GDPR & CCPA Privacy Policy

Effective date: November 01, 2025

Who we are

  • Toppy Recipes provides recipe content and resources for home cooks, including Mediterranean and air fryer topics.
  • Contact details and the preferred contact method are available on the site’s contact page.

Personal data we collect

  • Identifiers such as name, email address, IP address, and device or browser information when you interact with the site or contact us.
  • Internet activity data such as page views, referring URLs, approximate geolocation from IP, and interactions with ads and analytics.
  • User‑generated content such as comments, messages, or form submissions you choose to send.

How and why we use data

  • To operate and improve the website, personalize content, and measure performance through analytics.
  • To respond to inquiries, manage subscriptions, and protect against fraud and abuse.
  • To support advertising and affiliate programs that keep content free for users, with appropriate disclosures and controls.

Legal bases for processing (GDPR)

  • Consent for analytics, advertising, and marketing cookies or emails.
  • Legitimate interests for site security, basic analytics, and service improvement, balanced against user rights.
  • Contract or pre‑contract steps when responding to your requests or providing requested services.
  • Legal obligations where necessary to comply with applicable law.

Your rights (GDPR)

  • Access, rectification, erasure, restriction, portability, and objection to processing of your personal data.
  • Withdraw consent at any time for processing based on consent, without affecting prior lawful processing.
  • Lodge a complaint with a supervisory authority if you believe your rights are infringed.

Your rights (CCPA/CPRA)

  • Right to know what personal information is collected, used, or disclosed, and the categories of third parties that receive it.
  • Right to delete personal information, subject to applicable exceptions.
  • Right to opt‑out of the sale or sharing of personal information, and the right to non‑discrimination for exercising your rights.

Data retention and security

  • Personal data are retained only as long as needed for the purposes stated, considering legal and operational requirements.
  • Reasonable security measures are implemented to protect information from unauthorized access or disclosure.

Third‑party sharing and processors

  • Analytics, advertising partners, content delivery services, and affiliate platforms may process limited data to provide services to the site.
  • Where required, controller–processor agreements and appropriate transfer safeguards are used for international transfers.

Cookies and consent

  • Non‑essential cookies (analytics, advertising, personalization) require prior consent, which must be freely given, specific, informed, and unambiguous.
  • Users can accept or reject non‑essential cookies, manage granular preferences, and withdraw consent as easily as given.

How to exercise your rights

  • Use the contact page to submit requests related to access, deletion, correction, or to manage consent preferences, and include sufficient details to verify your identity.
  • A response will be provided within timelines required by applicable law, subject to verification.

Policy updates

  • This Privacy Policy may be updated to reflect changes in practices or legal requirements, and the effective date will be revised accordingly.