GDPR Compliance Policy

Last Updated: April 03, 2026

Who We Are

Golden Home Recipes (the “Site”) is operated by Golden Home Recipes Ltd., a company registered in the United Kingdom. Our primary contact for data protection matters is [email protected]. By using the Site, you acknowledge that you have read and understood this GDPR Compliance Policy.

What Personal Data We Collect

We collect the following personal data:

Email addresses: When you sign up for newsletters, create an account, or request a recipe PDF, we store your email address.
Cookies: We use first‑party cookies to remember your preferences, session data, and to improve your browsing experience. Third‑party cookies are employed for analytics and advertising purposes (e.g., Google Analytics).
Analytics data: We anonymously track page views, time spent on pages, and navigation paths to improve content quality and site performance.

How We Protect Your Data

We take data protection seriously and implement the following measures:

Encryption: All data transmitted between your browser and our servers is encrypted using TLS 1.3 (HTTPS).
Secure servers: Our hosting environment is protected by industry‑standard firewalls, intrusion detection systems, and regular security audits.
Access controls: Only authorised personnel with a legitimate need to process your data can access it. All staff undergo data protection training.
Retention limits: Personal data is retained only as long as necessary to fulfil the purpose for which it was collected or to comply with legal obligations. Email addresses are stored for up to 5 years after the last interaction unless you request deletion earlier.

Legal Basis for Processing

We process your personal data under two lawful bases:

Consent: By subscribing to our newsletter or creating an account, you give explicit consent for us to store and use your email address and to send you marketing communications.
Legitimate interest: We process cookies and analytics data to improve site functionality, user experience, and content relevance. This processing is necessary for the efficient operation of the Site and is balanced against your privacy rights.

Your GDPR Rights

Under the General Data Protection Regulation (GDPR), you have the following rights with respect to your personal data. We provide icons for each right for quick reference.

Right to Access

Request a copy of any personal data we hold about you.

Right to Rectification

Ask us to correct inaccurate or incomplete data.

Right to Erasure

Request deletion of your personal data where no legitimate reason to keep it.

Right to Restrict Processing

Ask us to limit the use of your data while we verify its accuracy.

Right to Data Portability

Receive your data in a machine‑readable format and transfer it to another controller.

Right to Object

Object to the processing of your data for marketing or profiling purposes.

Right to Withdraw Consent

Withdraw your consent at any time without affecting the lawfulness of processing that relied on consent before withdrawal.

How to Exercise Your Rights

To exercise any of the rights above, please contact us at [email protected]. Include the following information to help us identify your request quickly:

Your full name and any account identifiers (e.g., email address).
The specific right you are exercising (e.g., Right to Erasure).
Any supporting documents that prove your identity if you request deletion or rectification.

Response Time

We will respond to your request within 30 days of receiving it. If the request is complex or we receive multiple requests, we may extend this period by a further 30 days, but we will inform you of the delay and the reasons for it.

Retention and Deletion Policy

Personal data is stored for the shortest time necessary to fulfil the purpose for which it was collected. After the retention period, data is permanently deleted or anonymised. If you request erasure, we will remove your data from all active databases, backups, and third‑party services where possible.

Data Breach Notification

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and will inform affected individuals where a high risk is identified. We will take remedial measures to mitigate the impact and prevent future incidents.

Contact Us

For any questions or concerns about this policy, your personal data, or your GDPR rights, please reach out to us at [email protected]. We appreciate your trust and are committed to safeguarding your privacy.