Consumer Health Data Policy

Some US states, including Washington, Nevada and Connecticut, protect "consumer health data": information that could suggest something about a person's health. Asking for a kidney-friendly cooking guide could suggest that you, or someone you cook for, follows a kidney-friendly way of eating. So we treat what you share with us as consumer health data and look after it the way this page describes. It sits alongside our Privacy Policy.

What we collect, and why

• Your email address, to send the free download you asked for and Anna's kitchen emails.
• Your first name, only if you give it, to greet you by name.
• Which free download you chose, and whether you reached it from inside Anna's cookbook, so we send the right download and recipes that fit it.
• If you take the Calm Kitchen Check-In: your answers stay in your browser and are never sent to us. If you then ask for your free plan, we keep only which of the three results you got (for example "Building Your Rhythm") and, if you answer it, whether you already have Anna's cookbook, so we send the right download.
• How you found us (for example Pinterest or an email link), read from the link you clicked, so we know which places help readers find us.
• Your consent: the date and time you ticked the box, and which version of this policy you agreed to.
• Whether you open our emails or click their links, which our email service records, so we can see which emails help and stop writing to people who no longer read them.
• Website visits: Google Analytics records the pages visited, a rough location (city or country), device and browser type, the page you came from, clicks on links to Amazon, and that a signup happened, without which download or who. It uses cookies and a random ID, never your name or email. We have turned off Google's advertising features for this site.
• Your IP address, for about 10 minutes when you sign up, to stop automated spam signups.

We never ask about your health, your diagnosis or test results.

Where it comes from

From you, when you fill in a signup form. From your browser, through the analytics cookies and the link you clicked to reach us. From our email service, which records email opens and clicks.

Who we share it with

We do not sell your information, and we do not share it for advertising. Only these service providers handle it, and only to do their job for us:

• Loops (email service, United States) stores your email, first name, download choice, check-in result group if you took it, and consent record, and sends our emails.
• Vercel (website hosting, United States) runs this website and its signup form.
• Upstash (a small database service used through Vercel) holds your IP address for about 10 minutes for the spam check.
• Google Analytics (Google LLC, United States) measures website visits as described above.

Anna's cookbook is sold on Amazon. If you click through to Amazon, Amazon's own privacy policy applies there.

Your rights

• See it. Ask whether we hold information about you, get a copy, and get a list of every service that received it, with a way to contact each one.
• Withdraw your consent. Use the unsubscribe link at the bottom of any email, or write to us.
• Delete it. We delete it from our systems and ask our service providers to delete it too. Copies in backups are removed within six months.

How to ask: email anna@annabrookfield.com with the subject "My data". Please write from the email address you signed up with, so we can confirm the request is yours. It is free, up to twice a year. We reply within 45 days. If we ever need longer, we will tell you why within those 45 days, and take at most 45 more.

If we say no: reply with the word "Appeal" and we will look again and answer in writing within 45 days. If we still say no and you live in Washington, you can contact the Washington State Attorney General.

Changes

If we ever want to collect something new, or use your information for a new purpose, we will tell you first and ask for your consent again.