Privacy Policy | Recetas Mexas

Recetas Mexas respects your privacy. This policy explains what personal information we collect from readers in Australia, why we collect it, who we share it with, and how you can ask to see it or correct it. It is written to follow the Privacy Act 1988 and the Australian Privacy Principles (APPs), which we recognise as the standard for how personal information is collected, used, disclosed and kept secure. The regulator is the Office of the Australian Information Commissioner (OAIC).

This page is provided for information only and is not legal advice.

1. Who we are

Recetas Mexas is an editorial platform and a directory about authentic Mexican cooking, operated by Edmond Bojalil from Madrid, Spain. We publish recipes, guides and listings; we are not a shop, and we neither take orders nor process payments. For anything about privacy, write to [email protected].

2. What personal information we collect

Account details: the name and email address you give us, and your login.
How you use the site: pages read, searches, interactions, plus browser and device information and your IP address.
Location, only if you allow it: an approximate location from your browser, used to show nearby Mexican grocers and restaurants. You can refuse it and the site still works.
What you post: ratings, comments, suggestions, shopping lists and your favourite recipes.
Business listings: if you claim or submit a business, the contact details you send us for it.

We do not ask for and do not want sensitive information: no health data, no government identifiers, no payment card numbers. We never take a payment on this site, so we hold no card details at all.

3. Why we collect it

To run the platform: your login, your favourites, your shopping list.
To send our newsletter, when you ask for it, and to let you stop it whenever you want.
To measure how the site is used, in aggregate, so we can improve the content (Google Analytics).
To operate affiliate links and to attribute a qualifying purchase. As an Amazon Associate we earn from qualifying purchases.
To keep the site secure and prevent abuse of our forms.
To answer you when you write to us.

We do not sell your personal information, and we do not trade it with data brokers.

4. Choice, and how to change it

We collect personal information only where it is reasonably necessary to run an editorial site and a directory, and we tell you what we collect and why at the point we ask for it. Creating an account, subscribing to the newsletter and allowing your location are all optional and separate choices. Analytics and affiliate cookies are controlled by the cookie banner and you can change your answer at any time.

You can browse recipes, guides and listings without telling us who you are. If you would rather not be identified at all, do not open an account: write to us and we will answer without one.

5. Cookies, analytics and affiliate links

We use cookies and similar technology for the parts of the site that cannot work without them, for aggregate analytics (Google Analytics) and for affiliate attribution. Our Cookie Notice lists them category by category and explains how to refuse the ones that are not essential.

6. Who we share it with

We share personal information only with the providers that make the service run, and only with what they need:

Supabase — database and authentication.
Cloudflare R2 — image storage.
Vercel — hosting.
Resend — transactional email.
Google Analytics — aggregate analytics.
Amazon Associates — affiliate attribution.

We may also disclose information where the law requires it, or to protect our rights or the safety of our readers.

7. Information handled outside Australia

We operate from Spain, and the providers above store and process information in the European Union and the United States. That means your personal information is disclosed overseas and, while it is there, may be accessible to the courts and authorities of that country under its own law. Before disclosing information overseas we take reasonable steps to satisfy ourselves that the recipient is bound to comparable protection, as the Australian Privacy Principles require. If you would rather not have your information handled overseas, please do not open an account.

8. Your rights

Access: you can ask us what personal information we hold about you.
Correction: you can ask us to correct anything inaccurate, out of date or incomplete.
Deletion: you can ask us to delete your account and the content attached to it.
Anonymity: you can read the site without an account and without telling us who you are.
An explanation: if we refuse a request, we will tell you why in writing and how to complain.

Write to [email protected]. We will confirm that the request is really yours before we act on it, and we will answer within a reasonable time. We do not charge you for asking for access.

9. Keeping it, and keeping it safe

We keep personal information while your account is open and afterwards only for as long as we need it — to answer a legal obligation, to settle a dispute or to keep a record of your consent. After that we delete it or strip it of anything that identifies you. Traffic to the site is encrypted, access to the database is restricted, and we tell you if a breach puts you at real risk of serious harm.

10. Children

The site is not aimed at children under 13 and we do not knowingly collect their personal information. If you believe a child has given us information, write to us and we will remove it.

11. Changes to this policy

We may update this policy. The date at the top always shows the current version, and we will flag a material change on the site or by email to registered readers.

12. Contact, and how to complain

Questions about this policy or about your personal information: [email protected]. Please come to us first — it is usually the fastest fix, and the Office of the Australian Information Commissioner (OAIC) will normally expect you to have done so. If you are not satisfied with our answer, you can complain to the OAIC.