Healthy Forkful

Recetas nutritivas y deliciosas

Privacy Policy

enes

Last updated: 7 November 2026

Your data matters to you, and to me too. Here I explain what data I collect on healthyforkful.com, what I use it for and what your rights are. Please read it before you share your data with me.

I follow the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679), the Spanish Data Protection Act 3/2018 (LOPDGDD) and Spanish Law 34/2002 (LSSI-CE).

1. Who is responsible for your data

  • Data controller: María Llamas Mondéjar
  • Trade name: Healthy Forkful
  • Tax ID (NIF): 46936843F
  • Address: Cala’n Porter, 07730 Alaior (Menorca), Balearic Islands, Spain
  • Email: hola@mariallamas.com

2. My principles with your data

  • Transparency: I tell you in advance why I want your data.
  • Minimum data: I only ask for what I need for what you request.
  • Just the right time: I do not keep your data longer than needed. I review my lists from time to time and remove subscriptions that have been inactive for a long time.
  • Security and confidentiality: I protect your data so no one can access it without permission.
  • I never sell your data or use it for anything other than what I explain here.

3. What data I collect and why

a) Newsletter and free ebook

  • Data: your name and email.
  • Purpose: to send you the ebook and my newsletter with recipes and tips. Sometimes I will also tell you about my consultations, courses or products I recommend.
  • Legal basis: your consent. You sign up and confirm your email (double opt-in).
  • How long: until you unsubscribe. Every email has an unsubscribe link.

b) Comments on recipes

  • Data: name, email (not published), website (if you add it), IP address and browser data (to prevent spam).
  • Purpose: to publish your comment and reply to you.
  • Legal basis: your consent.
  • How long: while the comment is published, or until you ask me to delete it.

c) If you email me

  • Data: whatever you share with me.
  • Purpose: to answer your questions, comments or requests.
  • Legal basis: your consent. If you ask about my services, also steps taken before a possible contract.
  • How long: as long as needed to reply. If you then book a service, as long as the law requires.

d) Social media
I have an Instagram profile (@healthyforkful). If you follow me or message me there, I handle your data to manage my profile and reply to you. The social network’s own terms and privacy policy also apply. I never use my followers’ profiles to send them individual advertising.

e) Browsing: cookies and statistics

  • With your permission, I use Google Analytics to know how many people visit the site and which recipes are most popular. I also use Google AdSense to show ads.
  • If you do not give permission, Google only receives cookieless signals that do not identify you, and the ads you see are not personalised.
  • My hosting provider and Jetpack keep technical logs (such as your IP address) to keep the site secure and to count visits in aggregate. Legal basis: my legitimate interest in a working, secure website.
  • More details in the Cookies policy.

4. What type of data I handle

Only identification and contact data (name, email) and technical browsing data.

I do not ask for health data on this website, or any other special category of data. If you book a consultation, it is handled on mariallamas.com, which has its own privacy policy.

5. Who I share your data with

I never sell, rent or give your data to anyone without your permission.

To run the website I work with these providers. They only process data on my behalf and under their own privacy terms (“data processors”):

  • Sered (EU): web hosting. https://www.sered.com/
  • MailerLite (UAB MailerLite, Lithuania, EU): newsletter and ebook emails.
  • Google (Google Ireland Limited and Google LLC, USA): Google Analytics, Google AdSense and the cookie consent message.
  • Automattic Inc. (USA): WordPress.com and Jetpack (statistics, images and security), and Gravatar (profile pictures in comments, if you have an account).

If I ever work with another professional and need to share your data, I will ask for your permission first and tell you who and why.

I would also share data with public authorities if the law requires it.

6. Data outside the European Union

Google and Automattic may process data in the United States. They do so with appropriate safeguards, such as the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.

7. Your rights

You can ask me at any time for:

  • access: to know whether I hold your data and see it,
  • rectification: to correct data that is wrong,
  • erasure: to delete it, for example when it is no longer needed,
  • restriction: to keep it only to deal with possible legal claims,
  • objection: to stop using it, for reasons related to your personal situation,
  • portability: to receive it in a structured, commonly used format, or have it sent to another controller, where possible.

Email me at hola@mariallamas.com with the subject “Data protection”. I will reply within one month.

If you think I have not handled your data properly, you can complain to the Spanish Data Protection Agency: https://www.aepd.es

8. Withdrawing your consent

You can withdraw your consent at any time: unsubscribe from any email, change your cookie choice or email me. What I did before with your permission remains valid.

9. Accurate data

You are responsible for making sure the data you give me is true and up to date. If it changes, let me know and I will correct it.

10. Commercial emails

I do not send spam. I only send you commercial emails if you have given me permission first, as required by the LSSI-CE. Every commercial email is clearly identified and includes an unsubscribe link.

11. Children

If you are under 14, please do not give me your data without permission from your parent or legal guardian.

12. Security

The website uses a secure connection (https). I apply technical and organisational measures to protect your data, and I choose providers that do the same. If a security breach ever affected your data, I would act as the law requires.

13. Changes to this policy

I may change this policy to adapt it to new laws or changes to the site. If I change anything important, I will update it here and change the date at the top.