Skip to main content

Privacy Policy

Last updated: February 2026

1. Data Controller

  • Owner: Edmond Bojalil Zacarías
  • Trading name: Recetas Mexas
  • Email: contacto@recetasmexas.com
  • Website: https://recetasmexas.com
  • Purpose: User management, content personalisation and platform services

2. Data We Collect

We collect the following personal data:

  • Registration data: name, email, encrypted password
  • Usage data: saved recipes, shopping list, preferences, ratings
  • Technical data: IP address (anonymised), browser type, cookies

2.1 Behavioural and Browsing Data

To provide you with a personalised experience and relevant recommendations, we collect information about your interaction with the platform:

  • Recipes visited: which recipes you view and for how long
  • Searches performed: search terms and filters used
  • Interactions: ratings, favourites, clicks on shops and restaurants
  • Inferred preferences: favourite categories, preferred difficulty level, culinary regions of interest

Note: IP addresses are stored in anonymised form (hashed) and do not allow us to identify you personally. This information is used solely to prevent abuse and improve security.

3. Purpose of Processing

We use your data to:

  • Service provision: allow you to access recipes, save favourites and manage your shopping list
  • Personalisation: offer you recipe, shop and restaurant recommendations based on your preferences
  • Service improvement: analyse aggregated usage patterns to improve the platform
  • Rewards programme: manage points and benefits if you participate in our loyalty programme
  • Communications: send you relevant service information (you can opt out from your profile)

4. Rewards Programme

Recetas Mexas offers a rewards programme that allows you to earn points through your contributions to the community:

  • Rating recipes
  • Writing reviews for restaurants and shops
  • Uploading photos of your dishes
  • Active participation on the platform

Accumulated points can be redeemed for discounts at affiliated shops and restaurants. To manage this programme, we store your points history, transactions and redemptions.

5. Legal Basis for Processing

  • Consent: by registering and accepting these conditions
  • Contractual performance: to provide the platform services
  • Legitimate interest: to improve our services, personalise your experience and ensure security

6. Data Recipients

Your data may be shared with:

  • Supabase: database hosting and management (EU servers)
  • Stripe: payment processing (PCI DSS compliant)
  • Vercel: website hosting

We do not sell or share your data with third parties for advertising purposes.

Affiliated shops and restaurants: If you redeem a reward, we will share only the data necessary to validate the redemption (redemption code, discount amount). We never share your browsing history or preferences with third parties.

7. Your Rights (UK GDPR)

Under the UK General Data Protection Regulation (UK GDPR), you have the right to:

  • Access: request a copy of your personal data
  • Rectification: correct inaccurate data
  • Erasure: request the deletion of your data
  • Portability: receive your data in a structured format
  • Objection: object to certain processing, including personalisation
  • Restriction: request the restriction of processing

To exercise these rights, contact us at contacto@recetasmexas.com.

Opt out of personalisation: You may request that we do not use your behavioural data to personalise your experience. In that case, you will see generic content instead of personalised recommendations.

8. Data Retention

We retain your data for as long as your account remains active. Behavioural data is retained for 24 months from collection for personalisation purposes.

If you request account deletion, we will delete your data within a maximum of 30 days, unless we are legally required to retain it. Anonymised and aggregated data may be retained for statistical purposes.

9. Security

We implement technical and organisational measures to protect your data, including encryption in transit (HTTPS/TLS), password encryption (bcrypt), IP anonymisation and role-based access control.

10. Changes to This Policy

We may update this privacy policy periodically. We will notify you of any significant changes via your registered email or through a notice on the platform.

11. Contact

If you have questions about this privacy policy or how we handle your data, please contact us:

  • Email: contacto@recetasmexas.com
  • Supervisory authority: If you believe your rights have been infringed, you may lodge a complaint with the Information Commissioner's Office (ICO) in the United Kingdom, or the Agencia Española de Protección de Datos (AEPD) in Spain.