Privacy Policy

The controller for the personal data described here is:

Katherine Cerrato
Einar Hansens Esplanad 29
211 13 Malmö
Sweden
Email: contact.thekath@gmail.com

No data protection officer has been appointed, as this is not required for a business of this size. Please send all privacy questions to the address above.

Free calculator results. When you request your protein, net carb, or calorie results, we collect your name, email address, and the marketing consent checkbox. The figures you enter (weight, height, age, activity level) are processed in your browser to calculate your results and are not stored on our servers. Legal basis: your consent (Art. 6(1)(a) GDPR).

Cookbook purchases. When you buy a cookbook, we store your name, email address, the product purchased, the amount paid, the payment status, and a private download token so you can re-download your file. Card details are entered directly with our payment provider and never reach our servers. Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and our legal bookkeeping obligations (Art. 6(1)(c) GDPR).

Emails we send you. Order confirmations and download links are sent because they are part of your purchase. Recipes, cooking tips, and launch announcements are only sent if you ticked the marketing consent box, and you can withdraw that consent at any time.

Technical data. Our hosting provider processes standard server request data (IP address, browser type, requested page, timestamp) to deliver the site securely. Legal basis: our legitimate interest in operating a secure website (Art. 6(1)(f) GDPR).

We do not use advertising or tracking cookies, and we do not run third-party analytics or advertising pixels on this site.

• Your browser's local storage remembers the name and email you entered so you don't have to retype them. It stays on your device and you can clear it at any time via your browser settings.
• Our payment provider sets cookies that are strictly necessary to process your payment securely and to prevent fraud.

We never sell your personal data. We share it only with the service providers required to run this website, each acting as a processor or independent controller under a data processing agreement:

• Stripe (Stripe Payments Europe, Ltd., Ireland) — payment processing, fraud prevention, and receipts.
• Lovable Cloud / Supabase — database and file hosting for lead records, orders, and cookbook files.
• Our hosting provider — delivery of the website itself.

Where a provider processes data outside the European Economic Area, that transfer is covered by the European Commission's Standard Contractual Clauses or an adequacy decision.

• Marketing contacts: until you unsubscribe or ask us to delete your record.
• Purchase and order records: for as long as your download link stays active, and thereafter for the retention period required by accounting and tax law.
• Server logs: kept only for a short period for security and troubleshooting.

Under the GDPR you have the right to:

• Access the personal data we hold about you and receive a copy of it.
• Have inaccurate data corrected.
• Have your data erased where there is no overriding legal obligation to keep it.
• Restrict or object to certain processing.
• Receive your data in a portable, machine-readable format.
• Withdraw consent at any time, without affecting processing carried out before withdrawal.

To exercise any of these rights, email contact.thekath@gmail.com. You also have the right to lodge a complaint with your national supervisory authority — in Sweden this is the Swedish Authority for Privacy Protection (IMY).

The site is served over HTTPS, cookbook files are stored in a private bucket and only reachable through short-lived signed links tied to your order, and access to the database is restricted to server-side code. No online service can be guaranteed absolutely secure, but we take reasonable technical and organisational measures to protect your data.

We may update this policy as the site develops. The date at the top always reflects the current version.