GDPR Compliance Policy

Last Updated: April 03, 2026

SimplyMommeals (the “Company”) is committed to protecting the privacy and personal data of our visitors and users. This policy explains how we collect, use, store, and share your data in compliance with the General Data Protection Regulation (GDPR) and other applicable data‑protection laws. By accessing or using our website (https://simplymommeals.com), you acknowledge that you have read, understood, and agreed to the terms set out below.

1. Data We Collect

Email addresses: We collect your email address when you subscribe to our newsletter, sign up for updates, or register for a recipe. This data is used exclusively for communication and marketing purposes.
Cookies: We use first‑party cookies to remember your preferences, improve your browsing experience, and provide analytics. These cookies are essential for site functionality and are set automatically.
Analytics: We use Google Analytics (or a similar service) to gather aggregate, anonymous data about how visitors use our site. This helps us improve content, design, and performance.

2. Legal Basis for Processing

Consent: When you voluntarily provide your email address or opt‑in to our newsletters, we rely on your explicit consent to process that data for the purposes stated. Consent can be withdrawn at any time.

Legitimate Interest: We process data collected through cookies and analytics on the basis of legitimate interest to improve the usability and performance of our website. We ensure that this interest does not override your fundamental rights and freedoms.

3. How We Protect Your Data

SSL Encryption: All data transmitted between your browser and our servers is protected by SSL/TLS encryption (HTTPS).
Secure Servers: We host our data on secure, ISO‑27001‑certified servers with regular security audits.
Limited Retention: Personal data is retained only as long as necessary to fulfill the purposes for which it was collected or as required by law. For example, email addresses are deleted after 12 months of inactivity.
Access Controls: Only authorized personnel with a legitimate business need can access personal data. All staff receive regular privacy training.

4. Your GDPR Rights

Under the GDPR, you have the following rights regarding your personal data. Each right is illustrated with an icon for quick reference.

Right to Access

You may request a copy of any personal data the Company holds about you. This includes the purpose of processing, categories of data, recipients, and data retention periods.

Right to Rectification

If any of your personal data is inaccurate or incomplete, you can request correction or completion.

Right to Erasure

You can request the deletion of your personal data under certain conditions, such as when the data is no longer needed for the purpose it was collected.

Right to Restrict Processing

When you contest the accuracy of your data or the legality of processing, we may restrict its use until the issue is resolved.

Right to Data Portability

You can obtain and reuse your personal data for your own purposes across different services.

Right to Object

You may object to processing for direct marketing, profiling, or other legitimate interests, and we will cease processing unless we can demonstrate compelling legitimate grounds.

Right to Withdraw Consent

Consent can be withdrawn at any time. Withdrawal does not affect the lawfulness of processing based on consent before withdrawal.

5. How to Exercise Your Rights

To exercise any of the rights above, please contact us at [email protected]. Provide the following information to help us verify your identity and process your request:

Your full name and email address.
A brief description of the request (e.g., “I wish to delete my email address”).
Any supporting documentation that verifies your identity (e.g., a copy of a driver’s licence). This step is optional but speeds up the process.

All legitimate requests will be processed within 30 days, as required by GDPR. If additional time is needed, we will inform you of the delay and provide a reason.

6. Changes to This Policy

We may update this policy from time to time. Any changes will be posted on this page with an updated “Last Updated” date. We encourage you to review this policy periodically to stay informed about how we protect your data.

7. Contact Information

Data Protection Officer (DPO): [email protected]

If you have any questions about this policy, your data, or your rights, feel free to reach out to our DPO. We are committed to ensuring that your personal data is handled with the utmost care and respect.