Privacy Policy

Effective Date: 02 August 2025

1. Introduction
   CeliacDish.com (“Site,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit or interact with CeliacDish.com (the “Service”). By using the Service, you consent to the practices described below.
2. Information We Collect

a. Information You Voluntarily Provide

• Account Registration: name, email address, username, password.
• Newsletter or Comment Forms: name, email address, dietary restrictions, or any other details you choose to share.
• Contact or Support Requests: any information you provide in your message.

b. Information Collected Automatically

• Device & Usage Data: IP address, browser type, operating system, referring URLs, pages viewed, time/date stamps.
• Cookies & Similar Technologies: see our Cookie Policy for details.
• Analytics: Google Analytics, Facebook Pixel, and similar services provide aggregated, pseudonymized statistics.

c. Sensitive Information
We do not intentionally collect sensitive health data (e.g., detailed medical diagnoses). If you voluntarily disclose such information in comments or emails, we treat it with heightened care but recommend you avoid sharing it publicly.

3. How We Use Your Information

• Provide and maintain the Site.
• Personalize content and recipe recommendations.
• Process newsletter subscriptions and deliver email updates.
• Respond to inquiries or customer support requests.
• Monitor usage patterns to improve Site functionality.
• Detect and prevent fraud, security incidents, or other harmful activity.
• Comply with legal obligations.

4. Legal Bases for Processing (EEA / UK / CA Residents)

• Consent (e.g., newsletter sign-ups, non-essential cookies).
• Contractual necessity (e.g., account creation).
• Legitimate interests (e.g., site analytics, fraud prevention).
• Compliance with legal obligations.

5. Sharing Your Information
   We do not sell or rent your personal information. We disclose it only in the following circumstances:

• Service Providers: hosting, email delivery (e.g., Mailchimp, ConvertKit), analytics, and advertising partners.
• Legal Obligations: when required by subpoena, court order, or similar legal process.
• Business Transfers: in connection with a merger, acquisition, or sale of assets (users will receive notice).
• With Your Consent: any other sharing you explicitly authorize.

6. Third-Party Links
   The Site may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing any personal information.
7. Data Retention
   We retain your personal information for as long as necessary to fulfill the purposes described in this Policy, unless a longer period is required by law. You may request deletion or correction at any time (see Section 10).
8. Security Measures
   We use commercially reasonable administrative, technical, and physical safeguards (SSL/TLS encryption, secure hosting, limited access controls) to protect your information. No method of transmission over the internet is 100 % secure; we cannot guarantee absolute security.
9. International Transfers
   Our servers are located in the United States. If you access the Service from outside the U.S., your information may be transferred to and processed in the U.S. or other jurisdictions with different data-protection laws. We rely on appropriate safeguards such as Standard Contractual Clauses where required.
10. Your Rights & Choices

Region	Rights (summary)	How to Exercise
California (CCPA/CPRA)	Know, delete, correct, opt-out of “sale/share,” non-discrimination.	Email [email protected] or use the “Do Not Sell or Share My Personal Information” link in the footer.
EEA / UK (GDPR)	Access, rectify, erase, restrict, object, data portability, withdraw consent.	Same email or postal address below.
Canada (PIPEDA)	Access, challenge accuracy, withdraw consent.	Same contact methods.

We will not discriminate against you for exercising your privacy rights.

11. Children’s Privacy
    The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us so we can delete it.
12. Changes to This Privacy Policy
    We may update this Policy periodically. We will post the new version on this page and change the “Effective Date” above. If changes are material, we will provide additional notice (e.g., email or prominent banner).
13. Contact Us
    CeliacDish.com – Email: [email protected]