Privacy policy

Last updated: 30 October 2026

This is a courtesy translation of the original Spanish text. If there is any difference, the Spanish text prevails.

In this policy we explain how we process your personal data, in accordance with Regulation (EU) 2016/679 (GDPR) and the applicable Spanish law.

Data controller

Misterweb S.L., Calle Bolulla, 40, 1ª planta, 03530 La Nucía (Alicante), Spain. Contact: admin@recipok.com.

Data we process

• User data: name, email, contact details, files you voluntarily upload and encrypted login credentials.
• Professional account data: ingredients, recipes, costs, suppliers, workers and production records.
• Technical and browsing data collected through cookies: device type, operating system, browser, IP address, approximate location and access times.
• Chat and enquiries: if you write to us in the chat or by email, your first name, surname, email and the content of the messages.
• Partner programme applications: name, email, phone, company, country and area of work, professional profile, approximate number of businesses you work with and the message you leave us. To prevent automated submissions we also keep an encrypted fingerprint of your IP address, from which the original address cannot be recovered.

To take you to the version of the site for your country, we work out the country from your IP address on our own server; we do not store it for this purpose or send it to third parties. The country database is DB-IP’s “IP to Country Lite” (CC BY 4.0).

Purposes

We use the data to provide you with the service, manage your account, keep the platform running, give you technical support, improve the experience and security, answer your enquiries and comply with legal obligations. If you accept the measurement cookies, we also use them to evaluate our campaigns.

If you send us a partner programme application, we use your data to assess it, contact you about the programme, give you access to the training and the exam and, if you pass it and agree, publish your certified installer profile with the details we agree with you.

Legal bases

Performance of the contract, your explicit consent where required (for example for measurement cookies or commercial communications) and legal obligations.

Partner programme applications are processed on the basis of your consent, given when you send the form, and to take the pre-contractual steps you request with a view to a possible collaboration.

Recipients

We do not disclose your data to third parties, except where required by law, to providers that supply hosting, backup and infrastructure services (under confidentiality agreements compliant with the GDPR) or with your explicit consent. The technical providers of the site include Google, to measure campaigns and only if you accept, and Cloudflare, to check that whoever uses the chat or signs up is a person. We do not sell your data.

We use Brevo to send the service’s emails, such as the confirmation of an application.

Where and for how long

Data is stored on cloud servers located in the European Union. We keep it for as long as the contractual relationship lasts or as long as the law requires. Residual copies may remain in backups for the time strictly necessary.

Partner programme applications are kept for the duration of the selection process and, where applicable, the collaboration. You can ask us to delete them at any time.

Security

We use a provider with security certifications, perimeter firewall, restricted ports, restricted administrative access, role-based permissions, logical separation of data, HTTPS/TLS connections, staff confidentiality commitments and periodic reviews.

Your rights

You can exercise your rights of access, rectification, erasure, restriction, objection and portability, and withdraw your consent at any time, by writing to admin@recipok.com with a document that identifies you. If you consider that your rights have not been respected, you can lodge a complaint with the Spanish Data Protection Agency, the AEPD (aepd.es), or with the data protection authority of your country (for example the ICO in the UK or the DPC in Ireland).

Shared content

You are responsible for what you share on the platform and for its visibility.

Links to third-party sites

We are not responsible for the privacy policies or the cookies of the external sites we link to.

Commercial communications

We send commercial communications by electronic means only if you have a contract with us or if you have given your consent, and you can unsubscribe at any time.

Changes

We may change this policy. Updates are published on this same page.