Privacy Notice

Grill Times is operated by John Cooley, who is the data controller for the personal data described in this notice. That means we decide how and why your personal data is processed.

• Account data — your email address and login credentials, to create and secure your account (legal basis: performance of our contract with you).
• Your content — recipes you add, hearts, shopping lists, source links and recipe views, to provide the service and personalize suggestions (contract).
• Support messages — if you contact us, to respond and help you (legitimate interests).
• Usage and device data — basic telemetry, device identifiers and IP address, to keep the service secure, prevent fraud and improve the product (legitimate interests).

Payment details are collected and processed by Paddle, our Merchant of Record, not by us — see "Who we share data with" below.

• Service providers — hosting, database and analytics providers that process data on our behalf.
• Paddle — our Merchant of Record, for the sale of subscriptions, payment processing, subscription management, tax compliance and invoicing.
• Professional advisers — such as lawyers and accountants, where needed.
• Authorities — where we are required to do so by law.

We keep your personal data for as long as your account is active and as needed to provide the service. When data is no longer needed, we delete or anonymise it, unless the law requires us to keep it longer.

Depending on where you live, you may have the right to access, correct or delete your personal data, to restrict or object to processing, to data portability, and to withdraw consent where processing is based on consent. To exercise any of these rights, email us at contact@grilltimes.com. If you are in the UK or EEA, you also have the right to complain to your supervisory authority; we aim to respond to requests within one month.

Some of our service providers process data outside the UK/EEA. Where they do, we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions.

We use appropriate technical and organisational measures to protect your data, including encryption in transit and access controls that limit who can see your information.

We use essential cookies and local storage to keep you signed in and remember your preferences (such as timers and shopping list marks). We do not use marketing cookies. You can clear these in your browser settings, though sign-in will stop working without the essential ones.