THE DISHCOVERY / INFORMATION RECIPE
Privacy Policy
October 2026 • thedishcovery.com
How the ingredients of your information are handled.
01 / Our table, your information
TheDishcovery is the brand under which this website and its associated services are operated. This Privacy Policy describes information practices connected with thedishcovery.com, the Dish Kits store, The Passport Box ordering program, The Sunday Dish newsletter and the site’s cooking tools (together, the “Site”). “We,” “our” and “us” refer to the business operating the Site under the TheDishcovery brand. The brand designation does not, by itself, identify a separate incorporated legal entity. This notice is effective October 2026 and should be read with our separate Terms & Conditions.
02 / What comes into the kitchen
When you order, we may collect your name, email address, shipping and billing details, telephone number where requested, selected kits, quantities, heat preference, chosen delivery interval, order history, and communications about an order. If you subscribe to The Sunday Dish, we collect your email address and records reasonably necessary to administer your subscription and opt-out requests. If you contact support, we process the information you choose to send. Please avoid including unnecessary medical details, financial account credentials or government identifiers in ordinary messages.
03 / At checkout
Orders are paid online through the checkout methods presented on the Site. Payment processors may receive and process payment credentials under their own terms and legal duties. We may receive limited transaction information such as authorization status, payment reference, amount, method summary, fraud signals, chargeback status and refund status. We do not claim to collect or retain complete card numbers ourselves. Actual processor identity and payment disclosures should be shown where required at checkout.
04 / Your browser’s cooking notes
The Food Passport stamps are stored in the browser used to access the Site, not in a server-side customer profile under the confirmed operating model. Fridge Raid, Flavor Map, recipe serving adjustments and cooking timers likewise use session or browser-side choices; we do not claim to maintain a separate personal history of these selections. Clearing browser storage, using another device or private browsing can remove or prevent access to locally held stamps and preferences. Cart functionality may also use essential local storage or session identifiers.
05 / Technical ingredients
For the Site to operate, servers and necessary infrastructure may handle IP addresses, browser and device information, requested pages, time of access, cart/session identifiers, security logs and error diagnostics. This information is used for delivery, protection against abuse, checkout continuity and troubleshooting. The confirmed setup uses essential cookies or equivalent storage, not advertising pixels or behavioral retargeting. We do not claim an optional analytics or ad-tracking program that has not been confirmed.
06 / Why each detail is used
We process information to display and fulfill orders, collect payment, arrange delivery within the United States, respond to inquiries, communicate order status, handle problems with goods, administer manually confirmed Passport Box purchases, maintain the browser-based cooking tools, deliver The Sunday Dish when requested, respect opt-outs, protect the Site, investigate fraud and meet accounting, tax and other legal obligations. We do not treat an ordinary purchase as automatic enrollment in promotional emails.
07 / The Passport Box is not automatic billing
The Site displays a Passport Box offering with a per-box price, suggested monthly or every-two-month cadence, and the ability to skip or cancel. Under the business model confirmed for this Policy, each box is paid for separately following customer confirmation; there is no automatic recurring charge merely because a customer selected a delivery preference. We process order details and preferences needed to communicate and complete a confirmed box order. Any future change to automatic renewal would require appropriate disclosures, consent and updates to the governing terms before implementation.
08 / Sunday mail, by choice
The Sunday Dish is a voluntary newsletter about TheDishcovery’s own dishes, recipes, products and promotions. We do not currently describe sharing its mailing list for third-party affiliate campaigns. Readers can unsubscribe using the link in an email or by contacting support@thedishcovery.com. We may retain a minimal suppression record to ensure an opt-out is honored. Transactional messages concerning a placed order may still be sent when necessary and lawful.
09 / Essential cookies only
Necessary cookies and browser storage support core features such as carts, checkout continuity, session security and the locally saved Food Passport. If these technologies are disabled, parts of the Site may fail or reset. Under the confirmed operating model, the Site does not use nonessential advertising or retargeting cookies. If practices change, this notice and any legally required choice or consent mechanism must be updated before new tracking is activated.
10 / Who handles information with us
Information may be shared with payment processors, commerce and hosting providers, shipping carriers, email-delivery vendors, customer-service and security providers, and professional advisers to the extent needed for their functions. Certain providers may act as independent controllers for their own regulatory obligations. We may disclose information when required by law or in a legitimate business transfer, subject to applicable safeguards. We do not currently sell personal information or share it for cross-context behavioral advertising. This statement reflects the described practices and must be revised if they change.
11 / Legal grounds, when required
Where a law such as the GDPR or UK GDPR applies, processing needed to perform a confirmed purchase may rely on contractual necessity; fraud prevention and reliable operation may rely on legitimate interests where appropriate; statutory records may rely on legal obligations; and optional newsletters or nonessential tracking may require consent. We assess the correct ground for each activity. Merely visiting the Site or receiving a message is not treated as universal consent to all processing.
12 / Keeping and removing records
Order and payment-reference records may be retained for fulfillment, customer support, accounting, taxes, fraud prevention and dispute handling for periods justified by those purposes and applicable law. Newsletter information is retained while the subscription is active, subject to minimal opt-out records. Technical logs are kept for limited operational and security purposes. Browser-stored Passport data remains on the user’s device until cleared or otherwise removed by browser behavior. We delete or de-identify server-side information when no longer needed, allowing for backups and lawful preservation.
13 / Safety and data security
We apply reasonable administrative and technical measures appropriate to the information involved, such as access restrictions and secure transmission where supported. No system can guarantee absolute security. We review suspected incidents and provide legally required notifications when applicable. This Policy does not disclaim nonwaivable duties relating to personal information.
14 / Your choices and legal rights
Depending on the law that applies to the actual operator and individual request, you may have rights to access, correct, delete, obtain a copy of, restrict or object to processing of personal information, withdraw consent, or appeal a decision. Certain U.S. states recognize opt-outs from defined sales or targeted advertising, but the current practices described here do not include those activities. Residents of California, Nevada and other states, and individuals in the EEA or UK where applicable, may request any rights afforded by the relevant law. Contact support@thedishcovery.com. We may request reasonable identity verification and apply lawful exceptions and deadlines.
15 / Children, food preferences and sensitive information
The Site is a general-audience shopping and cooking service, not directed to children under 13. We do not knowingly solicit personal information from such children. Choosing a heat level or checking ingredients in Fridge Raid does not mean we request medical records, allergy diagnoses or sensitive health profiles. Customers should not transmit sensitive medical information through ordinary support channels.
16 / Cross-border services and changes
The current shipping offer is limited to the United States, but infrastructure and visitors may be located elsewhere. Where a cross-border transfer is regulated, we will use the safeguards required by applicable law. We may update this Policy to reflect genuine changes in tools, vendors or law and will show the revised date; material notice will be provided where required. The Terms & Conditions govern ordering and use of content, while this Policy explains information practices.
17 / Write to us
TheDishcovery is the brand under which this website and its associated services are operated.
Website: https://thedishcovery.com/
Privacy inquiries and general support: support@thedishcovery.com
Please provide enough information for us to identify the relevant order, subscription or record. We may verify requests proportionately before disclosing or changing personal information. This Policy does not publish a physical mailing address. Any legally required seller-identification or commercial-email physical-address disclosure must still be provided through an appropriate channel.