Privacy Policy
Effective date: 22-Feb-2026
Website:
https://curry-recipes.co.uk/This Privacy Policy explains how we collect, use, and protect personal data when you use our SMF Forum.
1) What data we collect
A) Data you provide
Account details: username, email address, password (stored as a secure hash), profile fields you choose to fill in.
User content: posts, replies, private messages, signatures, avatars, attachments (if enabled).
Preferences: notification settings, language/timezone, and similar options.
B) Data we collect automatically
Log data: IP address, browser type, device info, timestamps, pages viewed, referring URLs.
Cookies/local storage: to keep you logged in and support Forum functions. (See "Cookies" below.)
C) Optional / admin-added data
Moderation records: warnings, bans, reports, and actions taken.
Email delivery logs: whether a notification email was sent/bounced (if applicable).
2) Why we use your data (purposes)
We use personal data to:
Create and manage your account and authenticate logins.
Provide Forum features (posting, messaging, subscriptions, moderation).
Send service-related emails (verification, password reset, notifications you enable).
Prevent abuse and protect security (spam prevention, fraud detection, rate limiting).
Maintain and improve the Forum (debugging, performance, analytics where enabled).
Comply with legal obligations and respond to lawful requests.
3) Legal bases (UK GDPR/EEA GDPR)
Depending on the context, we rely on:
Contract (to provide the Forum services you request).
Legitimate interests (security, abuse prevention, service improvement).
Consent (where required, e.g., certain cookies or optional marketing—if ever used).
Legal obligation (e.g., compliance and record keeping).
4) Cookies
SMF uses cookies for core functionality such as:
Keeping you logged in (session/auth cookies).
Remembering settings and preferences.
Security features (e.g., CSRF protection).
You can manage cookies in your browser settings. Disabling cookies may stop parts of the Forum from working properly.
Optional analytics (if you use it):
If we use analytics (e.g., [Google Analytics/Matomo/etc.]), we will describe it here and provide cookie consent controls where required.
Analytics provider (if any): [name], data collected: [summary], opt-out: [method].
5) Who we share data with
We do not sell your personal data.
We may share data with:
Hosting and infrastructure providers (server, database, email delivery) strictly to run the Forum.
Spam/security services (if enabled) for abuse prevention.
Legal authorities where required by law or to protect rights/safety.
Service providers process data under contractual obligations (data processing terms) where required.
6) International transfers
If any service provider stores/processes data outside the UK/EEA, we use appropriate safeguards such as:
UK IDTA / EU Standard Contractual Clauses, and
additional measures where needed.
(If all hosting is UK-only, say: "We host data in [UK/EEA location].")
7) How long we keep data (retention)
Account data: kept while your account is active.
Posts/content: typically kept to preserve discussion history; you may be able to edit/delete your content depending on Forum settings.
Private messages: retained while stored in your inbox/sent items, or until deleted (subject to backups).
IP/security logs: retained for [e.g., 30–180 days] for security and abuse prevention.
Backups: retained for [e.g., 7–30 days] and then overwritten.
We may retain certain data longer if required by law or to resolve disputes and enforce our terms.

Your rights
Depending on your location, you may have rights to:
Access your personal data.
Correct inaccurate data.
Delete data (where applicable).
Restrict or object to processing.
Data portability (for certain data).
Withdraw consent (where processing is based on consent).
To exercise rights, contact us at [privacy email]. We may need to verify your identity.
9) Complaints
If you're in the UK, you can complain to the Information Commissioner's Office (ICO). If you're in the EEA, you can complain to your local supervisory authority.
10) Security
We use reasonable technical and organisational measures to protect personal data (access controls, encryption in transit where possible, secure password hashing). No system is 100% secure; please use a strong password and keep it confidential.
11) Children
The Forum is not intended for children under 13. If you believe a child has provided personal data without appropriate permission, contact us and we will address it.
12) Changes to this policy
We may update this Privacy Policy from time to time. We'll post the updated version and change the effective date.