Privacy Policy

Last Updated: January 12, 2026

Introduction

Welcome to Chef Zach Laidlaw's website ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.chefzachlaidlaw.com.

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy,
please do not access the site.

Information We Collect

Information You Provide to Us

We collect personal information that you voluntarily provide to us when you:

Contact us through our contact forms
Subscribe to our newsletter or mailing list
Create an account on our website
Make a purchase (when e-commerce functionality is available)
Interact with us on social media or through other communicationsThis information may include:
Name and contact information (email address, phone number, mailing address)
Payment information (credit card details, billing address) - processed securely through third-party payment processors
Order history and purchase information
Communication preferences
Any other information you choose to provide

Information Automatically Collected

When you visit our website, we automatically collect certain information about your device and browsing activity, including:

Log and Usage Data: IP address, browser type, operating system, access times, pages viewed, and the page you visited before navigating to our website
Device Data: Device type, unique device identifiers, and device settings
Location Data: General location information based on IP address
Cookies and Tracking Technologies: We use cookies, web beacons, and similar tracking technologies to collect information about your interactions with our website

For more details, please see our Cookie Policy below.

How We Use Your Information

We use the personal information we collect for the following purposes:

To provide and maintain our services: Including processing orders, managing your account,
and delivering content you request
To communicate with you: Sending newsletters, marketing communications, updates, and responding to your inquiries (with your consent where required)
To process transactions: Facilitating payments and fulfilling orders when you make purchases through our site
To improve our website: Analyzing usage patterns, troubleshooting technical issues, and enhancing user experience
To comply with legal obligations: Meeting regulatory requirements and responding to legal requests
To protect our rights: Preventing fraud, enforcing our terms of service, and protecting the security of our website and users

Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), our legal basis for collecting and using your personal information depends on the specific context:

Consent: You have given us explicit permission (e.g., subscribing to our newsletter)
Contract: Processing is necessary to fulfill a contract with you (e.g., completing a purchase)
Legitimate Interests: Processing is in our legitimate business interests and does not override your rights (e.g., improving our website, fraud prevention)
Legal Obligation: We need to comply with the law

Sharing Your Information

We may share your information in the following circumstances:

With Service Providers

We work with third-party service providers who perform services on our behalf, including:

Email Marketing Services (e.g., Mailchimp, Google Workspace): To send newsletters and promotional emails
Analytics Services (e.g., Google Analytics): To understand website usage and improve our services
Payment Processors (e.g., Stripe, PayPal, Square): To process transactions securely
Hosting and Infrastructure Providers: To maintain and host our website
Shipping and Fulfillment Partners: To deliver merchandise orders (when applicable)

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

For Legal Reasons

We may disclose your information if required by law or in response to:

Court orders or legal processes
Government or regulatory requests
Protection of our rights, property, or safety
Investigation of fraud or security issues

Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and how it affects your personal data.

We do not sell your personal information to third parties for their marketing purposes.

International Data Transfers

Our website is operated from the United States. If you are accessing our site from outside the US, please be aware that your information may be transferred to, stored, and processed in the United States and other countries where our service providers operate.

For users in the EEA, we ensure that appropriate safeguards are in place for international data transfers, such as:

Standard Contractual Clauses approved by the European Commission
Ensuring service providers are certified under relevant data protection frameworks
Implementing additional technical and organizational security measures

Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

For All Users

Access: Request a copy of the personal information we hold about you
Correction: Request correction of inaccurate or incomplete information
Deletion: Request deletion of your personal information (subject to legal obligations)
Opt-out of Marketing: Unsubscribe from marketing emails at any time using the unsubscribe link

Additional Rights for EEA Users (GDPR)

Data Portability: Receive your personal data in a structured, commonly used format
Restriction of Processing: Request that we limit how we use your information
Object to Processing: Object to processing based on legitimate interests
Withdraw Consent: Withdraw consent at any time where we rely on consent as the legal basis
Lodge a Complaint: File a complaint with your local data protection authority

Additional Rights for California Residents (CCPA)

Right to know what personal information is collected, used, shared, or sold
Right to delete personal information
Right to opt-out of the sale of personal information (Note: We do not sell personal information)
Right to non-discrimination for exercising your privacy rights

To exercise any of these rights, please contact us using the information provided in the "Contact Us" section below.

Data Transfers

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Account Information: Retained while your account is active and for a reasonable period afterward
Purchase Records: Retained for tax, accounting, and legal compliance purposes (typically 7 years)
Marketing Communications: Retained until you unsubscribe or request deletion
Analytics Data: Typically anonymized and aggregated after a short period

When we no longer need your information, we will securely delete or anonymize it.

Cookies and Tracking Technologies

What Are Cookies?

Cookies are small text files placed on your device when you visit our website. They help us recognize you, remember your preferences, and analyze site usage.

Types of Cookies We Use

1 Essential Cookies: Necessary for the website to function properly (e.g., shopping cart, user authentication)
Performance Cookies: Collect anonymous data about how you use our site to help us improve it
Functional Cookies: Remember your preferences and personalize your experience
Marketing Cookies: Track your online activity to deliver relevant advertisements

You can control cookies through your browser settings. Most browsers allow you to:

View what cookies are stored
Delete cookies
Block all or specific cookies
Set preferences before accepting cookies

Please note that disabling certain cookies may limit your ability to use some features of our website.

For more information about cookies and how to manage them, visit www.allaboutcookies.org.

Managing Cookies

Security of Your Information

We implement appropriate technical and organizational security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include:

Encryption of data in transit (SSL/TLS)
Secure payment processing through PCI-DSS compliant providers
Regular security assessments and updates
Access controls and authentication requirements
Employee training on data protection

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

Children's Privacy

Our website is not intended for children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately, and we will take steps to delete that information.

Third-Party Websites

Our website may contain links to third-party websites, social media platforms, or services that are not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

Posting the updated policy on this page with a new "Last Updated" date
Sending an email notification (for significant changes)
Displaying a prominent notice on our website

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Chef Zach Laidlaw
Email: privacy@zachlaidlaw.com
Mailing Address: PO BOX 11391, Lahaina, HI 96761

For EEA Users: If you have concerns about how we handle your personal data, you have the right to lodge a complaint with your local supervisory authority.

Your Consent

By using our website, you consent to our Privacy Policy and agree to its terms.

For marketing communications: We will obtain your explicit consent before sending promotional emails, and you can withdraw consent at any time by clicking the "unsubscribe" link in our emails or contacting us directly.

Additional Information for Specific Jurisdictions

We comply with the General Data Protection Regulation (GDPR). Our data controller is Chef Zach Laidlaw. You have the right to lodge a complaint with your local data protection authority if you believe we have violated your privacy rights.

European Economic Area (EEA)

California

We comply with the California Consumer Privacy Act (CCPA). California residents have specific rights as outlined in the "Your Privacy Rights" section above.

Do Not Sell My Personal Information: We do not sell personal information as defined by the CCPA.

United Kingdom

We comply with the California Consumer Privacy Act (CCPA). California residents have specific rights as outlined in the "Your Privacy Rights" section above.

This Privacy Policy is effective as of the date stated at the top of this page and applies to all users of our website.