The Best Fluffy Pancakes recipe you will fall in love with. Full of tips and tricks to help you make the best pancakes.
Last updated: 24 July 2026
Effective from: 24 July 2026
This Privacy Policy explains how Kima Recipes (“we”, “us”, “our”, “I”) collects, uses, shares and protects personal information when you visit kimarecipes.com (the “Site”).
Kima Recipes is a personal food blog run by one person. We collect as little information as we can get away with, we do not sell your data, and this page explains exactly what happens to the information we do collect. It is written to meet the requirements of the EU General Data Protection Regulation (GDPR), the UK GDPR, and US state privacy laws including the California Consumer Privacy Act (CCPA/CPRA).
1. Who we are
| Site | Kima Recipes — https://kimarecipes.com |
|---|---|
| Operated by | Kima, sole owner and author |
| Privacy contact | [email protected] |
| Contact page | https://kimarecipes.com/contact/ |
| Data Protection Officer | Not appointed — not required under Article 37 GDPR for an operation of this size and type. All privacy matters are handled directly by Kima. |
Our servers are located in the United States, and our audience is primarily in the United States. Because the Site is written in English and is publicly accessible, we may also receive visitors from the European Union, the United Kingdom and elsewhere. We apply the standards described below to everyone, regardless of where you live.
2. What this policy covers
This policy covers the Site, its comment system, its contact form and its email newsletter. It does not cover other websites we link to, or our pages on Facebook and Pinterest, which are governed by those companies’ own privacy policies.
3. Information we collect
3.1 Information you give us
| What | When | Why |
|---|---|---|
| Name, email address, optional website, comment text, star rating | When you leave a comment or rate a recipe | To publish and moderate comments, filter spam and reply to you |
| Name, email address, message | When you use the contact form | To answer your question |
| Email address | When you subscribe to the newsletter | To send you the recipes and updates you asked for |
| Anything you choose to include | When you email us directly | To deal with your message |
3.2 Information collected automatically
When you browse the Site, our web host and security provider record standard technical information:
- IP address
- Browser type and version, operating system, device type and screen size
- Pages you viewed, how long you stayed, which page you arrived from
- Approximate location based on your IP address — country and city level only, never precise GPS
- Date and time of your visit
3.3 Comments, avatars and Gravatar
When you leave a comment, we also collect your IP address and browser user-agent string, which help detect spam. An anonymised (hashed) version of your email address may be sent to the Gravatar service to see whether you have a public profile picture; Gravatar’s privacy policy is available at automattic.com/privacy. If you do, your picture is shown next to your comment.
Your name, your comment and your star rating are published publicly. Your email address is never published.
3.4 Photographs and embedded content
Location (EXIF/GPS) data is removed from photographs before they are published. If you upload an image with a comment, please be aware that images can contain embedded location data.
Some posts include embedded content from other sites — YouTube videos, Pinterest pins, Facebook posts. Embedded content behaves exactly as though you had visited that other website directly: those companies may set cookies, collect data and track your interaction with the embed. We have no control over what they collect.
4. Cookies
Cookies are small text files stored on your device. We use them, and so do some of the services we rely on.
| Type | What it does | Who sets it |
|---|---|---|
| Strictly necessary | Security, bot filtering, load balancing, remembering your cookie choices, remembering your name and email in the comment form so you don’t retype them | Kima Recipes, Cloudflare |
| Analytics | Counting visitors and understanding which recipes people actually cook, so we can write more of what you like | Google Analytics |
| Advertising | Not currently used. See section 6. | — |
If you leave a comment, you may opt in to saving your name, email address and website in a cookie so you don’t have to fill them in again next time. These last one year. If you have an account and log in, temporary cookies are set to check that your browser accepts cookies, and login cookies last two days (or two weeks if you select “Remember Me”).
How to control cookies: if you are in the EU, the UK, or a US state with an opt-out right, non-essential cookies are only set after you agree via our cookie banner, and you can change your mind at any time using the “Cookie settings” link in the footer. You can also block or delete cookies in your browser settings, and most browsers let you refuse third-party cookies entirely. Blocking cookies will not stop you from reading recipes.
5. Why we are allowed to use your information (legal bases)
For visitors covered by the GDPR, we rely on the following lawful bases under Article 6:
| What we do | Legal basis |
|---|---|
| Publishing and moderating your comments | Consent, and our legitimate interest in running a working comments section |
| Sending the newsletter | Your consent — Art. 6(1)(a). Withdrawable at any time |
| Replying to your enquiry | Legitimate interests — Art. 6(1)(f): answering people who contact us |
| Spam filtering and site security | Legitimate interests: keeping the Site working and safe |
| Analytics | Consent |
| Advertising, once it launches | Consent |
| Keeping records for tax purposes | Legal obligation — Art. 6(1)(c) |
Where we rely on legitimate interests, we have considered whether those interests are outweighed by your rights and concluded they are not. You are entitled to disagree — see section 11.
6. Advertising
The Site does not currently display any third-party advertising.
We intend to add display advertising in the future. This policy will be updated before any ads appear, and the following will apply when they do:
- We will work with an advertising network such as Google AdSense, Raptive, Mediavine or Ezoic. The network we choose will be named here.
- The network and its partners may set cookies or read device identifiers in order to serve ads, limit how many times you see the same ad, detect fraud and measure results.
- Personalised (interest-based) advertising will only run where you have consented to it. If you refuse, you will still see ads — they will simply be based on the page you are reading rather than on your browsing history.
- We will install a Consent Management Platform so that your choice is passed automatically to every advertising vendor, and we will publish the full vendor list inside the cookie banner.
- We will not sell your personal information for money.
Google’s use of advertising cookies is explained at policies.google.com/technologies/ads. You can opt out of personalised Google advertising at adssettings.google.com, and out of many other networks at optout.aboutads.info or youronlinechoices.eu.
7. Affiliate links
Some posts may contain affiliate links — if you click one and buy something, we may earn a small commission at no additional cost to you, and the retailer may set a cookie to credit the sale. Where a post contains affiliate links this is disclosed in the post itself. It never changes which products or recipes we recommend.
8. Who we share information with
We do not sell or rent your personal information. We share it only with the companies that make the Site work, each of which is contractually bound to protect it and to use it only on our instructions.
| Company | What they do for us | What they see |
|---|---|---|
| Hostinger | Web hosting and backups (US servers) | Everything stored on the Site, including server logs and IP addresses |
| Cloudflare, Inc. | Content delivery, DDoS protection, bot filtering | IP address and request data for every visit |
| Google (Google Analytics) | Audience measurement | Pseudonymous usage data and a truncated IP address |
| Kit (formerly ConvertKit) | Newsletter sign-up and delivery | Your email address, and whether you open or click our emails |
| Automattic (Akismet / Gravatar) | Comment spam filtering and avatars | Comment content, name, email, IP address |
| Advertising network | Not yet active — see section 6 | — |
We may also disclose information if the law requires it, in response to a valid legal request, or to protect our rights or the safety of others.
9. International transfers
The Site is hosted in the United States, and most of the services listed above are based there. If you are visiting from the European Economic Area, the United Kingdom or Switzerland, your information will be transferred to and stored in the United States.
Where that happens, we rely on the safeguards in Chapter V of the GDPR: the EU–US Data Privacy Framework where the provider is certified under it, and the European Commission’s Standard Contractual Clauses (Decision 2021/914), together with the UK International Data Transfer Addendum where relevant. All data is encrypted in transit. You can ask us for details of the safeguards that apply to any particular provider.
10. How long we keep things
| Information | Kept for |
|---|---|
| Comments and their metadata | Indefinitely, so that replies and follow-up questions still make sense to future readers. Deleted at your request. |
| Contact form messages and emails | 24 months after the conversation ends |
| Newsletter subscriptions | Until you unsubscribe, plus 30 days. Subscribers who have not opened an email in 24 months are removed. |
| Server and security logs | Up to 30 days, depending on our host’s and Cloudflare’s settings |
| Analytics data | 14 months, then retained only in aggregate form |
| Cookie consent records | 12 months, kept as proof that consent was given |
| Records connected to income and tax | As long as tax law requires |
When a retention period ends, the information is deleted or permanently anonymised.
11. Your rights
Wherever you live, you can ask us to show you what we hold about you, correct it, or delete it. Just email us.
If you are in the EU, the UK or the EEA, the GDPR gives you specific rights:
- Access — a copy of your personal data and an explanation of how it is used (Art. 15)
- Rectification — correction of anything inaccurate or incomplete (Art. 16)
- Erasure — deletion of your data, the “right to be forgotten” (Art. 17)
- Restriction — pausing our use of your data while a dispute is sorted out (Art. 18)
- Portability — receiving the data you gave us in a machine-readable format (Art. 20)
- Objection — objecting to processing based on legitimate interests, and objecting to direct marketing at any time, with no exceptions (Art. 21)
- Withdrawal of consent — at any moment, without affecting anything done before you withdrew (Art. 7(3))
- Freedom from automated decision-making (Art. 22) — we do not carry out any
How to make a request
Email [email protected] with the subject line “Privacy request”, and tell us what you want and which email address or comment name you used. We may need to check you are who you say you are, but replying from the same email address is usually enough — we will not ask for ID documents unless there is a real reason to.
We reply within one month. If your request is unusually complicated we may take up to two extra months, and we will tell you if that happens and why. There is no charge.
You can also unsubscribe from the newsletter using the link at the bottom of any email, and manage cookies via the “Cookie settings” link in the footer.
Complaints
If you think we have mishandled your information, please tell us first — we would like the chance to fix it. You also have the right to complain to a data protection authority. If you are in the EU or EEA, that is the supervisory authority in the country where you live or work; a directory is at edpb.europa.eu. In the UK it is the Information Commissioner’s Office at ico.org.uk.
12. US state privacy rights
If you live in California, Virginia, Colorado, Connecticut, Texas, Oregon, Utah or another state with a comprehensive privacy law, you have the right to know what personal information we collect, to request a copy, to have it corrected or deleted, and to opt out of its sale or of “targeted advertising”. You have the right not to be treated differently for exercising those rights.
We do not sell personal information for money, and we do not currently run targeted advertising. If we introduce advertising that counts as “sharing” or “selling” under these laws, we will add a “Do Not Sell or Share My Personal Information” link to the footer before it goes live, and we honour the Global Privacy Control browser signal.
To exercise any of these rights, email [email protected]. We respond within 45 days, extendable once by a further 45 days where necessary.
13. Children
This is a general-audience recipe site. It is not directed at children, and we do not knowingly collect personal information from anyone under 13 (or under 16 in the EU/UK, where local law sets that age). If you believe a child has given us personal information, email us and we will delete it promptly.
14. Security
The whole Site runs over HTTPS. We keep WordPress, its theme and its plugins updated, protect the administrator account with a strong password and two-factor authentication, use Cloudflare to filter malicious traffic, and take regular backups. No website can promise perfect security, but we take this seriously and review it regularly.
15. Links to other sites
Recipes often link to other blogs, shops and resources. We are not responsible for those sites or their privacy practices — please read their own policies before giving them your information.
16. Changes to this policy
We will update this page when the Site changes, when we add a new service, and in particular before advertising launches. The “Last updated” date at the top will change. If a change is significant, we will say so on the Site or in the newsletter.
17. Contact
Questions about this policy, or about anything we hold on you:
Email: [email protected]
Contact form: kimarecipes.com/contact
