Last updated: December 2025
The data controller responsible for your personal data is Chef H. Delgado (Diego Delgado), with registered address at Rua da Meditacao 44, 4150-487 Porto, Portugal, Tax ID (NIF): 322139716. For any questions regarding this Privacy Policy or to exercise your rights, please contact us at diego@chefhdelgado.com.
Account Information: When you create an account, we collect your email address, first and last name, display name, profile photo (if you sign in with Google or Facebook), and account creation date.
Payment Information: When you make a purchase, we collect your billing name and email, country of residence, transaction details (amount, currency, date), and purchased courses. We do not store your credit card information—all payment processing is handled securely by Stripe.
Technical Data: We automatically collect technical information including your IP address, browser type and version, operating system, device type, pages visited and time spent, and referring website.
Marketing Data: With your consent, we collect newsletter subscription preferences, email engagement data (opens, clicks), and advertising identifiers (if you arrived via ads).
Performance of a Contract (Art. 6(1)(b)): When you purchase a course, we process your data to create and manage your account, process your payment, provide access to purchased courses, send purchase confirmations and receipts, and provide customer support.
Consent (Art. 6(1)(a)): With your explicit consent, we process data for sending marketing emails and newsletters, setting non-essential cookies (analytics, marketing), and sharing data with advertising platforms. You can withdraw your consent at any time by unsubscribing from emails or adjusting your cookie preferences.
Legitimate Interest (Art. 6(1)(f)): We may process data based on our legitimate interests for improving our website and services, preventing fraud and ensuring security, analyzing website usage patterns, and sending transactional emails related to your account.
Legal Obligation (Art. 6(1)(c)): We process data to comply with legal obligations such as tax and accounting requirements, and responding to legal requests from authorities.
We use your personal data to provide and manage your course access, process payments and send receipts, send account-related communications, respond to your inquiries and provide support, send marketing communications (with your consent), improve our website and services, analyze website usage and optimize user experience, prevent fraud and ensure security, and comply with legal obligations.
Essential Services: We use Firebase (Google) for authentication and database, Stripe for payment processing, and Vercel for website hosting. All these services are based in the USA.
Marketing and Analytics: We use Google Analytics for website analytics, Meta (Facebook/Instagram) for advertising and conversion tracking, Microsoft Clarity for session recording and heatmaps, and Mailchimp for email marketing. All these services are based in the USA.
Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA), primarily the United States. When we transfer data outside the EEA, we ensure appropriate safeguards are in place:
You can request more information about the safeguards in place by contacting us.
We retain your personal data only for as long as necessary. Account data is kept until you delete your account plus 30 days. Transaction records are retained for 7 years as required by law. Course access data is kept for the lifetime of your account as per purchase terms. Marketing preferences are stored until you unsubscribe plus 30 days. Analytics data is retained for 26 months (Google Analytics default). For cookie retention periods, please see our Cookie Policy.
Under the General Data Protection Regulation (GDPR), you have the right of access (Art. 15) to request a copy of your personal data, the right to rectification (Art. 16) to correct inaccurate data, the right to erasure (Art. 17) to request deletion of your data (subject to legal exceptions), the right to restrict processing (Art. 18) while a complaint is being resolved, the right to data portability (Art. 20) to receive your data in a machine-readable format, and the right to object (Art. 21) to processing for direct marketing purposes. Where processing is based on consent, you may withdraw it at any time (Art. 7).
To exercise any of these rights, please contact us at diego@chefhdelgado.com. We will respond within 30 days and may request additional information to verify your identity.
We implement appropriate technical and organizational measures to protect your personal data, including:
We use cookies and similar technologies on our website. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.
Our services are not directed at children under the age of 16. We do not knowingly collect personal data from children under 16. If you believe we have collected data from a child, please contact us immediately at diego@chefhdelgado.com.
We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting a notice on our website or sending you an email. We encourage you to review this policy periodically.
If you are not satisfied with our response to a data protection concern, you have the right to lodge a complaint with a supervisory authority. For Portugal, this is:
You may also contact the supervisory authority in your country of residence.
For any questions about this Privacy Policy or our data practices, please contact us at diego@chefhdelgado.com.