Data controller
The data controller for personal data processed in connection with the public website and related pre-contractual communications is:
Wrizelonghepor
499 Haight St, San Francisco, CA 94117, United States
Email: touch@wrizelonghepor.world
Phone: +1 415-503-0722
If you interact with a separate order form, invoice, or contract that names another legal entity, that entity will identify itself in that document, and the contract will explain how privacy terms interact with this Policy where both apply.
Scope, informational content, and health data
The Site offers general, non-binding information about food preparation, planning, and similar lifestyle topics. It is not a telehealth service, medical nutrition therapy service, or an emergency service. We do not use the Site to make clinical decisions for you, and a contact form is not a secure channel for urgent health needs. If we use online advertising (for example search or display campaigns), we send traffic to these same pages and follow the destination and content requirements of the advertising platform, including regional rules for health-related and sensitive topics in the United States where they apply.
Please avoid sending us highly sensitive information such as detailed medical history unless you have a specific written reason to do so and an appropriate channel. If we receive information we did not need, we will delete it when we notice it and when retention is not legally required, subject to the limitations of our systems and backups.
Categories of personal data we may process
Depending on your interaction, we may process one or more of the following types of data:
- Identity and contact data, including the name, email address, and optional phone or postal data you type into our forms or sign on emails.
- Content of communications, such as the text of your request, preferences you state for scheduling, and attachments you add.
- Transaction and order data, for paid offerings, which can include an order identifier, line items, and payment method metadata processed by a payment service provider, while full card data is usually handled by that provider, not by us, depending on the integration in place at the time of purchase.
- Technical and usage data, which may include IP address, approximate region derived from the IP, browser type, operating system, time zone, referring page, and pages viewed, especially when you permit analytics tools.
- Cookie and device storage identifiers used to store your cookie choices, to remember that you are logged in when we add accounts in the future, and to help secure forms against basic abuse.
- Recordkeeping and compliance data such as copies of complaints, law enforcement or regulatory correspondence, and accounting records where law requires a longer hold.
Purposes and legal bases of processing
We process the above categories to:
- Operate, secure, and improve the Site, including error detection, load balancing, and abuse monitoring where proportionate, typically relying on legitimate interests in a secure online presence, balanced with your rights.
- Respond to contact requests you initiate, usually based on pre-contractual steps at your request or legitimate interests in good customer support.
- Perform purchase contracts you enter with us, including providing digital materials or access credentials, and handling refunds in line with the Refund Policy, based on contract and sometimes legal obligation for recordkeeping.
- Deploy optional analytics and marketing technologies only on the basis of consent where the law in your country requires it, as explained in the Cookie Policy.
- Meet legal obligations where we must keep records, respond to lawful requests, or protect rights in legal proceedings, including defense against fraud or misuse.
Your rights and how to exercise them
Subject to the conditions in applicable law, you may have the right to obtain confirmation of whether we process your personal data, to access a copy, to have inaccurate data rectified, to have data erased, to obtain restriction in certain cases, to receive a portable copy in a structured, machine-readable format for data you provided where processing is automated and based on consent or contract, to object to processing that relies on legitimate interests, and, where the law of your region allows, to not be subject to a decision based solely on automated processing that has legal or similarly significant effects on you, which we do not use for such decisions in the way this Site is currently operated.
You may withdraw consent for optional cookies or marketing that depends on it at any time, without affecting the lawfulness of prior processing, by adjusting your choice in the interface or in your browser, as described in the Cookie Policy. You may also lodge a complaint with a supervisory authority in your country, such as a data protection authority in the EEA, the ICO in the United Kingdom, or a US state privacy regulator if and when a complaint mechanism becomes applicable to your matter.
Requests to exercise any other rights should be sent to the email in the data controller section. We may need to ask for proof of identity or further detail to find your data, and the law may allow us to refuse or charge a fee in narrow circumstances.
How long we keep personal data
We store data for no longer than is necessary in relation to the purpose, unless a longer period is required by law, needed to assert or defend a legal claim, or tied to a backup cycle that is later overwritten. General guidelines: contact and casual inquiry records are often reviewed and deleted on a cycle of up to twenty-four (24) months after the last message unless a longer period is needed for a dispute, contract, or order you placed; order and tax-related records are kept for the time applicable tax and company law in California and federal law in the United States may require, which can be several years; server logs in production environments are typically rotated in weeks or months depending on capacity planning; and cookies follow the durations in the Cookie Policy. These periods can change with technology or legal advice, and we will adjust internal schedules accordingly while updating the high-level description here when the change is material to you.
Security of processing
We use reasonable administrative, physical, and technical measures appropriate to the nature of the data, including where available encryption in transit for connections to the Site, access control for internal systems, and careful selection of vendors. No method of storage or transmission over the internet is one hundred per cent safe, and we cannot promise that unauthorized access, loss, or alteration will never occur. If we become aware of an incident that poses a high risk to your rights, we will inform you and regulators as required by law.
International data transfers
Our primary operations and hosting may be in the United States. If you are in the EEA, the UK, or Switzerland, your data can be processed in the United States or in other countries where our subprocessors maintain infrastructure. When we transfer personal data to countries that have not been recognized as providing an adequate level of protection, we will implement a safeguard such as the European Commission’s standard contractual clauses, the UK’s international data transfer addendum, or other mechanisms recognized by your local law, and you may request a copy of the relevant safeguards where applicable.
Processors, recipients, and commercial exchanges
We work with service providers for hosting, email delivery, payment processing, analytics when you have opted in, and customer support tools. They process data only on our instructions and under agreements that require confidentiality and security. We do not sell your personal data for money. Where US state “sale” or “share” concepts apply, we will describe those practices in more detail in a supplement for residents of those states if and when the Site triggers those definitions.
Minors
The Site is intended for individuals who are at least sixteen (16) years old in the European sense of age, or a higher age if your jurisdiction requires. We do not knowingly collect personal data from children below that line for marketing purposes, and if we learn that we have done so, we will delete the information, subject to legal retention duties.
Changes to this policy and how to contact us
We can update this Privacy Policy when our practices, the Site, or the law change. The hero section at the top of this page shows a dynamic effective and last reviewed date that always reflects the calendar day in your browser when the page is loaded, so you can see the current publication moment; substantive edits may be accompanied by a short summary on the home page or by email to active customers when we are allowed and able to do so. Continued use of the Site after changes means you acknowledge the version then in force, to the extent permitted in your country.
For any privacy request, contact the email and postal address in the data controller section. We will work with you in good faith within the timeframes the law provides.