This Privacy Policy explains how www.hellofreshcooking.com collects, uses, shares, and safeguards personal information when visitors browse vegetarian recipe content, interact with features (comments, forms, newsletters), or engage with analytics and advertising technologies on the site. The policy reflects requirements under the GDPR’s lawful bases for processing, California’s CCPA/CPRA consumer rights, and consent obligations for cookies and tags used in the EEA, UK, and Switzerland.oag.ca+2
Effective date: [09 30, 2025]
Contact: [info@hellofreshcooking.com]
Scope
This policy applies to personal information collected online through www.hellofreshcooking.com and associated pages that reference this notice, including recipe browsing, comments, contact submissions, and newsletter sign-ups. If regional laws apply (for example, GDPR in the EEA/UK/CH and CCPA/CPRA in California), the rights and choices described below are provided to eligible residents.gdpr-info+1
Information Collected
- Information provided by visitors: names, email addresses, profile details, message content submitted via forms, comments, or recipe submissions as applicable to site features.oag.ca
- Usage and device data: IP address, device identifiers, pages viewed, session duration, referring URLs, and interactions for security, performance, and content improvement, potentially via analytics platforms.google
- Cookies and similar technologies: small files or identifiers set by the site or partners for essentials (security, core functions), analytics/measurement, and advertising where used, subject to consent where required.google
- Sensitive data: the site does not seek to collect sensitive personal information, and any such processing would be limited and disclosed with appropriate legal basis and choices, including the right to limit in California.oag.ca
How Information Is Used
- To operate and provide content, features, and services such as displaying vegetarian recipes, managing accounts or comments, handling contact requests, and sending opted‑in newsletters.oag.ca
- To measure and improve site performance, content relevance, and user experience, including aggregated analytics and troubleshooting.google
- To comply with legal obligations, enforce policies, and maintain the security and integrity of services.gdpr-info+1
- If ad technology is used, to support non‑personalized or personalized advertising in jurisdictions where lawful and appropriately consented, including measurement as required by applicable law and partner policies.google
Legal Bases (GDPR/UK GDPR where applicable)
Processing occurs only when at least one lawful basis applies: consent, contract performance, legal obligation, vital interests, public task, or legitimate interests balanced against data subject rights. Where consent is required (for example, for certain cookies or personalized ads in the EEA/UK/CH), consent is obtained before setting non‑essential tags and can be withdrawn at any time through available controls.gdpr-info+1
Cookies and Consent
Where required by law (e.g., under GDPR/ePrivacy/UK PECR), consent is sought before setting non‑essential cookies or using local storage/identifiers for analytics or advertising, and clear disclosures identify each party receiving personal data via tags and SDKs. A consent banner or consent management platform (CMP) is presented for EEA/UK/CH traffic, with robust disclosures, equal-ease withdrawal, and retention of consent records as required by partner policies and local law.google
Analytics and Advertising
If Google tags or similar technologies are used, disclosures identify Google and other parties that may receive data, and consent signals are passed according to EU User Consent Policy expectations for EEA traffic (for example, via Consent Mode or TCF where implemented). Advertising and measurement may require consent in the EEA/UK/CH and will be limited or disabled where consent is not provided or where law mandates non‑personalized approaches.google
Sharing of Information
Personal information may be shared with service providers who process data on behalf of www.hellofreshcooking.comunder appropriate contracts, including hosting, analytics, email delivery, moderation, or security vendors. If advertising or measurement partners are used, they are identified in consent and privacy disclosures, with purposes and controls described consistent with applicable law and Google’s disclosure expectations.oag.ca+1
Retention
Personal information is retained only as long as necessary for the purposes described, including legal, accounting, or reporting requirements, after which data is deleted or anonymized according to documented retention schedules consistent with transparency requirements. Retention of cookies and local storage follows declared durations in the cookie notice and consent interface, with updates when purposes change .oag.ca
Data Subject and Consumer Rights
- EEA/UK/CH (GDPR/UK GDPR): residents may have rights to access, rectify, erase, restrict, object, and port their data, and to withdraw consent without affecting prior lawful processing, subject to legal limits and verification.gdpr-info
- California (CCPA/CPRA): residents have the right to know, delete, correct, opt‑out of sale or sharing (including via Global Privacy Control where honored), limit the use/disclosure of sensitive personal information, and be free from discrimination for exercising rights, with required notices and request methods provided.oag.ca
- Requests: eligible residents can submit rights requests via [info@hellofreshcooking.com] or designated forms; identity verification may be required, and responses are provided within statutory timeframes, subject to permitted extensions.oag.ca
“Do Not Sell or Share” and Sensitive Personal Information (California)
If the site sells or shares personal information for cross‑context behavioral advertising, a “Do Not Sell or Share My Personal Information” link will be provided and honored, including user-enabled global privacy controls where applicable. If sensitive personal information is processed, a mechanism to limit its use and disclosure will be provided consistent with California law and regulations.oag.ca
Children’s Privacy
The site is intended for a general audience focused on vegetarian recipes and is not knowingly directed to children under 13, and it does not knowingly sell or share personal information of minors. If minors under 16 are identified as California residents, any sale of personal information would require an affirmative opt‑in (parental consent under 13, or the minor’s consent if 13–15), and requests to revoke consent are honored.oag.ca
International Transfers
Where personal information is transferred across borders (for example, to service providers outside a visitor’s home country), appropriate safeguards are applied and described, consistent with applicable data protection requirements and partner policies.gdpr-info+1
Security
Reasonable technical and organizational measures are implemented to protect personal information from unauthorized access, disclosure, alteration, or destruction, acknowledging that no method of transmission or storage is completely secure.oag.ca
Visitor Choices and Controls
- Consent management: visitors in the EEA/UK/CH receive a choice to accept, reject, or tailor non‑essential cookies and tags, and can withdraw consent through the banner or preference center at any time.google
- Browser/device settings: visitors can block or delete cookies and adjust identifiers through browsers and devices, understanding this may affect site functionality in ways disclosed in the cookie notice .
- Communications: opt‑outs for newsletters or marketing communications are honored through provided mechanisms and reflected across systems as required by law.oag.ca
Updates to This Policy
This policy may be updated periodically to reflect changes in practices, technologies, or legal requirements, and the “Effective date” will be revised accordingly with material changes highlighted where legally required. Continued use of the site after updates indicates acknowledgment of the revised policy where permitted by law, and additional consent will be sought where a change requires it.google+1
How to Contact
Questions about this Privacy Policy or data practices can be directed to [info@hellofreshcooking.com], and region‑specific contact details and request methods will be provided as required by applicable law.oag.ca