DisclaimerTerms Of UseGDPR PolicyCookie Policy

lazychefmagic

GDPR Policy

Last updated: 5 July 2025

1. Introduction

This General Data Protection Regulation (“GDPR”) Policy explains how Lazy Chef Magic (“we,” “our,” or “us”) processes personal data of visitors located in the European Economic Area (EEA), the United Kingdom (UK), and Switzerland when they access lazychefmagic.com (the “Site”). It supplements our [Privacy Policy] (link will appear once published).

2. Data Controller

  • Controller: Amanda Taylor, owner of Lazy Chef Magic

  • Contact: contact@lazychefmagic.com

  • Address: 155 N 1st Ave, Hillsboro, OR 97124, USA

3. Personal Data We Collect

Category Examples Source
Identification & Contact Name, email address (newsletter signup, comments) Provided by you
Usage Data IP address, browser type, pages visited, time on page Automated (cookies, log files)
Marketing Preferences Opt-in/opt-out choices Provided by you
Recipe Interaction Favorites, ratings, saved ingredient units Provided by you / cookies

We do not intentionally collect special categories of data (e.g., health, biometric, or religious information).

4. Legal Bases for Processing

We rely on one or more of the following legal grounds under Article 6 GDPR:

  1. Consent (Art 6 (1)(a))—e.g., email newsletter, non-essential cookies.

  2. Contract (Art 6 (1)(b))—to deliver requested content or services.

  3. Legitimate Interests (Art 6 (1)(f))—website analytics, fraud prevention, personalized content (balanced against your rights).

  4. Legal Obligation (Art 6 (1)(c))—record-keeping, tax compliance.

5. How We Use Your Data

  • Send requested newsletters or recipe updates.

  • Enable commenting, favorites, and saved recipe settings.

  • Analyze traffic and improve Site performance.

  • Provide relevant advertisements (via ad partners such as Mediavine).

  • Respond to inquiries or exercise/defend legal claims.

6. Data Sharing & Third-Party Processors

We share data only when necessary:

Purpose Recipient Safeguards
Email delivery MailerLite (EU SCCs in place) Standard Contractual Clauses (SCCs)
Analytics Google Analytics IP anonymization enabled
Advertising Mediavine, Google AdSense Consent Management Platform (CMP)
Cloud hosting Cloudflare, DigitalOcean SCCs / GDPR-compliant DPA

Each processor is contractually bound to process data only on our instructions and in compliance with GDPR.

7. International Transfers

We are based in the United States. When we transfer personal data outside the EEA/UK/Switzerland, we rely on:

  • Adequacy decisions (where applicable)

  • SCCs approved by the European Commission

  • UK International Data Transfer Addendum

8. Data Retention

We keep personal data only as long as necessary for the purposes outlined or to comply with legal obligations:

  • Newsletter subscription: until you unsubscribe

  • Comment data: indefinitely (to preserve conversation history)

  • Analytics data: 14 months (Google Analytics retention setting)

Back-ups are securely stored and deleted on a rolling 30-day schedule.

9. Your GDPR Rights

You have the right to:

  1. Access — obtain a copy of your personal data

  2. Rectify — correct inaccurate or incomplete data

  3. Erase (“right to be forgotten”)

  4. Restrict processing

  5. Data portability

  6. Object to processing based on legitimate interests or direct marketing

  7. Withdraw consent at any time (does not affect prior lawful processing)

  8. Lodge a complaint with your local supervisory authority

How to Exercise Your Rights
Email contact@lazychefmagic.com with “GDPR Request” in the subject line. We may require proof of identity and will respond within 30 days.

10. Automated Decision-Making

We do not use personal data for automated decision-making or profiling that produces legal or similarly significant effects.

11. Cookies & Tracking Technologies

Non-essential cookies are placed only after consent via our cookie banner. For details and management instructions, see our Cookie Policy.

12. Children’s Privacy

The Site is not directed to children under 16. We do not knowingly collect personal data from minors. If you believe we have done so inadvertently, please contact us for prompt deletion.

13. Data Security

We implement technical and organizational measures, including HTTPS encryption, regular security patches, limited access controls, and secure password policies, to safeguard your data.

14. Changes to This GDPR Policy

We may update this policy periodically. Updates will appear on this page with a revised “Last updated” date. Material changes will be announced via a Site notice or email.

15. Contact Us

For GDPR-related questions, please contact:

Data Protection Officer
Amanda Taylor (Owner)
Email: contact@lazychefmagic.com
Address: 155 N 1st Ave, Hillsboro, OR 97124, USA