GDPR Compliance Policy

Last Updated: December 01, 2025

TopRecipes (https://toprecipes.us) is committed to protecting the personal data of individuals located in the European Economic Area (EEA) in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR). This policy explains what personal data we collect, why we process it, how we safeguard it, and the rights you have under the GDPR.

1. Personal Data We Collect

We collect and process the following categories of personal data:

• Email addresses – provided when you subscribe to our newsletter, create an account, or contact us.
• Cookies and similar tracking technologies – used to remember your preferences, analyse site usage, and deliver personalised content.
• Analytics data – aggregated information about how you interact with the website (e.g., pages visited, time spent, device type).

2. How We Use Your Data

We process personal data for the following legitimate purposes:

• Providing and improving services – delivering recipes, newsletters, and personalised recommendations.
• Communicating with you – responding to enquiries, sending updates, and handling support requests.
• Analytics and performance monitoring – understanding visitor behaviour to optimise the site.
• Compliance and security – detecting fraud, preventing abuse, and meeting legal obligations.

3. Legal Basis for Processing

Our processing activities are based on the following GDPR legal bases:

• Consent – when you voluntarily sign up for newsletters or accept cookies, you give us explicit consent to process your data for those specific purposes.
• Legitimate interests – we rely on legitimate interests for analytics, security, and improving the user experience, provided those interests do not override your fundamental rights and freedoms.
• Performance of a contract – processing your email address is necessary to fulfil the subscription service you have requested.

4. Data Protection Measures

We employ a range of technical and organisational safeguards to protect your personal data:

• Encryption in transit – all data transmitted between your browser and our servers is protected by SSL/TLS (HTTPS).
• Secure servers – data is stored on servers that are regularly patched, monitored, and protected by firewalls.
• Limited retention – email addresses are retained only as long as you remain subscribed or until you request deletion. Analytics data is anonymised after 12 months.
• Access controls – only authorised personnel with a legitimate need can access personal data, and they are bound by confidentiality obligations.

5. Your GDPR Rights

Under the GDPR, you enjoy a set of specific rights concerning your personal data. Each right is described below, accompanied by a Bootstrap icon for easy reference.

Right to Access

You have the right to obtain confirmation that we are processing your personal data and, where applicable, a copy of that data in a structured, commonly used, and machine‑readable format.

Right to Rectification

If any of your personal data is inaccurate or incomplete, you may request that we correct or complete it without undue delay.

Right to Erasure (Right to be Forgotten)

You may ask us to delete your personal data when it is no longer necessary for the purposes for which it was collected, when you withdraw consent, or when you object to the processing and there are no overriding legitimate grounds.

Right to Restrict Processing

You can request that we limit the processing of your data while we verify the accuracy of the data, resolve a dispute, or assess a request for erasure.

Right to Data Portability

You may receive your personal data in a structured, commonly used format and transmit it to another controller without hindrance, where processing is based on consent or a contract and is carried out by automated means.

Right to Object

You have the right to object, on grounds relating to your particular situation, to the processing of your personal data for direct marketing, scientific/historical research, or statistical purposes. We will cease processing unless we demonstrate compelling legitimate grounds that outweigh your interests.

Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

6. How to Exercise Your Rights

To exercise any of the rights listed above, please contact us using the details provided in the “Contact Information” section. In your request, kindly include:

• Your full name and email address (or other identifier we use to recognise you).
• A clear description of the right you wish to invoke.
• Any additional information that will help us verify your identity (e.g., a recent subscription confirmation email).

We will acknowledge receipt of your request within 5 business days and will aim to complete the action within the statutory 30‑day period. If additional time is required due to the complexity of the request, we will inform you of the extension and the reasons for it.

7. Contact Information

If you have questions about this policy, wish to exercise a right, or need further assistance, please contact our Data Protection Officer at:

TopRecipes GDPR Team
Email: gdpr@toprecipes.us
Website: https://toprecipes.us

8. Changes to This Policy

We review this GDPR Compliance Policy regularly and may update it to reflect changes in our practices, legal requirements, or technological developments. Any material changes will be posted on this page with an updated “Last Updated” date. Continued use of the site after such changes constitutes acceptance of the revised policy.

9. International Transfers

TopRecipes does not transfer personal data outside the European Economic Area. All processing takes place on servers located within the United States that have been certified under the EU‑U.S. Data Privacy Framework, providing an adequate level of protection.

10. Complaints

If you believe that our processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority in the EU member state where you reside, work, or where the alleged infringement occurred.