1. Scope

This Privacy Policy explains how Dishro (“Dishro,” “we,” “us,” or “our”) collects, uses, shares, and safeguards personal information when you visit www.dishro.com, create an account, purchase our digital recipe PDFs, download content, or otherwise interact with our U.S.-only online services (the “Services”). By using the Services, you agree to this Policy. If you do not agree, please do not use the Services.

2. Information We Collect

2.1 Information you provide

• Account details (name, email, password).
• Order & billing information (billing name, address, email, phone; purchase details).
• Communications (support requests, reviews, survey responses).

2.2 Payment information

Payments are handled by third-party payment processors. We do not store full payment card numbers or card verification codes (CVV/CVC/CID). Our processors collect and process your payment data directly and are responsible for PCI DSS compliance.

2.3 Information collected automatically

• Device/usage data (IP address, browser, device identifiers, pages viewed, links clicked, referrer, timestamps).
• Cookies and similar technologies for authentication, checkout, security, analytics, and (if enabled) marketing/affiliate measurement. See Cookies & Tracking.

2.4 Information from third parties

• Payment & fraud-prevention partners (transaction approvals/declines, risk signals).
• Analytics/marketing/affiliate partners (aggregated insights and attribution data).

3. How We Use Information

• Provide the Services (accounts, purchases, instant digital delivery, customer support).
• Authenticate users and secure accounts; prevent fraud/abuse; enforce Terms.
• Operate, analyze, and improve our website, products, and user experience.
• Communicate with you (transactional emails, service updates, and—if you opt in—marketing).
• Comply with legal, tax, accounting, and regulatory obligations.

4. How We Share Information

• Service providers/processors (hosting, WordPress plugins, payment processing, email delivery, analytics, customer support, security, and fraud prevention) under contracts that restrict use to providing services for us and require safeguards.
• Payment processors to complete transactions and handle disputes/chargebacks.
• Advertising/analytics/affiliate partners (if used) to measure performance; we prefer aggregated or de-identified data when feasible.
• Business transfers (e.g., merger, acquisition, or asset sale).
• Legal and safety (comply with laws, subpoenas, law enforcement; protect our rights, users, and the public).

We do not sell personal information for money. If activities qualify as a “sale” or “sharing” under state law (e.g., certain cross-context behavioral advertising), we will provide the required notices and opt-out mechanisms.

5. Payments & Card-Network / PCI

• Card payments are processed by reputable third-party gateways.
• We do not store sensitive authentication data (e.g., CVV/CVC/CID) and do not retain full card numbers.
• We and our processors follow generally accepted security practices intended to protect cardholder data and meet PCI DSS expectations applicable to our setup.
• At checkout, we disclose the merchant name, merchant country (United States), total amount, and key policies.

6. Cookies & Tracking

We use cookies, web beacons, and similar technologies to:

• Keep you signed in and remember your cart.
• Enable checkout and prevent fraud.
• Understand site performance and improve content.
• Measure marketing and affiliate performance (if enabled).

Your choices

• Browser controls: You can set your browser to block or delete cookies. Essential cookies are required for our site to function.
• Targeted ads opt-out: Use industry tools such as the Digital Advertising Alliance “YourAdChoices” and the Network Advertising Initiative opt-out programs.
• Opt-out preference signals: Where required by law (e.g., California and Colorado), we honor recognized browser-based signals such as Global Privacy Control for “sale,” “sharing,” and/or targeted advertising opt-outs.

7. Data Retention

We retain personal information only as long as necessary for the purposes described in this Policy, including:

• While your account is active (and for a reasonable period after deletion for backups, fraud prevention, legal/regulatory obligations, and dispute resolution).
• Transaction records kept as required by tax, accounting, and legal obligations.

When retention is no longer necessary, we will delete or de-identify the data.

8. Data Security

We implement reasonable administrative, technical, and physical safeguards intended to protect personal information (e.g., encryption in transit, access controls, least-privilege access, backups, staff training, and vendor diligence). No method of transmission or storage is 100% secure, but we continually work to improve our practices.

9. Children’s Privacy

Our Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe a child under 13 has provided us personal information, please contact us at info@dishro.com; we will promptly delete it.

10. Your Privacy Rights (U.S.)

Depending on your state, you may have the right to:

• Access/Know the categories and specific pieces of personal information we collected about you.
• Delete personal information, subject to legal exceptions.
• Correct inaccurate personal information.
• Opt out of “sale” or “sharing” of personal information and/or targeted advertising where applicable.
• Limit use of sensitive personal information (where applicable).
• Appeal our decision on your request (for states that provide this right).

How to exercise your rights

Email info@dishro.com or call +1 (302) 526-8893. We may need to verify your identity (and, if applicable, your authorized agent’s authority) before fulfilling requests.

Opt-Out Preference Signals (GPC): Where required by law, we treat qualifying signals as opt-out requests for the browser or device sending the signal.

If we ever engage in activities considered a “sale” or “sharing” of personal information under state laws, we will provide a Do Not Sell or Share My Personal Information link and honor relevant signals.

11. State-Specific Notices

California (CCPA/CPRA)

• We provide notice of the categories of personal information collected, purposes, and whether we “sell” or “share” personal information.
• California residents can exercise the rights listed in Section 10 without discrimination.
• If applicable, we will display a “Do Not Sell or Share” link and honor opt-out preference signals.

Virginia, Colorado, Connecticut, Utah

• Residents may request access, deletion, correction, and opt-out of targeted advertising, sale, and certain profiling.
• Appeals: If we deny your request, you may appeal by replying to our decision email or writing to info@dishro.com within 45 days. If your appeal is denied, you may contact your state Attorney General.

Nevada

• Nevada residents may opt out of the sale of “covered information” by emailing info@dishro.com with “Nevada Opt-Out” in the subject line.

12. Third-Party Links & Services

Our Services may link to third-party websites, apps, plugins, or services. We are not responsible for the privacy practices of those third parties. Review their policies to understand their practices.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The “Effective date” at the top shows when it was last updated. Material changes will be posted on our site. Your continued use of the Services after an update constitutes acceptance of the revised Policy.

14. Contact Us