Privacy Policy

1. Information We Collect

• You provide: name, email, password, profile details, order details, messages/comments, class and membership selections.
• Automatically: device info, IP address, page views, timestamps, approximate location, and cookies or similar technologies.
• From third parties: payment processors (e.g., Stripe), email providers (e.g., Brevo/Sendinblue), analytics/ads partners, and affiliate platforms (e.g., Amazon Associates).

2. Cookies & Similar Technologies

We use cookies, pixels, and local storage for: (a) essential/functional (checkout, authentication, fraud prevention, remembering preferences); (b) performance/analytics; (c) advertising/retargeting; and (d) affiliate tracking. You can manage preferences via your browser settings or our Cookie Preferences (if available). Blocking essential cookies may impair functionality.

3. How We Use Personal Information (Purposes & Legal Bases)

• Provide, secure, and maintain the Services (contract).
• Process orders, subscriptions, and payments (contract).
• Send transactional emails (contract/legitimate interests).
• Send marketing with your consent; you may unsubscribe anytime (consent/legitimate interests).
• Personalize content and ads; measure performance (consent/legitimate interests).
• Comply with legal obligations (legal obligation).
• Prevent fraud and enforce Terms (legitimate interests).

4. How We Share Information

We share with service providers bound by contract (hosting, payment processing, email delivery, analytics, advertising, affiliate platforms); in business transfers; and as required by law. We do not “sell” personal information as defined by some laws, but we may “share” it for cross-context behavioral advertising.

5. Retention

We retain personal information only as long as necessary for the purposes above and to meet legal obligations, applying criteria such as account status and transaction history.

6. Security

We use reasonable administrative, technical, and physical safeguards appropriate to the nature of the data. No method is 100% secure.

7. Your Rights

Email privacy@cookingwithtomi.com to exercise rights.

GDPR/UK GDPR (EEA/UK Residents)

• Right of access, rectification, erasure, restriction, portability, and objection (including to profiling/marketing).
• Withdraw consent at any time where processing is based on consent.
• Complain to a supervisory authority.

International transfers: If data is transferred outside the EEA/UK (e.g., to the US), we use appropriate safeguards such as Standard Contractual Clauses or rely on adequacy decisions where applicable.

Optional: EU Rep: [Contact] • UK Rep: [Contact] • DPO (if required): [Contact]

U.S. State Privacy (e.g., CCPA/CPRA)

Depending on your state, you may have rights to access, delete, correct, or opt out of targeted advertising and certain profiling. California residents may use a California: Do Not Sell or Share My Personal Information link (if available).

8. Children’s Privacy

We do not knowingly collect personal information from children under 13.

9. Marketing Communications

You can unsubscribe from marketing emails via the link in any message.

10. Third-Party Links & Social Features

Third-party sites and services have their own privacy policies and terms.

11. Changes to this Policy

We may update this Policy from time to time. Changes will appear here with a new “Last updated” date.

12. Contact