Get the Cookbook

Privacy Policy

Last updated: 1 August 2026

This page explains, in plain language, what we collect, why, and what you can ask us to do about it. We sell one thing — a PDF cookbook — so there isn't much to collect, and we don't collect anything we don't need.

Who we are

366 Mediterranean, operated by [TODO: legal entity name]. You can reach a human at contact@366mediterraneandiet.com.

What we collect

  • Order information. When you buy the cookbook, payment is handled by PayPal. PayPal shares with us the details we need to deliver your file and support your order: your name, your email address, the PayPal order ID, and the amount and currency paid. We never see or store your card number.
  • Download records. We store a random download token, when it was created, and how many times it has been used, so the link works for you and not for everyone you forward it to.
  • Newsletter email. Only if you type it into the subscribe box. You can unsubscribe from any email we send.
  • Aggregate traffic statistics. We use a cookieless analytics script that reports page views and referrers in aggregate. It does not set cookies, does not fingerprint you, and does not follow you to other websites.

What we do not do

  • We do not sell, rent, or trade your personal data. Ever.
  • We do not run advertising or tracking pixels on this site.
  • We do not add you to the newsletter because you bought something — you have to ask for it.

Why we're allowed to hold it

Order and download data: because we need it to perform the contract you entered into when you bought the book, and to meet tax record-keeping obligations. Newsletter email: because you consented, and you can withdraw that consent at any time. Aggregate statistics: our legitimate interest in knowing whether the site works.

Who else handles it

  • PayPal — payment processing and fraud checks.
  • Our hosting provider — stores the site, the order database, and the mailbox that sends your download link.
  • Our email/newsletter provider — only if you subscribed.

Each of them handles your data under their own terms and only to do the job we've asked them to do.

How long we keep it

Order records: as long as tax law requires us to keep proof of sale. Download tokens: they expire 72 hours after purchase and are deleted afterwards. Newsletter email: until you unsubscribe.

Your rights

You can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, or object to how we use it. Email contact@366mediterraneandiet.com and we'll act within 30 days. If you're in the UK or EU and you think we've got it wrong, you can also complain to your national data protection authority.

Children

This site isn't aimed at children and we don't knowingly collect data from anyone under 16.

Changes

If we change this policy we'll update the date at the top. Material changes that affect existing customers will be sent by email.

Questions about this page? Email contact@366mediterraneandiet.com.