Privacy policy

Last updated: 24 October 2026

This Privacy Policy explains how DYLVERA LLC, trading as Dylvera Chef ("we", "us"), collects, uses, shares and protects personal information when you visit our website or buy from us, wherever you are. It is written to meet the requirements of the EU and UK General Data Protection Regulation (GDPR), US state privacy laws (including the California Consumer Privacy Act as amended by the CPRA), Canada's PIPEDA and Quebec's Law 25, the Australian Privacy Act 1988, New Zealand's Privacy Act 2020, Brazil's LGPD and other applicable laws.

1. Who is responsible (data controller)

DYLVERA LLC (trading as Dylvera Chef) · EIN 98-1983897
1209 Mountain Rd Pl NE, Ste R, Albuquerque, NM 87110, United States
Email: contact@dylverachef.com · Phone: +1 575 251 2183

Privacy contact (person in charge of personal information): Privacy Officer, contact@dylverachef.com.

2. What we collect

  • Identifiers & contact details: Name, email, billing address, phone (optional) (Source: you, at checkout or via forms)
  • Commercial information: Products bought, order history, refund requests (Source: your orders)
  • Payment information: Payment confirmation, last four digits, card type and expiry. If you join the membership or confirm an additional purchase, a secure payment token stored by our payment provider. Full card numbers are handled only by our payment providers and never stored by us. (Source: payment providers)
  • Membership information: Membership status, billing dates, renewal and cancellation history, consent records (Source: your account and orders)
  • Internet & device information: IP address, approximate location, browser, device, pages viewed, cookie identifiers (Source: cookies and similar technologies)
  • Communications: Messages you send us, newsletter preferences (Source: you)
  • Checkout acknowledgements: Your confirmation that you requested immediate access to digital content, with time stamp (Source: you, in the cart)

We do not intentionally collect sensitive information (such as health data). Please don't send us health details; if you do, we will only use them to answer your question and then delete them.

3. Why we use it, and our legal bases

  • To sell and deliver your products, send receipts and provide support — performance of a contract.
  • To take recurring membership payments and payments for additional purchases you confirm, using your securely stored payment details ("off-session" payments) — performance of a contract and your authorisation. We never use stored details for charges you haven't agreed to.
  • To send membership confirmations, payment receipts and cancellation confirmations — performance of a contract and legal obligations.
  • To prevent fraud, secure our store and handle disputes — legitimate interests and legal obligations.
  • To keep tax and accounting records — legal obligation.
  • To send our newsletter — your consent, which you can withdraw at any time with the unsubscribe link in every email.
  • Analytics and marketing cookies — your consent where the law requires it (for example in the EU/UK), otherwise our legitimate interest in improving the store. You can change your choice at any time via "Cookie preferences" in the footer.

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

4. Who we share it with

We share personal information only with service providers that help us run the store, under contracts that require them to protect it and use it only on our instructions:

  • Shopify — e-commerce platform, hosting and checkout (Canada, USA, Ireland and other locations);
  • Payment processors, such as Stripe via Shopify Payments, PayPal and digital-wallet providers;
  • Email, digital-delivery and customer-support tools;
  • Professional advisers (accountants, lawyers) and authorities where required by law.

We do not sell your personal information, and we do not "share" it for cross-context behavioural advertising as those terms are defined under California law. If we ever use advertising cookies, we will ask for consent where required and honour Global Privacy Control (GPC) signals as an opt-out.

5. International transfers

We are based in the United States and our providers may process data in the USA, Canada, the EU and other countries. When personal data from the EU, EEA, UK or Switzerland is transferred to countries without an adequacy decision, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK Addendum), or the provider's certification under the EU–US Data Privacy Framework where applicable. For Australian residents, we take reasonable steps to ensure overseas recipients handle information consistently with the Australian Privacy Principles.

6. Cookies

We use strictly necessary cookies to run the store (for example, to keep your cart). With your consent where required, we and Shopify may also use analytics and marketing cookies. You can manage your choices through our cookie banner, the "Cookie preferences" link and your browser settings.

7. How long we keep it

  • Order and invoice records: up to 7 years, to meet tax and accounting laws.
  • Support messages: up to 3 years after the last contact.
  • Newsletter data: until you unsubscribe.
  • Cookie data: according to the lifetime shown in the cookie banner.

8. Security

Our store runs on Shopify's PCI DSS-compliant platform with encrypted (HTTPS) connections, and access to customer data is limited to people who need it. No system is completely secure, but we take reasonable technical and organisational measures to protect your information. If a breach is likely to affect you, we will notify you and the relevant authorities as the law requires.

9. Your rights

Depending on where you live, you may have the right to:

  • access the personal information we hold about you and receive a copy (including in a portable format);
  • correct inaccurate information;
  • delete your information (subject to legal retention duties);
  • restrict or object to certain processing, including direct marketing;
  • withdraw consent at any time, without affecting earlier processing;
  • opt out of the sale or sharing of personal information and of targeted advertising (US state laws) — note that we do not sell or share it;
  • not be discriminated against for exercising your rights;
  • appeal our decision on your request (US state laws) by replying to our response.

To make a request, email contact@dylverachef.com. We will verify your identity (usually by confirming your order email) and respond within one month (GDPR), 45 days (US state laws) or 30 days (other laws), as applicable. You may use an authorised agent where the law allows.

10. Complaints

Please contact us first and we will try to resolve your concern. You also have the right to complain to your local data protection authority — for example your EU supervisory authority, the UK Information Commissioner's Office (ico.org.uk), the Office of the Privacy Commissioner of Canada, the Commission d'accès à l'information du Québec, the Office of the Australian Information Commissioner (oaic.gov.au), the New Zealand Privacy Commissioner or Brazil's ANPD.

11. Children

Our store is not directed at children. We do not knowingly collect personal information from children under 16 (under 13 in the United States). If you believe a child has given us personal information, contact us and we will delete it.

12. Marketing emails

We only send marketing emails if you subscribe. Every email identifies us, includes our postal address and has a one-click unsubscribe link, in line with the EU ePrivacy rules, the US CAN-SPAM Act, Canada's Anti-Spam Legislation (CASL) and Australia's Spam Act 2003.

13. Changes

We may update this policy. The "last updated" date shows when it last changed, and we will notify you of material changes where required.