Privacy Notice

1. Who is responsible for your information?

OPR is the controller of the personal information described in this notice. For privacy questions, requests or concerns, email info@otherpeoplesrecipes.co.uk.

Our UK data-protection registration reference is ZC211828, issued by the Information Commissioner's Office (ICO).

2. Information we collect

We collect information you choose to give us. Depending on how you use OPR, this may include:

• your name, email address and town or region;
• the recipe, ingredients, method, notes and story or memory you share;
• photos of a finished dish, a contributor, or an original handwritten recipe card, plus any optional audio you provide;
• comments, photos or notes you share after cooking another family's recipe;
• your table-signup details and marketing choices; and
• privacy-safe counts showing which OPR social link or campaign brought a visit and which site action was selected. These attribution records do not contain names, email addresses or a visitor identifier.

Please do not include someone else's private information unless you have their permission to share it. Recipe submissions are currently for adults aged 18 and over. We do not knowingly collect recipe submissions from children.

3. How we use information and our legal bases

• To receive, assess, administer and contact you about a recipe submission or enquiry: this is necessary for our legitimate interests in operating OPR and responding to people who choose to contact us.
• To publish and celebrate a recipe, story, image or audio: we do this where you have submitted it and granted the contributor licence shown on the submission form.
• To send OPR news, events and invitations: we rely on your consent. You can withdraw it at any time by using the unsubscribe link in an email or contacting us.
• To keep the site secure, working and useful: we rely on our legitimate interests in running, protecting and improving OPR.
• To understand which OPR links lead to participation: we use privacy-safe source, campaign and action counts to improve our recipes and invitations. We do not use these records to identify individual visitors.

You are not required by law to provide personal information. However, we need the contact and recipe details marked as required on a form in order to process that submission or request.

4. Optional AI recipe reader

If you select “Read my recipe with AI”, we send the image you choose to our AI provider, OpenAI, solely to create an editable draft of the title, ingredients and method. This processing happens at your request. OpenAI does not use API inputs or outputs to train its models by default, but may retain them for abuse monitoring for up to 30 days unless legally required to keep them longer. You remain responsible for checking and correcting the draft before you submit it. The tool does not make decisions about you and does not automatically publish anything.

5. Who we share information with

We use carefully selected service providers to help run OPR:

• Vercel, which hosts the website and provides privacy-focused website analytics;
• Supabase, which provides our database, secure form processing and file storage;
• Resend, which delivers OPR emails and manages unsubscribe requests; and
• OpenAI, only when you choose to use the optional recipe-card transcription helper.

We require providers to handle personal information securely and only for the services they provide to us. Some providers may process information outside the UK. Where they do, we use appropriate transfer safeguards, such as an adequacy regulation or approved contractual safeguards. You can ask us for more information. We do not sell personal information.

6. How long we keep information

• Published recipes and their accompanying stories are kept in the living OPR archive unless we agree to remove them.
• Unpublished recipe submissions are normally deleted within 24 months, unless we need to keep them longer to resolve a query, protect legal rights or meet a legal obligation.
• Table-signup and marketing details are kept until you unsubscribe or ask us to remove them.
• We retain a minimal suppression record after an unsubscribe where necessary to make sure we honour that choice.

7. Your rights

Subject to the UK GDPR, you can ask us to access, correct, erase, restrict or transfer your personal information. You can object at any time to processing based on our legitimate interests, and you can object to direct marketing at any time. Where we rely on consent, you can withdraw it at any time without affecting the lawfulness of processing before you withdrew it.

To exercise a right, email info@otherpeoplesrecipes.co.uk. We may need to confirm your identity before acting on a request.

8. Security and complaints

We use appropriate technical and organisational measures designed to protect the information we hold. No online service can promise absolute security, so please take care when choosing what to submit.

Please contact us first so we can try to help. You can also complain to the ICO at ico.org.uk/make-a-complaint or on 0303 123 1113.

9. Cookies and changes to this notice

OPR uses Vercel Web Analytics to understand aggregated page visits. We also count visits from OPR's own social links and selected actions on the site without assigning a visitor identifier. We do not use advertising, marketing or cross-site tracking cookies. Read our Cookie Notice for more information.

We may update this notice when our services or legal obligations change. The effective date at the top tells you when it was last updated.