implement robust technical and organisational safeguards to protect your personal data:

• All data transmitted between your browser and our servers is encrypted using HTTPS (TLS 1.3).
• Data is stored on secure, ISO 27001‑certified servers with strict access controls.
• We retain personal data only for as long as necessary to fulfil the purposes listed above and to comply with legal obligations.
• Regular security audits, penetration testing, and vulnerability assessments are conducted to maintain the integrity of our systems.

5. Your GDPR Rights

Under the GDPR, you have the following rights regarding your personal data. Each right is accompanied by an icon for easy reference.

Right to Access

You may request a copy of the personal data we hold about you, along with information about how we process it, the sources of the data, and any third parties we share it with. To exercise this right, contact us at [email protected]. We will respond within 30 days, providing a clear, concise, and accessible summary of your data.

Right to Rectification

If any of your personal data is inaccurate or incomplete, you may request that we correct or update it. Submit a request to [email protected] and we will rectify the data within 30 days, unless the request is complex, in which case we may need additional time to verify the information.

Right to Erasure (Right to be Forgotten)

You can ask us to delete your personal data when it is no longer necessary for the purposes it was collected or if you withdraw consent. To request deletion, email [email protected]. We will remove the data within 30 days, except where we are required by law to retain it.

Right to Restrict Processing

If you contest the accuracy of your data or if the processing is unlawful, you may ask us to limit the use of your data. Contact us at [email protected] and we will restrict processing within 30 days, while still retaining the data for legal or contractual reasons.

Right to Data Portability

You may receive your personal data in a structured, commonly used, and machine‑readable format, and request that we transmit it directly to another controller if feasible. Email [email protected] to initiate the transfer. We will provide the data in a standard format (e.g., CSV, JSON) within 30 days, subject to technical feasibility.

Right to Object

You can object to the processing of your data for direct marketing, profiling, or other purposes. If you exercise this right, we will cease processing the data for those purposes within 30 days, unless we can demonstrate compelling legitimate interests that outweigh your interests.

Right to Withdraw Consent

Consent can be withdrawn at any time without affecting the lawfulness of processing that relied on consent before its withdrawal. To withdraw consent, simply unsubscribe from our newsletters or contact us at [email protected]. We will honor your withdrawal within 30 days and stop sending marketing communications thereafter.

6. How to Exercise Your Rights

All requests can be submitted via email to [email protected]. Please include:

• Your full name and contact details.
• Clear statement of the right you wish to exercise (e.g., “I request deletion of my email address”).
• Any supporting documentation if required (e.g., proof of identity for erasure requests).

We will acknowledge receipt of your request within 5 business days and complete the requested action within 30 days. If additional time is necessary, we will inform you of the reason and new deadline.

7. Contact Information

For any questions, concerns, or to exercise your GDPR rights, please contact:

GDPR Compliance Officer
recipemagichome
Email: [email protected]

8. Updates to This Policy

We may update this GDPR Compliance Policy from time to time. Any changes will be posted on this page with an updated “Last Updated” date. We encourage you to review this policy regularly to stay informed about how we protect your data.