GDPR Policy

Last Updated: February 26, 2025

Table of Contents

Introduction

At RecipesInsight.com (“we,” “our,” or “us”), we are committed to protecting the privacy and rights of our users, particularly those in the European Economic Area (EEA). This GDPR Policy explains how we collect, use, store, and protect personal data in accordance with the General Data Protection Regulation (GDPR).

Data Controller

For the purposes of the GDPR, RecipesInsight.com is the data controller of personal data collected through our website. You can contact us at:

Email: [email protected]
Phone: +1 (305) 234-4340
Address: 1641 Water Street, Concord, CA 94520, USA

Personal Data We Collect

We may collect the following personal data from users of our website:

Identity Data: First name, last name, username or similar identifier
Contact Data: Email address, telephone number, address
Technical Data: Internet protocol (IP) address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform
Usage Data: Information about how you use our website, products, and services
Profile Data: Your username and password, purchases or orders made by you, your interests, preferences, feedback, and survey responses
Marketing and Communications Data: Your preferences in receiving marketing from us and our third parties and your communication preferences

Legal Basis for Processing

We process your personal data on the following legal bases:

Consent: Where you have given clear consent for us to process your personal data for a specific purpose
Contract: Where processing is necessary for the performance of a contract with you
Legitimate Interests: Where processing is necessary for our legitimate interests, as long as these interests do not override your fundamental rights and freedoms
Legal Obligation: Where processing is necessary for compliance with a legal obligation

Your Rights Under GDPR

Under the GDPR, you have the following rights regarding your personal data:

Right to Access: You have the right to request copies of your personal data
Right to Rectification: You have the right to request that we correct any inaccurate personal data
Right to Erasure: You have the right to request that we delete your personal data
Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data
Right to Data Portability: You have the right to request that we transfer your personal data to another organization or directly to you
Right to Object: You have the right to object to our processing of your personal data
Rights Related to Automated Decision Making: You have rights related to automated decision making, including profiling

To exercise any of these rights, please contact us using the information provided in the “Data Controller” section above.

Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process the data, and applicable legal requirements.

Data Security

We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know.

International Transfers

We may transfer your personal data to countries outside the EEA. Whenever we transfer your personal data out of the EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission
Where we use certain service providers, we may use specific contracts approved by the European Commission which give personal data the same protection it has in Europe
Where we use providers based in the US, we may transfer data to them if they are part of the Privacy Shield which requires them to provide similar protection to personal data shared between Europe and the US

Data Breach Procedures

In the case of a personal data breach, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, where feasible. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you without undue delay.

Changes to This GDPR Policy

We may update this GDPR Policy from time to time. We will notify you of any changes by posting the new GDPR Policy on this page and updating the “Last Updated” date.

Contact Us

If you have any questions about this GDPR Policy or our data practices, please contact us at: