Privacy & Cookie Policy

Last updated: August 2026

This page contains two related documents:

Part A – Privacy Policy, explaining how we collect and use your personal data.
Part B – Cookie Policy, explaining how we use cookies and similar technologies.

This Privacy & Cookie Policy forms part of, and should be read alongside, our Terms & Conditions.

Part A – Privacy Policy

1. Who we are and how to contact us

My Personalised Cookbook Ltd (“we”, “us”, “our”) is the “data controller” responsible for your personal data. We are a company registered in England and Wales (Company No. 17263772), with our registered office at 167-169 Great Portland Street, London, England, W1W 5PF.

For any privacy-related question, or to exercise your rights, contact us at: help@mypersonalisedcookbook.com

2. Scope of this policy

This policy explains what personal data we collect when you use our website and personalised cookbook service, why we use it, who we share it with, how long we keep it, and the rights you have. We process your personal data in accordance with UK GDPR and the Data Protection Act 2018 (as amended from time to time).

3. The personal data we collect

Depending on how you use our service, we may collect and process the following categories of personal data:

Account data – your name, email address, password (stored in encrypted form), and account settings.
Order data – the products you order, order history, delivery addresses, and recipient details you provide.
Uploaded content – the recipes, text, photographs, and other images you (or contributors you invite) upload to create your cookbook. Photographs may contain images of identifiable people, and recipes may include personal names or notes.
Payment data – information needed to take payment. Payments are processed by our third-party payment providers; we do not store your full card details on our systems.
Communications – the content of messages you send us (for example, customer support queries) and our correspondence with you.
Technical and usage data – your IP address, device and browser information, and information about how you use our website, collected through cookies and similar technologies (see Part B).
Marketing preferences – your choices about receiving marketing from us.

We do not deliberately collect “special category” data (such as health, religious, or similar sensitive information). If such information happens to appear in content you upload, we process it only as part of producing your order and on the basis that you have chosen to include it.

4. How we collect your data

We collect personal data when you:

create an account or place an order;
upload content to create a cookbook, or submit content as an invited contributor;
contact us or respond to our communications;
browse our website (via cookies and similar technologies); and
interact with our marketing (where you have opted in).

5. How and why we use your data

We only use your personal data where the law allows us to. The table below sets out our purposes and the “lawful basis” we rely on for each.

What we use it for	Lawful basis
Creating and managing your account	Performance of our contract with you; our legitimate interests in running our service securely
Processing and fulfilling your order, including sharing details with our print partner and courier	Performance of our contract with you
Storing your uploaded content so we can produce your order and provide support	Performance of our contract with you
Taking payment and preventing fraud	Performance of our contract with you; our legal obligations; our legitimate interests in preventing fraud
Providing customer support and handling complaints	Performance of our contract with you; our legitimate interests in resolving queries
Keeping order, invoice, and transaction records	Compliance with our legal, accounting, and tax obligations
Sending marketing about similar products (where permitted) or where you have opted in	Your consent, or our legitimate interests under applicable marketing rules (see Section 6)
Analysing website usage to improve our service	Your consent (via cookies – see Part B)
Keeping our platform secure and responding to legal requests	Our legitimate interests in security; compliance with our legal obligations

Where we rely on legitimate interests, we have considered whether those interests are overridden by your rights, and you can object at any time (see Section 12).

We do not carry out automated decision-making that produces legal or similarly significant effects on you.

6. Marketing communications

We will only send you marketing emails where you have agreed to receive them, or where the law otherwise permits us to contact existing customers about similar products. You can opt out at any time by using the “unsubscribe” link in any marketing email or by contacting us. Opting out of marketing will not stop service messages relating to an order you have placed (such as order confirmations and delivery updates).

7. Contributors and people you invite

Our service lets you invite other people (“Contributors”) to submit recipes, text, or images for your cookbook. If you invite a Contributor, we will process their name, email address, and the content they submit, so that their content can be included in your order.

If you are a Contributor, the account holder who invited you decides what is included in the finished cookbook. You have the same rights over your personal data as set out in Section 12, and you can contact us to exercise them.

Please only invite Contributors and include their content where you are entitled to do so, as described in our Terms & Conditions.

We share personal data only where necessary, with:

Print and fulfilment partners – to produce and package your cookbook.
Delivery couriers – to deliver your order.
Payment service providers – to take payment securely.
Cloud hosting and IT providers – to host our platform and store data securely.
Email and communication providers – to send order and (where applicable) marketing messages.
Analytics providers – where you have consented to analytics cookies (see Part B).
Professional advisers – such as accountants, lawyers, or insurers, where reasonably necessary.
Authorities and regulators – where we are legally required to disclose information.
A buyer or successor – if we sell, transfer, or reorganise our business, in which case personal data may be transferred as part of that transaction.

We require the service providers who process personal data on our behalf to do so only on our instructions and to keep it secure. We do not sell your personal data.

9. International data transfers

Some of our service providers may process personal data outside the United Kingdom. Where they do, we take steps to ensure your data receives an appropriate level of protection, by relying on one or more of the following:

transfers to countries covered by UK “adequacy” regulations;
the UK International Data Transfer Agreement (IDTA), or the UK Addendum to the EU Standard Contractual Clauses; or
another safeguard permitted by UK data protection law.

You can contact us for more information about the safeguards in place for a specific transfer.

10. How long we keep your data

We keep personal data only for as long as we need it for the purposes set out in this policy, including to meet legal, accounting, or reporting requirements.

Data	How long we keep it
Uploaded photos and recipes	2 years after your most recent order, then securely deleted
Order and transaction records (order history, invoices, payment records)	6 years after your most recent order, to meet our legal, accounting, and tax obligations
Account information	While your account is active; then deleted in line with the periods above after a period of inactivity, with reasonable advance notice
Customer support communications	Typically up to 2 years after your query is resolved
Marketing preferences and consent records	Until you withdraw consent or unsubscribe, plus a short record that you did so

You can ask us to delete your uploaded photos and recipes earlier at any time (see Section 12), subject to any order still in progress and to records we are required to keep by law.

11. How we keep your data secure

We use appropriate technical and organisational measures to protect your personal data, including encryption of data in transit and at rest, access controls, and secure authentication for accounts. No system can be guaranteed to be completely secure, so while we work hard to protect your data, we cannot guarantee absolute security. Please keep your account login details confidential and let us know promptly if you suspect any unauthorised access.

12. Your rights

Under UK GDPR, you have the right to:

Access – request a copy of the personal data we hold about you.
Rectification – ask us to correct inaccurate or incomplete data.
Erasure – ask us to delete your data where there is no good reason for us to continue holding it.
Restriction – ask us to limit how we use your data in certain circumstances.
Portability – ask us to transfer certain data to you or another provider in a structured, machine-readable format.
Object – object to our processing where we rely on legitimate interests, and to direct marketing at any time.
Withdraw consent – where we rely on your consent, withdraw it at any time (this does not affect processing already carried out).

To exercise any of these rights, contact us at help@mypersonalisedcookbook.com. We will respond within one month (this may be extended for complex requests, in which case we will let you know). Exercising these rights is normally free of charge. We may need to verify your identity before acting on a request.

13. How to complain

If you have any concerns about how we handle your personal data, please contact us first so we can try to resolve them. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection:

Website: https://ico.org.uk
Helpline: 0303 123 1113

14. Additional information for individuals in the EEA

We offer our products to customers in a number of countries. Where we offer goods or services to individuals located in the European Economic Area (EEA), the EU General Data Protection Regulation (EU GDPR) applies to that processing alongside the UK GDPR. In practice, the protections, lawful bases, and rights described in this policy are essentially the same under both regimes.

If you are located in the EEA:

The rights set out in Section 12 apply to you.
Where we transfer your personal data from the EEA to the United Kingdom, the European Commission has recognised the UK as providing an adequate level of data protection, so your data can be transferred without additional safeguards. Where data is transferred onward to other countries, we apply the safeguards described in Section 9.
You have the right to lodge a complaint with the data protection supervisory authority in your country of residence or work, in addition to any other route available to you. A list of national supervisory authorities is available from the European Data Protection Board at https://edpb.europa.eu.

15. Additional information for residents of the United States

Several US states – including California, Virginia, Colorado, and Connecticut, among others – have their own consumer privacy laws. Depending on where you live, and on whether our business meets the thresholds set by the relevant state law, you may have additional rights over your personal data. These can include the right to:

know what personal data we collect about you and how we use it;
access a copy of that data;
request correction of inaccurate data;
request deletion of your data;
opt out of the “sale” or “sharing” of your personal data and of targeted advertising; and
not be treated less favourably for exercising your rights.

We do not sell your personal data for money. Where you have consented to analytics or advertising cookies, some of that activity may be treated as “sharing” or a “sale” under certain US state laws. You can withdraw consent and opt out at any time through our cookie settings (see Part B) or by contacting us.

To exercise any of these rights, contact us at help@mypersonalisedcookbook.com. We may need to verify your identity, and where the law allows you may use an authorised agent to make a request on your behalf.

16. Additional rights under other local laws

We aim to apply a consistent, high standard of data protection to everyone who uses our service, wherever they are based. Depending on where you live, your local data protection laws may give you additional or different rights. If you would like to understand the rights available to you in your country, please contact us and we will do our best to help.

17. Children

Our service is intended for people aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take appropriate steps to delete it.

18. Changes to this policy

We may update this policy from time to time, for example to reflect changes in law or to our service. We will post any updated version on this page and update the “last updated” date above. Where changes are significant, we will take reasonable steps to bring them to your attention.

1. What cookies are

Cookies are small text files placed on your device when you visit a website. Similar technologies (such as pixels, tags, and local storage) work in comparable ways. Together we refer to these as “cookies”. They help websites function, remember your preferences, and understand how the site is used.

2. The cookies we use

We use the following categories of cookies:

Category	What they do	Consent needed?
Strictly necessary	Enable core functions such as signing in, keeping your session secure, maintaining your basket, and processing orders. The site cannot work properly without these.	No – always active
Functional / preferences	Remember choices you make (such as language or display settings) to improve your experience.	Yes
Analytics / performance	Help us understand how visitors use our site so we can improve it. This data is aggregated and used to measure and improve performance.	Yes
Marketing	Used to measure the effectiveness of, or deliver, relevant marketing. We only use these if you consent.	Yes

When you first visit our site, we will show a cookie banner. Strictly necessary cookies are always active because the site cannot function without them. For functional, analytics, and marketing cookies, we will not set them unless you consent. You can accept all, reject non-essential cookies, or set your preferences by category.

You can change or withdraw your consent at any time through our cookie settings on the website. You can also control cookies through your browser settings – most browsers let you block or delete cookies, though blocking strictly necessary cookies may stop parts of our site from working. Guidance for common browsers is usually available in the browser’s own help pages.

5. Third-party cookies

Some cookies may be set by third parties that provide services on our behalf (for example, analytics or payment providers). These third parties process cookie data in accordance with their own privacy and cookie policies. Where these cookies are non-essential, we set them only with your consent.

We may update this Cookie Policy from time to time to reflect changes in the cookies we use or in the law. Any updates will be posted on this page with a revised “last updated” date.

If you would like this policy in an alternative format (such as large print or audio), please contact us at help@mypersonalisedcookbook.com and we will do our best to assist.