ViralRecipes GDPR Compliance Policy

At ViralRecipes (https://viralrecipes.us) we are committed to protecting the personal data of our users and visitors. This policy explains how we collect, use, store, and safeguard your information in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR). If you have any questions, please contact us at gdpr@viralrecipes.us.

1. Data We Collect

We process the following categories of personal data:

Email addresses – collected when you subscribe to our newsletter, request a recipe, or contact us.
Cookies and similar tracking technologies – used to remember your preferences, analyse site usage, and deliver personalised content.
Analytics data – aggregated information such as IP address, browser type, device, and pages visited, collected via Google Analytics and our own server logs.

2. Legal Basis for Processing

We rely on the following lawful bases to process your data:

Consent (Article 6(1)(a)) – when you voluntarily provide your email address or accept cookies, you give us explicit permission to use that data for the purposes described.
Legitimate interests (Article 6(1)(f)) – we process analytics data and use cookies to improve site performance, security, and user experience, which are essential for the operation of the service.

3. How We Protect Your Data

Security is a top priority. We implement a combination of technical and organisational measures, including:

SSL/TLS encryption – all data transmitted between your browser and our servers is encrypted using HTTPS.
Secure servers – our hosting environment is hardened, regularly patched, and monitored for unauthorised access.
Limited retention periods – email addresses are kept only as long as you remain subscribed or until you request deletion. Analytics data is retained for a maximum of 24 months in an aggregated, non‑identifiable form.
Access controls – only authorised personnel with a legitimate need can access personal data, and they are bound by confidentiality obligations.

4. Your GDPR Rights

Under the GDPR you enjoy a series of rights concerning your personal data. Each right is illustrated with a Bootstrap Icon for quick visual reference.

Right to Access

You may request a copy of the personal data we hold about you, together with information about how we process it.

Right to Rectification

If any of your data is inaccurate or incomplete, you have the right to have it corrected without undue delay.

Right to Erasure (Right to be Forgotten)

You may ask us to delete your personal data when it is no longer necessary for the purposes for which it was collected, or when you withdraw consent.

Right to Restrict Processing

You can request that we limit the processing of your data while we verify its accuracy or while a dispute is being resolved.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine‑readable format and to transmit it to another controller.

Right to Object

You may object, on grounds relating to your particular situation, to the processing of your data for direct marketing, scientific/historical research, or statistical purposes.

Right to Withdraw Consent

Whenever processing is based on consent, you may withdraw that consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

5. How to Exercise Your Rights

To exercise any of the rights listed above, please follow these steps:

Send a written request to gdpr@viralrecipes.us. Include your full name, a valid email address, and a clear description of the right you wish to invoke.
Provide proof of identity (e.g., a scanned government‑issued ID) to help us verify that the request is legitimate. This step is required only when we have reasonable doubts about the requester's identity.
If you are requesting erasure or restriction, please specify the data you want removed or restricted and the reason for the request.
We will acknowledge receipt of your request within 5 business days and will act on it without undue delay.

6. Response Time

In accordance with Article 12 of the GDPR, we will respond to all valid requests within 30 calendar days. If a request is particularly complex or we receive a high volume of requests, we may extend the deadline by an additional two months, but we will inform you of the extension and the reasons for it within the original 30‑day period.

7. International Transfers

All processing takes place on servers located in the United States. We do not transfer your personal data to third countries outside the European Economic Area (EEA) unless we have appropriate safeguards (e.g., Standard Contractual Clauses) in place.

8. Changes to This Policy

We review this policy regularly and may update it to reflect changes in our practices or legal requirements. Any material changes will be posted on this page with an updated “Last Updated” date.

Contact Information: If you have any questions about this policy, your data, or your rights, please email us at gdpr@viralrecipes.us.

Last Updated: December 01, 2025