#insecuriti kitchen
Privacy Policy
#insecuriti kitchen is an Ontario sole proprietorship operating in Canada. We conduct business publicly as #insecuriti kitchen and may use a pen name for creative work. This policy explains how we collect, use, disclose, store and protect personal information when you use our website, My Kitchen or related services.
Private by design does not mean “just trust us.” It means collecting less, using it for stated purposes and giving you meaningful choices.
1. Information we collect
Depending on how you use the site and My Kitchen, we may collect:
- Account information, including your account or customer ID, name, email address and the provider-specific identifier supplied when you sign in with Amazon, Google or Microsoft. We do not receive or store the password you use with your sign-in provider. We do not offer Facebook sign-in.
- What belongs to you, including purchases, claimed access, digital editions, licences, permitted transfers, favourites, language and privacy preferences, and the recipes or tools available to your account.
- Private cooking notes, including what you changed, what worked and what you would make again.
- Messages and update requests, including the email address, message and consent record you choose to provide when you contact us or request cookbook or product updates.
- Order and transaction information, when sales are enabled, including products ordered, order number, price, tax, currency, country, fulfilment details and payment status. Payment providers process payment-card details; we do not store complete card numbers.
- Legal acceptance records, when an acceptance is required, including the policy or terms version and hash, UTC acceptance time, connected account and email, acceptance source and method, site and order number if applicable.
- Limited technical and security information, including session cookies, timestamps, request or security logs, device or browser information and Internet Protocol addresses when reasonably needed to deliver or protect the service. Our commerce records do not store raw IP addresses or browser fingerprints.
2. Why we use it
We use personal information to create and protect accounts; authenticate you; show purchases, claims, licences, recipes, notes and preferences; process permitted transfers; respond to questions; send requested updates; process and document purchases; prevent misuse; meet legal, tax and accounting obligations; and improve what we make using limited, privacy-conscious information.
We limit collection, use and disclosure to identified purposes a reasonable person would consider appropriate. If we want to use personal information for a materially different purpose, we will explain that purpose and ask for consent where required.
3. Your choices inside My Kitchen
You can review and change optional privacy and communication choices under My Profile → Privacy. Cloudflare D1 holds the current account choice and its consent history, including cookbook edition updates. When you grant or withdraw email consent, the change is propagated to HubSpot as our communication provider; HubSpot does not decide what you consented to.
Joining the cookbook waitlist requests updates about this cookbook launch, including pre-orders and the ready edition. That choice appears separately under My Kitchen privacy settings, where you can turn it off or on. Broader marketing email and product-insights choices are separate, optional and never required to create an account or use something you own.
The text of your cooking notes is not copied into activity reporting, used for advertising or published to other customers.
If dinner didn’t turn out, nobody needs to know.
Deliberately submitted product feedback enters reporting only when the applicable product-insights choice is enabled. Reports use de-identified, combined information, and the current system suppresses a metric until at least ten customers have contributed to the group.
You may withdraw an optional consent at any time. If consent is necessary to provide a requested feature, withdrawing it may mean that feature can no longer be provided. Withdrawal does not undo processing already completed or records we must retain for legal, accounting, security or dispute purposes.
4. Service providers and disclosures
We use service providers only as reasonably needed to operate the service. Depending on the features available, these may include:
- Cloudflare for application delivery, security, protected content, Workers and database hosting;
- our WordPress and hosting providers for the public website;
- Amazon, Google and Microsoft for sign-in;
- HubSpot for approved contact, support and communication workflows;
- email-delivery providers; and
- WooCommerce and PayPal when commerce is enabled.
Providers receive only the information reasonably needed for their role. We may also disclose information when required or permitted by law, or when reasonably necessary to protect rights, safety and security.
We do not sell or rent personal information.
5. Storage and processing outside Canada
Some service providers process or store information outside Canada, including in the United States and Europe. Information in another country may be subject to that country’s laws and lawful-access processes.
Our dedicated Cloudflare D1 legal database uses a European Union jurisdiction restriction. That restriction applies to where the database runs and persists; it does not mean every Cloudflare service or website request is processed only in the European Union. We remain responsible for information transferred to service providers for processing and use contractual, technical and organizational measures appropriate to the circumstances.
6. Retention and deletion
We keep personal information only as long as reasonably necessary to provide the service, maintain required business and consent records, meet legal obligations, protect the platform, resolve disputes and respond to privacy requests.
If you permanently delete your My Kitchen account, the deletion process removes the account’s licences, favourites, privacy choices and private journal entries; unlinks activity records from the account; removes the connected customer-service record where configured; and removes the local WordPress account. De-identified information and limited financial, legal, security or suppression records may remain where required or permitted.
When information is no longer required, we delete, anonymize or securely dispose of it. Backup and recovery copies may remain for a limited period before rotating out.
7. Safeguards
We use safeguards appropriate to the sensitivity of the information, including encrypted connections, access controls, least-privilege service bindings, credential and secret management, monitoring, recovery controls and limits on which systems receive private or legal-acceptance information.
No online service can promise absolute security. If a privacy breach creates a real risk of significant harm, we will investigate, notify affected people and regulators as required, take corrective action and keep the records required by law.
8. Cookies that keep things working
We use required cookies and similar browser storage only to the extent needed to provide the services you request—for example, signing you in, protecting your account, maintaining your session, remembering essential preferences, operating a cart or checkout, and keeping My Kitchen working. Required storage stays active because those services cannot work without it.
Our privacy banner lets you reject optional cookies or accept the required-only setting. There are currently no optional advertising or behavioural-tracking cookies to accept. You can reopen Privacy choices from the bottom of any page.
We do not use cookies to build advertising profiles, place third-party behavioural advertising or follow you around the internet.
We’re not like those other guys. Dinner does not need a tracking strategy.
9. Emails you asked for
We send cookbook, product and account-related emails according to the choices you make. You can change which types of optional emails you receive at any time under My Profile → Privacy.
Commercial messages include the identification and unsubscribe information required by Canadian law. Changing your optional email choices does not affect access to products you own.
We may still send essential service messages about your account, a purchase or claim, security, a privacy request or a material change to a service you use. Those are operational messages, not marketing.
10. Access, correction and complaints
You may ask whether we hold personal information about you, request access to it, ask us to correct inaccurate or incomplete information, withdraw an optional consent or request account deletion, subject to lawful exceptions. We may need to verify your identity first.
If an immutable legal-acceptance entry cannot appropriately be altered, we may preserve the original record and append a linked correction or explanation instead.
You may also raise a privacy concern or complaint. If we do not resolve it, you may contact the Office of the Privacy Commissioner of Canada.
11. Changes to this policy
We may update this policy prospectively as our services, providers or legal obligations change. Material versions receive a new identifier, exact text or a verifiable canonical copy and hash, and additional notice or renewed consent where required.
Ontario, Canada
Use the contact form on the About page and mark the message “Privacy.”
We do not publish the proprietor’s home address or private legal name here. We provide legally required identifying or service information privately when the law requires it.

