GDPR Compliance Policy – MagicMealRecipes

Last Updated: April 03, 2026

1. Introduction

MagicMealRecipes (“we”, “our”, “us”) operates the website https://magicmealrecipes.com (the “Site”). We are committed to protecting your personal data and complying with the General Data Protection Regulation (GDPR) and other applicable privacy laws. This policy explains the types of personal data we collect, the purposes for which we process it, the legal bases that justify our processing activities, and your rights as a data subject. If you have any questions or concerns, please contact us at [email protected].

2. Personal Data We Collect

We collect the following categories of personal data:

Email addresses – When you subscribe to our newsletter, create an account, or contact us through the Site.
Cookies and similar technologies – We use first‑party cookies to provide core functionality (e.g., session management) and third‑party cookies for analytics and advertising.
Analytics data – We collect aggregated, anonymised data via Google Analytics and Matomo to understand user behaviour and improve the Site.
Contact form submissions – When you fill out a contact form, we collect your name, email address, subject, and message content.
Account information – If you create an account, we store your username, password hash, profile picture, and preferences.

3. Legal Basis for Processing

We rely on the following lawful bases to process your personal data:

Consent – For marketing emails, newsletters, and the use of certain third‑party cookies. Consent is freely given, specific, informed, and unambiguous.
Legitimate interest – For the operation of the Site, ensuring security, preventing fraud, and improving user experience through analytics.
Contractual necessity – For account creation, order fulfilment, and communication related to your subscription.
Legal obligation – For compliance with statutory requirements, such as retaining certain records for tax purposes.

4. Data Security Measures

We implement robust technical and organisational measures to protect your personal data:

SSL/TLS Encryption – All data transmitted between your browser and our servers is encrypted with HTTPS.
Secure Server Infrastructure – We host our services on reputable cloud providers with ISO 27001 certification and regular penetration testing.
Access Controls – Only authorised personnel with a legitimate business need can access personal data. Multi‑factor authentication is enforced for administrative accounts.
Data Minimisation and Retention – We store personal data only for as long as necessary to fulfil the purposes outlined in this policy or to meet legal obligations.
Regular Backups – Encrypted backups are performed daily and stored in geographically separate locations.

5. Your GDPR Rights

Under the GDPR, you have the following rights regarding your personal data. Each right is illustrated with a Bootstrap 5 icon for quick reference.

Right to Access

You can request a copy of the personal data we hold about you, along with information about the purposes of processing, the categories of data, recipients, and the period of storage. Submit your request to [email protected].

Right to Rectification

If any of your personal data is inaccurate or incomplete, you may ask us to correct it. Provide the corrected information via email or through your account settings.

Right to Erasure (Right to be Forgotten)

You may request the deletion of your personal data, subject to legal retention obligations. Contact us at [email protected] to initiate a deletion request.

Right to Restrict Processing

You can ask us to limit the processing of your data when you contest its accuracy or the legality of the processing. We will pause processing while the issue is investigated.

Right to Data Portability

You may receive your personal data in a structured, commonly used, and machine‑readable format, or request that we transfer it directly to another controller if feasible. Email us to start the process.

Right to Object

You can object to the processing of your data for direct marketing or profiling purposes. Upon objection, we will cease such processing unless we have a compelling legitimate interest that overrides your rights.

Right to Withdraw Consent

If you have given us consent to process your data, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing based on consent prior to withdrawal.

6. How to Exercise Your Rights

To exercise any of the rights above, please contact us at [email protected] with the following information:

Your full name and contact details.
A description of the request (e.g., “I want to delete my email address”).
Any evidence that supports your request (e.g., screenshots, account IDs).

We will respond to your request within 30 days. If you need a more detailed response or if we require additional information to verify your identity, we may extend this period by a further 15 days, and we will notify you of the extension.

7. Retention Periods

We retain personal data for the period necessary to fulfil the purposes for which it was collected, including:

Email addresses and account data – until account deletion or until you withdraw consent.
Cookies – for 90 days, unless you delete them earlier.
Analytics data – aggregated and anonymised for up to 12 months.
Contact form submissions – retained for 24 months for dispute resolution and compliance purposes.

8. International Data Transfers

We may transfer personal data outside the European Economic Area (EEA) for processing by third‑party service providers (e.g., hosting, analytics). These transfers are subject to appropriate safeguards, such as Standard Contractual Clauses and adequacy decisions by the European Commission. We ensure that any recipient of your data provides a level of protection that meets GDPR requirements.

9. Contact Information

For any questions, complaints, or to exercise your rights, please reach out to our Data Protection Officer:

GDPR Contact: [email protected]

We reserve the right to update this policy from time to time. Any changes will be posted on this page with an updated “Last Updated” date. Your continued use of the Site after such changes constitutes your acceptance of the new terms.