Privacy Policy

Last updated: November 1, 2026

This Privacy Policy explains what personal information PlinzoKitchen ("we", "us") collects when you visit our site or buy a digital recipe book, how we use it, and the choices you have. PlinzoKitchen is operated by Muhammad AbdulRehman Khan, St# 69, I-10/1, Islamabad, Punjab 44000, Pakistan.

Information We Collect

Account details: your name, email address and, if you set one, a password. Passwords are stored as a one-way hash, never as readable text.
Order details: what you bought, the price, the date and the payment status.
Saved cart: if you are signed in, the books in your cart, so it follows you between devices. Our staff can see carts left unfinished, to understand what stops people buying.
Payment details: payments are taken by Paddle, our payment partner. We never see or store your full card number. Paddle tells us whether a payment succeeded and gives us a payment reference.
Device and usage data: your IP address, browser type and device type, recorded when you sign in, place an order, download a file or arrive through an affiliate link. For download records we store a shortened IP address that identifies a network, not a single device.
Cookies and local storage: small files that keep you signed in, remember your cart and record your cookie choices. See our Cookie Policy.
Messages: anything you send us through the contact form, support chat, a refund request or a product review.

How We Use Information

To deliver your purchase and give you access to your downloads.
To send order, payment, refund and account emails.
To send a short series of follow-up emails after a purchase. Every one of these has an unsubscribe link.
To answer support requests and handle refund requests.
To prevent fraud and misuse of download links.
To credit affiliates and referrers for sales they bring us.
To understand how the store is used: page and product view counts that are not tied to you and, only if you agree to analytics cookies, an anonymous visitor ID (the pk_vid cookie) and Google Analytics. The visitor ID is never linked to your account or your orders.

Legal Basis for Processing (GDPR)

If you are in the European Economic Area or the United Kingdom, we rely on these legal bases:

Contract: to deliver what you bought and run your account.
Legitimate interests: to keep the site secure, prevent fraud, credit affiliates and improve our products.
Consent: for analytics and marketing cookies, and for follow-up emails where consent is required. You can withdraw consent at any time.
Legal obligation: to keep tax and accounting records.

Sharing with Third Parties

We do not sell your personal information. We share it only with the companies that help us run the store:

Paddle: payment processing, sales tax and fraud checks. Paddle acts as Merchant of Record for orders placed through its checkout.
Our email delivery provider: to send you order and account emails.
Our hosting and database providers: to run the site and store its data.
Cloudflare, where enabled: network security and faster page delivery.
Google Analytics, only if it is switched on and you accept analytics cookies.
Sentry, where enabled: error reports when a page or request fails, so we can fix it. A report contains technical details such as the page address, the browser and the error itself — not your IP address, email address, cookies or payment details.
YouTube and Vimeo: only if you press play on a product video. Your browser then connects to that service, which receives your IP address and browser details.
Affiliates: an affiliate who referred your order sees that a sale happened and what it earned them. They do not see your name, email address or payment details.

We may also share information when the law requires it, or to protect our rights and our customers.

Cookies and Tracking

We use essential cookies to run the site, and analytics cookies only with your consent. Our Cookie Policy lists each one and explains how to change your choice. Our site does not currently respond to browser "Do Not Track" signals; use the cookie settings instead. We do not let other companies collect information about your activity on other sites through ours.

Your Rights

If you live in California (CCPA / CPRA), you have the right to:

Know what personal information we hold about you and how we use it.
Ask us to delete it.
Ask us to correct it.
Opt out of the sale or sharing of personal information. We do not sell or share it for advertising.
Not be treated differently for using these rights.

If you are in the EEA or the UK (GDPR), you have the right to:

Access your personal data.
Have it corrected (rectification).
Have it deleted (erasure).
Receive a copy you can take elsewhere (portability).
Object to, or ask us to limit, how we use it.
Complain to your local data protection authority.

To use any of these rights, email support@plinzokitchen.com. We may ask you to confirm your identity first. We answer within 30 days.

Staff Access to Your Account

Authorized staff can look up accounts and orders to run the store. For support and debugging, a senior administrator (Super Admin) can also view your account as you would see it, using a feature called Login as User. This access is read-only: they can see your account, orders and recent sign-in details, but cannot change anything, buy anything or download your files while viewing. Each use needs a stated reason and a fresh two-factor code, ends after 30 minutes, and is recorded in an audit log.

Data Retention

We keep your account and order records for as long as your account is open, and afterwards for as long as tax, accounting and legal rules require. If you ask us to delete an account that has orders, we remove your name and contact details and keep only the order records we must keep.

Data Security

Passwords are hashed. Sign-in sessions use secure, HTTP-only cookies. Purchased files are stored privately and served only through signed, time-limited links. Payment card data never touches our servers. No system is perfectly secure, so we cannot promise absolute security.

International Transfers

Our service providers may store and process your information in the United States and other countries. These countries may have different data protection laws from your own. Where the law requires it, we rely on approved safeguards such as standard contractual clauses.

Children's Privacy

PlinzoKitchen is not directed to children under 13, and we do not knowingly collect personal information from them (COPPA). If you believe a child has given us personal information, email support@plinzokitchen.com and we will delete it.

Changes to This Policy

We may update this policy. When we do, we change the date at the top of this page. If a change is significant, we will tell you by email or with a notice on the site.

Contact

Privacy questions and requests go to our data protection contact at support@plinzokitchen.com, or by post to Muhammad AbdulRehman Khan, St# 69, I-10/1, Islamabad, Punjab 44000, Pakistan.