Privacy Policy

This is the privacy policy for Bariatric Recipes. It describes the site as it exists today: no customer accounts, no passwords, no mailing list, no advertising, and no analytics.

Almost all of it is about one moment — buying an e-book — because checkout is the only place the site asks you for anything. You can read every recipe on this site without telling us who you are.

Only what it takes to send you the book you bought and to answer a question about it afterwards.

Your email address

Checkout asks for it because your e-books are delivered by email. It is stored with your order, and it is what we match a support request against later.

Your name

Optional. If you give it, it is used to address your receipt. Nothing else.

Your order

Which e-books you bought, the price shown at the time, your order number, and when the order was placed.

Download records

Each time a download link is used, we record the time, the IP address it was used from, and the browser's user-agent string. That record is what sits behind the five-download limit on every link, and it is how a link that has been passed around becomes visible.

Receipt records

The address each receipt or download email went to, its subject line, and whether the email service accepted it — so “did it actually send?” is a question we can answer instead of guess at.

Anything you write to us

If you email support or use the contact form, we have your message and the address it came from until the question is closed.

We never see a card number. No payment provider is connected to this store yet, so checkout takes no money and no card, bank or billing details are collected — not by us, and not by anyone on our behalf. When a payment provider is added, it will handle payment details directly, and this page will name it before that happens.

Three plain reasons, and no others.

To do what you asked

You bought a book. Your email address is how it reaches you, and the order record is what makes a resent link or a refund possible at all. In data protection language, this is processing necessary to perform our contract with you.

To keep the shop working

Download records and email delivery records exist so a link cannot be shared endlessly and so a missing receipt can be traced. That is our legitimate interest in running a shop that works and is not abused — weighed against how little those records say about you.

Because a sale has to be recorded

Business and tax rules expect a seller to keep a record of what was sold, to whom, and for how much.

There is no fourth reason. We do not profile you, score you, sell your details, or use them to advertise anything to you.

Download links

Every link expires 7 days after it is issued, or after 5 downloads, whichever comes first. After that the link is dead; the record that it existed stays with the order.

Order records

Kept for as long as the sale has to stay answerable: support, refunds, and the accounting record of what was sold.

Support messages

Kept while the question is open, and for a short while after in case it comes back.

We run no automatic deletion job today, so a deletion request is handled by a person rather than by a timer. Ask, and we do it — see your choices below.

A short list of companies, each doing exactly one job:

Our website host

Runs the site itself and handles the traffic that reaches it.

Supabase

Hosts the database your order is stored in, and the private file store the e-book PDFs sit in. Those files are never public: each download is a short-lived signed link, and nothing else can reach them.

Our email service

Sends your receipt and your download links, and therefore holds the address they were sent to.

That is the whole list. No advertisers, no data brokers, no analytics company, no social network. We do not sell or rent your details to anyone, and nothing on this site reports your visit to a third party.

If the law ever obliges us to hand something over, we will, and we will tell you unless we are forbidden from telling you.

There are no tracking cookies on this site: no analytics, no advertising pixels, no third-party scripts watching what you read.

Your cart

Kept in your own browser's local storage so it survives a refresh. It stays on your device until you check out, and clearing your browser's site data empties it.

That is the only thing this site stores on your device. If a payment provider is connected later, its checkout may need cookies of its own to take a payment; this page will say so when that happens.

You can ask us to show you what we hold about you, correct it, delete it, or stop using it in a particular way. Email hello@bariatricrecipes.shop from the address you used at checkout, or include your order number, and we will reply. There is no form to fill in and no fee.

There is no account to log into and no mailing list to unsubscribe from. Receipts and download links are the only email we send you.

One trade-off worth knowing before you ask: deleting an order also deletes the download links that belong to it. If you still want the books, download them first.

If you think we have handled your information badly, tell us first — we would much rather fix it. You are also entitled to complain to the data protection authority where you live.

The site, the database and the file store run on providers with servers in more than one country, so ordering from elsewhere means your order details cross a border to reach us. Where that happens, the providers' standard data protection terms cover the transfer.

Crossing a border does not change who sees your details: the same short list above, doing the same jobs.

This is a shop for adults. It is not aimed at children, and we do not knowingly collect anything from a child under 16. If you believe a child has given us their details, write to us and we will remove them.

The date at the top of this page is the announcement — there is no mailing list to send a notice to. When something material changes, such as a payment provider being connected, it lands here first and that date moves with it.

An order you have already placed stays under the version of this page that was live when you placed it.