Cookbiterepeat GDPR Compliance Policy

Last Updated: April 03, 2026

At Cookbiterepeat (the “Company”, “we”, “our”, “us”), we are committed to protecting your privacy and ensuring that your personal data is processed in a lawful, fair, and transparent manner. This policy explains how we collect, use, share, and protect your personal data in accordance with the European Union’s General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018.

1. Data We Collect

When you interact with our website, we collect the following types of personal data:

Email addresses – when you sign up for newsletters, create an account, or contact us.
Cookies and similar technologies – to remember your preferences, improve site performance, and personalize content.
Analytics data – such as IP addresses, device information, and browsing behaviour, collected via Google Analytics and Matomo to understand how visitors use our site.

We do not collect any sensitive personal data (e.g., race, religion, health) unless you voluntarily provide it in a specific context (e.g., a medical recipe request).

2. How We Protect Your Data

We employ a multi‑layered security strategy to safeguard your data:

SSL/TLS Encryption – All data transmitted between your browser and our servers is encrypted using industry‑standard HTTPS.
Secure Servers – Our hosting environment is protected by firewalls, intrusion detection systems, and regular vulnerability scans.
Access Controls – Only authorised staff with a legitimate need can access personal data, and all access is logged.
Data Retention Limits – Personal data is retained only as long as necessary to fulfil the purposes for which it was collected, or as required by law.

3. Legal Basis for Processing

We rely on the following lawful bases to process your personal data:

Consent – You explicitly consent when you sign up for newsletters, create an account, or opt‑in to marketing communications.
Legitimate Interest – We process data that is necessary to improve our services, provide a better user experience, and comply with legal obligations.

We provide clear notices and opt‑in options wherever consent is required. You can withdraw consent at any time by following the instructions in the “Right to Withdraw Consent” section below.

4. Your GDPR Rights

You have several rights under the GDPR, which we honour promptly and transparently. Below you’ll find a summary of each right, an icon for quick reference, and instructions on how to exercise it.

Right to Access

Request a copy of the personal data we hold about you.

Right to Rectification

Ask us to correct inaccurate or incomplete data.

Right to Erasure

Request deletion of your personal data when it is no longer needed.

Right to Restrict Processing

Ask us to limit how we use your data (e.g., for a period of time).

Right to Data Portability

Obtain your data in a machine‑readable format and transfer it to another controller.

Right to Object

Object to the processing of your data for direct marketing or profiling.

Right to Withdraw Consent

Withdraw any consent you have given at any time.

5. How to Exercise Your Rights

To exercise any of the rights listed above, please send a written request to:

Contact: [email protected]
Address: 1 Recipe Lane, London, UK, W1A 1AA

Your request should include:

Your full name and contact details.
A clear statement of the right you are exercising.
Any supporting information that helps us identify the data (e.g., account ID, email address).

We will respond within 30 days of receiving your request. If we need more time to verify your identity or to investigate the request, we will let you know and provide an estimate of the additional time required.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Typical retention periods are:

Email addresses – 2 years after the last interaction, unless you opt‑out earlier.
Cookies – 6 months for session cookies, 12 months for persistent cookies.
Analytics data – aggregated and anonymised data is retained for 12 months to improve site performance.

After the retention period, data is securely deleted or anonymised.

7. Data Sharing and Third‑Party Processors

We may share your personal data with third parties only under the following circumstances:

Service providers (e.g., email marketing platforms, analytics providers) that assist us in delivering our services. We require them to implement appropriate technical and organisational measures.
Legal or regulatory authorities, when required by law.
Business transfers (merger, acquisition), where your data is transferred to the new entity under the same GDPR obligations.

We conduct due diligence to ensure all processors meet GDPR standards and provide data protection agreements.

8. Changes to This Policy

We may update this policy from time to time to reflect changes in our data processing practices or legal requirements. Any updates will be posted on this page with a revised “Last Updated” date. We encourage you to review the policy periodically.

9. Contact Us

If you have any questions about this policy, or if you wish to exercise your GDPR rights, please contact us at:

Email: [email protected]
Postal Address: 1 Recipe Lane, London, UK, W1A 1AA

We look forward to hearing from you and ensuring your personal data is handled with the utmost respect and security.