Privacy Policy

1. Controller

For purposes of applicable data protection laws, Zoë Isadora is the controller of personal information collected through the Site. Operational support for the Site may be provided by Grey Chair Digital, acting as a service provider / processor on our behalf.

2. Categories of Personal Information Collected

We may collect the following categories of personal information:

• Identifiers. Email address and similar online identifiers when you submit a signup or contact form.
• Commercial / preference information. The page or form source associated with your signup, and records of communications we send to you.
• Internet or other electronic network activity. IP address, browser type, device type, referring URL, pages requested, date and time of access, and similar log data generated in the ordinary course of operating the Site.
• Cookies and similar technologies. Information stored on or read from your device as described in Section 6.

We do not knowingly collect payment card numbers through the Site at this time. If e-commerce checkout is enabled in the future, payment credentials will be processed by third-party payment processors under their respective terms and privacy policies, and we will update this Policy accordingly.

3. Sources of Personal Information

We collect personal information: (a) directly from you when you voluntarily submit it; (b) automatically from your device and browser when you interact with the Site; and (c) from service providers that process data on our behalf in connection with hosting, databases, and electronic mail delivery.

4. Purposes of Processing

We process personal information for the following business purposes:

• To provide, operate, maintain, and improve the Site;
• To fulfill requests you make, including delivery of requested electronic mail (such as welcome messages, recipe notes, and launch notifications);
• To maintain our subscriber list, prevent duplicate enrollments, and manage unsubscribes;
• To detect, prevent, and investigate fraud, abuse, security incidents, and violations of our Terms of Service;
• To comply with applicable law, lawful requests, and legal process; and
• To establish, exercise, or defend legal claims.

5. Disclosure of Personal Information

We do not sell personal information for monetary consideration. We may disclose personal information to:

• Service providers / processors that perform services on our behalf, including website hosting, database hosting, automation platforms, and electronic mail transmission, subject to contractual obligations limiting use of such information to the provision of services to us;
• Professional advisors (such as attorneys or accountants) where reasonably necessary;
• Authorities when we believe disclosure is required or appropriate to comply with law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of the Company, our users, or others; and
• Successors in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or a portion of our assets, in which case personal information may be transferred as a business asset subject to customary confidentiality protections.

6. Cookies and Tracking Technologies

The Site may use cookies, local storage, and similar technologies that are strictly necessary to operate core functionality (including authentication for the private administration area). We do not presently deploy third-party advertising cookies on public pages of the Site. You may configure your browser to refuse cookies; however, doing so may impair certain features.

7. Retention

We retain personal information for so long as reasonably necessary to fulfill the purposes described in this Policy, including to maintain an active mailing list, comply with legal obligations, resolve disputes, and enforce our agreements, unless a longer retention period is required or permitted by law. Upon a verified deletion request, we will delete or de-identify personal information except where retention is required for legitimate business or legal purposes.

8. Security

We implement reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, alteration, disclosure, or destruction. Notwithstanding the foregoing, no method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

9. Your Rights and Choices

Depending on your jurisdiction (including, where applicable, the European Economic Area, United Kingdom, or California), you may have rights to request access to, correction of, deletion of, or portability of your personal information; to object to or restrict certain processing; and to withdraw consent where processing is based on consent. You may opt out of marketing or list electronic mail by following the unsubscribe instructions in such messages.

To exercise applicable rights, contact us as set forth in Section 13. We may request information reasonably necessary to verify your identity before fulfilling a request. You may have the right to lodge a complaint with a supervisory authority.

10. International Transfers

The Site is operated from the United States. If you access the Site from outside the United States, you understand that your information may be transferred to, stored, and processed in the United States and other jurisdictions that may not provide the same level of data protection as your home jurisdiction. Where required, we will implement appropriate transfer mechanisms.

11. Children’s Privacy

The Site is not directed to children under the age of thirteen (13), and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13 without verifiable parental consent, we will take steps to delete such information promptly.

12. Changes to This Policy

We reserve the right to modify this Policy at any time. Material changes will be indicated by updating the “Last Updated” date above and posting the revised Policy on the Site. Your continued use of the Site following the posting of changes constitutes your acceptance of such changes, to the extent permitted by law.

13. Contact

For questions regarding this Policy or to submit a privacy request, use the Contact page, email hello@greychair.digital(Grey Chair Digital, as service provider, will forward privacy requests to Zoë Isadora), or reply to an electronic mail message previously sent from our mailing list.