Privacy policy

Dadz Cooking is run by Rashad Bayram in Edmonton, Alberta, Canada. As the owner, I'm the person in charge of protecting your personal information (including under Quebec's privacy law). Questions or requests: [email protected].

• Newsletter: your email address, when and where you signed up, and when you confirmed. Used only to send the newsletter you asked for. Every email has a one-tap unsubscribe link.
• Orders: your name, email, shipping and billing address, and optionally a phone number, to ship your order, answer questions about it and keep the records tax law requires. Card details go straight to Stripe and never reach my servers.
• Emails to customers:after you buy, I may email you about new kits, guides and recipes for up to 2 years after your last order, as Canada's anti-spam law allows. Every email has a one-tap unsubscribe link, and once you unsubscribe I never add you back unless you sign up again yourself.
• Accounts: if you create one, your login details and saved addresses.
• Messages: whatever you send me by email, to answer you.
• Listing your farm:the farm details you send through “List your farm” are published in the local farm directory once I approve them. Your own name and email are only for me to contact you about the listing and are never shown on the site.

Needed for the site to work (no consent needed): your cart (dadz_cart_id), your login (dadz_session) and your analytics choice (dadz_consent).

Analytics: Google Analytics helps me see which episodes and guides people read. In Quebec, the EU and EEA, the UK and Switzerland (and wherever I can't tell where you are) it stays off until you click “Accept analytics”. Elsewhere it loads by default. Either way you can change your mind any time with “Cookie preferences” in the footer, and I never use it for advertising or to build a profile of you.

With analytics on, I count a few things: page views, plays of an episode, clicks on a product or on a link to YouTube, Spotify, Apple Podcasts, Instagram, X or Amazon, items added to the cart, sign-ups and purchases (the total and a scrambled reference, never your order number, name or email). Page addresses are sent without anything after the “?”, except the campaign tags of the link you came from (for example utm_source=youtube), which this tab remembers for the visit. Turning analytics off stops all of this straight away.

The newsletter sign-up remembers on your device that you subscribed, so you aren't asked again. That stays in your browser.

I only share data with services that run the site, under contracts that limit what they can do with it:

• Stripe: payments.
• Resend: sending emails.
• Hetzner: hosting the site and its database.
• Cloudflare: security and fast delivery of the site. It sees every visit, works out your approximate location and measures page speed (no cookies).
• Upstash: limits how often the same IP address can hit forms and the API, to stop abuse.
• Canada Post: delivering your order (name and address).
• Google: analytics, as described above, and YouTube. Episode pages show video thumbnails from YouTube's image servers; the video player itself only loads when you press play.

Stripe, Resend, Cloudflare, Upstash and Google are based in the United States, and the site's server and database are hosted by Hetzner in Germany, so your information is stored and processed outside Canada. Before using a service outside Canada I check what it receives and that it protects personal information properly. I never sell personal information.

• Order records: 7 years (tax and accounting).
• Accounts: until you close yours, plus 30 days.
• Newsletter: while you're subscribed, then 2 years as proof of consent. Signups never confirmed: 30 days.
• Buyers' email addresses kept for marketing: up to 2 years after your last order, then deleted unless you've subscribed.
• Copies of newsletter emails I've sent: 2 years.
• If you unsubscribe or ask me to delete your data, I keep a scrambled fingerprint of your address (not the address itself) so I never email you again by mistake.
• Unfinished carts: 30 days. Server logs: 90 days.
• Farm listings: the farm details stay while the farm is listed. The contact name and email you gave stay while the listing is live, and are deleted within 1 year after a listing is rejected or removed, or after it was sent if I never decide on it.

You can ask to see the information I hold about you, get a copy in a common computer-readable format, correct it, or delete it. Email [email protected] and I'll reply within 30 days. Order records I'm required to keep are anonymised rather than deleted.

You can stop all marketing emails any time with the link in any email. If a security incident ever puts your information at real risk, I'll tell you and the privacy regulators. If you're not happy with my answer, you can contact the Office of the Privacy Commissioner of Canada (opens in a new tab) or, in Quebec, the Commission d'accès à l'information (opens in a new tab).

The site is for adults. I don't knowingly collect information from anyone under 18.

If this policy changes, the date at the top changes too. Big changes go out in the newsletter. See also the terms.