GDPR Policy

Last updated: May 26, 2025

This GDPR Privacy Policy describes how Old Plain Recipes (“we”, “us”, or “our”) processes and protects your personal data when you use our website: https://www.oldplainrecipes.com, in accordance with the General Data Protection Regulation (GDPR).

If you are a resident of the European Economic Area (EEA), this policy outlines your rights and how we comply with our legal obligations.

Who We Are

We determine the purposes and methods of processing your personal data and are therefore considered a Data Controller under GDPR.

What Personal Data We Collect

We may collect and process the following data:

  • Identity Data: First and last name
  • Contact Data: Email address
  • Technical Data: IP address, browser type/version, time zone, location, operating system, device type
  • Usage Data: How you interact with our site, pages visited, links clicked
  • Marketing Data: Your preferences in receiving newsletters or promotional offers

We also use Cookies and similar tracking technologies. See our Cookie Policy for more details.

Legal Basis for Processing

We process your personal data lawfully under the following GDPR bases:

  • Consent: When you explicitly agree (e.g., for newsletters or marketing).
  • Contract: When processing is necessary to fulfill a service you requested.
  • Legal Obligation: When we are legally required to process your data.
  • Legitimate Interest: When processing is necessary for our business (e.g., analytics), provided your rights don’t override those interests.

How We Use Your Data

We use your data to:

  • Provide and maintain our website
  • Analyze usage for improvement
  • Communicate with you
  • Comply with legal obligations
  • Serve personalized content or advertising (e.g., Google AdSense)

Your GDPR Rights

If you’re in the EEA, you have the following rights:

  1. Right to Access – Know what data we have about you.
  2. Right to Rectification – Correct inaccurate or incomplete data.
  3. Right to Erasure – Ask us to delete your data (“right to be forgotten”).
  4. Right to Restrict Processing – Limit how we use your data.
  5. Right to Data Portability – Request your data in a machine-readable format.
  6. Right to Object – Object to processing, especially for marketing purposes.
  7. Right to Withdraw Consent – If we process based on consent, you can withdraw at any time.
  8. Right to Lodge a Complaint – With your local Data Protection Authority.

📧 To exercise these rights, contact us at: [email protected]

International Transfers

Your data may be processed outside the EEA, including in Canada, where we are based. We ensure appropriate safeguards are in place (e.g., standard contractual clauses) to protect your data.

Data Retention

We retain personal data only as long as necessary for the purposes stated in this policy, or as required by law.

Third-Party Services

We may share your data with trusted providers (like Google AdSense, analytics tools, or email services) for functionality, analytics, or marketing, in line with GDPR requirements. Each third party is required to maintain appropriate data protection.

Children’s Privacy

Our website is not intended for children under the age of 13, and we do not knowingly collect data from them.

Updates to This Policy

We may update this GDPR Privacy Policy from time to time. We will notify users of changes and update the “Last updated” date at the top of this policy.

Contact Us

If you have questions or want to exercise your rights: