Privacy policy
This notice explains how personal data is handled when you use Food Glory and the shared Exceptional Web Brands (“EWB”) privacy, analytics, feedback and advertising services. It is written for UK users and is intended to support compliance with the UK GDPR, the Data Protection Act 2018 and PECR. Where EEA laws apply, the same consent-first controls are designed to support the equivalent ePrivacy/GDPR requirements.
Short version: essential technology keeps the site and your privacy choice working. EWB analytics, advertising measurement and personalisation are off by default and only begin if you opt in. You can reject optional purposes just as easily as accepting them, choose purposes separately, and change your mind later.
1. Who is responsible for your data?
The controller is Exceptional Web Brands Limited, trading as Exceptional Web Brands, for the EWB processing described here and on Food Glory.
- Privacy contact: privacy@exceptionalwebbrands.com
- Country: United Kingdom
If another organisation controls a service linked from the site, its own privacy notice applies to that service.
2. What this site is designed to collect
Food Glory is a recipe and food-discovery site. EWB analytics is configured to measure page use, not the ingredients or notes you may enter into other tools.
| Data / activity | When | Why |
|---|---|---|
| Privacy choice and policy version | Always when you make a choice | Remember and honour your choice and demonstrate how the consent mechanism operated. |
| Technical/security data | As needed to deliver and secure the site | Hosting, abuse prevention, error diagnosis and security. Hosting/CDN systems may process IP addresses transiently. The EWB analytics design does not intentionally persist raw IP addresses. |
| Pseudonymous EWB visitor/session ID, page path, language, device class and performance events | Only when the relevant optional analytics purpose is enabled | Understand site use and improve performance/content. |
| Advertising impressions/click measurement identifiers | Only with advertising-measurement consent where storage/access or personal data is involved | Measure campaigns, control reporting and prevent duplicate measurement. |
| Personalisation signals/preferences | Only with personalisation consent | Adapt recommendations or experiences. |
| Feedback you submit, ratings, feedback category, page, title, viewport and basic device context | Only when you press “Send feedback” | Investigate problems and improve the page. A pseudonymous EWB visitor/session ID is attached only when analytics is allowed. |
3. Our purposes and lawful bases
| Purpose | UK GDPR basis | Storage/access rule |
|---|---|---|
| Deliver the page, security, fraud/abuse prevention and necessary preference storage | Legitimate interests in operating and securing the service; legal obligation where applicable | Strictly necessary where the technology is genuinely essential to the service or compliance obligation |
| EWB analytics as configured in this package | Consent | Consent. We deliberately use the conservative opt-in route rather than relying on the UK's narrow statistical-purpose exception for the site's pseudonymous visitor-level analytics. |
| Advertising measurement and personalised advertising | Consent where personal data is processed | Consent before non-exempt advertising storage/access |
| Personalisation | Consent where it uses optional identifiers or personal data | Consent where required |
| Receive and analyse voluntary feedback | Legitimate interests in improving the service and responding to reports; consent is not used as a condition for merely sending feedback | No optional analytics identifier is required to submit feedback |
| Contextual advertising without behavioural storage/access | Legitimate interests may apply depending on implementation | May operate without optional tracking only where no non-exempt device storage/access is used. Measurement/personalisation stays consent-gated. |
4. Consent and privacy choices
Optional purposes start off. The first layer offers Accept all, Reject all and Choose. Choosing opens separate controls for analytics, advertising measurement and personalisation. Rejecting optional processing does not block access to ordinary site content.
You can reopen Privacy choices from the on-page control or legal/footer link at any time. Withdrawal applies going forward and removes the EWB browser identifiers used for optional purposes from that browser. A materially new privacy-policy/consent version can trigger a fresh choice.
5. Google Analytics and other providers
If this site's EWB configuration contains a Google Analytics measurement ID, the Google Analytics library is not loaded by the EWB client until analytics consent is granted. Google's consent signals are set to denied before optional tags are permitted. If the measurement ID is blank, EWB does not load Google Analytics at all.
We may also use hosting, CDN/security, database, email/support, advertising and professional-service providers. They are limited to the data needed for their role and are expected to act under appropriate data-protection terms. Any new provider that introduces non-essential tracking must be added to the relevant notice and consent controls before deployment.
6. International transfers
Some service providers may process data outside the UK. Where UK data-protection law requires a transfer mechanism, we use an applicable adequacy regulation or appropriate safeguards such as the UK International Data Transfer Agreement/Addendum, together with supplementary measures where appropriate. Provider-specific transfer information should be reviewed whenever vendors change.
7. Retention
- Raw EWB analytics events: target maximum 90 days, then aggregate or delete.
- Raw advertising events: target maximum 180 days.
- Consent event records: target maximum 730 days where needed to evidence choices.
- Feedback records: target maximum 730 days; free-text feedback should be reviewed/deleted or de-identified sooner where practical, with a target of 365 days.
- Detailed feedback user-agent data: target maximum 30 days.
- Browser consent choice: normally re-requested after 180 days, or earlier if the policy materially changes.
- Security/server logs: retained only as long as reasonably necessary for security, troubleshooting and legal obligations, according to the hosting/security provider's configured schedule.
These are maximum/target periods; data may be deleted or aggregated sooner. Legal disputes, fraud/security incidents or legal obligations can justify a different period where documented.
8. Data minimisation and sensitive information
EWB is designed around site-scoped pseudonymous IDs rather than a single cross-site behavioural ID. Raw IP addresses should not be stored in EWB analytics. Do not send passwords, payment-card details, health data, government identifiers, precise financial account data or other sensitive information through feedback.
9. Sharing
We do not sell personal data as a standalone dataset. Data may be shared with processors and providers needed to host, secure, analyse or operate the service; with advertising/measurement partners only in line with the relevant consent; with professional advisers; or with authorities where the law requires it. EWB sites may use aggregated, non-identifying statistics across the portfolio for business and product planning.
10. Children
The EWB sites are general-audience services unless a site explicitly says otherwise. We do not knowingly use the optional EWB tracking layer to build behavioural profiles of children. If you believe a child has provided personal data in feedback, contact us so we can review it.
11. Automated decisions
The EWB layer described here is not intended to make decisions that produce legal or similarly significant effects about you. Personalised content or advertising, if enabled, is a content-selection activity rather than a significant automated decision.
12. Your data-protection rights
Depending on the circumstances, you may have rights to access personal data, correct it, erase it, restrict or object to processing, receive portable data, withdraw consent, and complain to a supervisory authority. Some rights depend on the lawful basis and exemptions that apply.
To exercise a right, email privacy@exceptionalwebbrands.com. We may need enough information to locate the relevant records and verify that we are responding to the right person. For a pseudonymous browser ID, providing the ID shown in the site's privacy controls may help us locate data without asking for more identity information.
13. Complaints
Please contact us first if you have a privacy concern. You also have the right to complain to the UK Information Commissioner's Office (ICO), the UK's data-protection regulator, or another competent supervisory authority if it applies to you.
14. Changes to this policy
We will update the date/version when this policy materially changes. If a change affects the purposes you previously consented to, the site can ask for a fresh privacy choice rather than silently extending an old consent.