Privacy Policy

Last updated: October 19, 2026

This Privacy Policy explains how Sundays at Margaret's collects, uses, shares and protects your personal information when you visit sundaysatmargarets.com, buy one of our cookbooks, sign up for our emails or contact us. It also explains your privacy rights and how to use them.

We never sell your personal information for money.

1. Who is responsible for your information

Sundays at Margaret's is operated by Moneza LLC, 1501 South Greeley Hwy, Ste C, Cheyenne, WY 82007, United States. Moneza LLC is the business responsible for your personal information (the "controller").

For any privacy question or request, contact our Privacy Officer at margaret@sundaysatmargarets.com.

2. Information we collect

Category	Examples	Where it comes from
Contact details	Name, email address, billing address, shipping address (for printed books), phone number (optional, or where a carrier needs it for delivery)	You, at checkout or when you contact us
Order and payment information	Products bought, order number, amount, currency, date, payment status, card type and last four digits	You and our payment provider. We never receive or store your full card number or security code.
Delivery and access records	Download emails sent, download activity, web edition access, IP address and time of access; for printed books, shipping and tracking information	Automatically, through our store and delivery tools
Account information	Login details and saved preferences, if you create an account	You
Communications	Emails and messages you send us, including through Instagram	You
Marketing preferences	Whether you signed up for our emails, and which emails you open or click	You and our email provider
Device and usage information	IP address, approximate location based on IP address, browser and device type, pages viewed, how you arrived at our website	Automatically, through cookies and similar technologies
Information from partners	Fraud-check results from our payment provider; information about ads you clicked from advertising platforms such as Meta (Facebook and Instagram) and Google	Our service providers and advertising partners
Reviews	Your review, rating and the name you choose to show	You

We do not ask for sensitive information, such as health information. Please do not send us health or medical details. If you mention them, for example about an allergy, we use them only to answer your message.

You can browse our website without giving us your name. To buy a book, we need your name and email address so we can deliver it.

3. How we use your information and our legal reasons

Purpose	Legal reason (UK and EU law)
Process your order and payment, deliver your books and web editions, re-send lost downloads, and print and ship printed books	Performing our contract with you
Answer your questions and provide customer service	Performing our contract with you; our legitimate interest in helping customers
Send order confirmations, download emails and important service messages	Performing our contract with you
Send recipes, news and offers by email	Your consent, or where the law allows, our legitimate interest in emailing existing customers about similar products (you can opt out at any time)
Prevent fraud, keep our store secure and protect our books against unauthorized sharing	Our legitimate interest in protecting our business and customers
Respond to payment disputes and chargebacks	Our legitimate interest in defending our legal rights
Measure and improve our website and products (analytics)	Your consent where the law requires it; otherwise our legitimate interest in improving our website
Show relevant ads on other websites and social media and measure our advertising	Your consent where the law requires it; otherwise our legitimate interest in marketing our products, with the right to opt out
Keep accounting and tax records and meet other legal duties	Legal obligation

Where we rely on legitimate interests, we have balanced our interests against your rights. You can object at any time (see Section 10).

Automated decisions. We do not make decisions that significantly affect you based only on automated processing. Our payment provider uses automated fraud checks that may flag or decline a payment. If that happens and you think it is a mistake, contact us and a person will review it.

4. Emails from us

• Order emails. We always send order confirmations and download emails. These are part of your purchase and are not marketing.
• Marketing emails. We send recipes, tips and offers only if you sign up, or, where the law allows, if you bought from us and did not opt out. You can unsubscribe at any time with the link in every email or by emailing us. We process unsubscribes promptly and within 10 business days at the latest.
• Every marketing email identifies us and includes our contact details and an unsubscribe link.
• Unsubscribing never affects delivery of your purchases.
• We do not currently send marketing text messages (SMS).

5. Cookies and similar technologies

Cookies are small files stored on your device. We and our partners use:

• Essential cookies that make the store work, such as your cart, checkout, security and remembering your privacy choices. These cannot be switched off.
• Preference cookies that remember settings such as your currency and region.
• Analytics cookies that help us understand how visitors use our website, such as Shopify Analytics and Google Analytics.
• Advertising cookies and pixels that help show relevant ads and measure our campaigns, such as the Meta Pixel and Google Ads.

Your choices:

• Visitors from the United Kingdom, the European Economic Area and Quebec see a cookie banner. Non-essential cookies stay off until you accept them, except where the law allows certain analytics or functionality cookies without consent. In that case you can still switch them off.
• Visitors from the United States can opt out of targeted advertising on our Your Privacy Choices page. You also find this link at the bottom of our website.
• We honor the Global Privacy Control (GPC) signal from browsers that support it as a request to opt out of the sale or sharing of personal information for targeted advertising.
• You can change your choices at any time with the cookie settings link (also at the bottom of our website), and delete or block cookies in your browser settings. Blocking essential cookies may stop the checkout from working.
• You can also manage ads through Google Ad Settings and your Meta ad preferences in your Facebook or Instagram settings.

More about the cookies Shopify uses is in the Shopify Cookie Policy.

6. Who we share your information with

We share personal information only where needed to run our store, and only with providers that are required to protect it and use it for the services they provide to us:

Recipient	Why
Shopify (including Shopify Payments and Shop Pay)	Hosting our store, checkout, payments, order management, fraud prevention
Payment networks and banks (such as Visa, Mastercard and American Express)	Processing your payment and refunds
Digital delivery tools in our Shopify store; print-on-demand partners and shipping carriers	Delivering your download links and web editions; printing and delivering printed books
Email service providers	Sending order emails and, if you signed up, marketing emails
Customer service tools	Managing and answering your messages
Analytics and advertising partners, such as Google and Meta	Website statistics, relevant ads and measuring our campaigns
Professional advisers, such as accountants and lawyers	Accounting, tax and legal advice
Authorities, courts and law enforcement	Where required by law or to protect our rights, our customers or the public
A buyer or successor of our business	If our business or its assets are sold or transferred, under this Privacy Policy

Shopify processes personal information to provide and improve its services. You can read the Shopify Consumer Privacy Policy.

We do not sell personal information for money. However, our use of advertising cookies and pixels may count as "selling" or "sharing" personal information for targeted advertising under some US state laws. You can opt out at any time (see Section 5 and Section 11), or directly on our Your Privacy Choices page.

7. International transfers

Moneza LLC is based in the United States, and our team and service providers work from several countries. Your personal information may therefore be stored and accessed in the United States, Canada, the European Union, the United Kingdom and other countries where our providers operate. These countries may have different privacy laws from your own.

When personal information from the United Kingdom or the European Economic Area is transferred to a country without an adequacy decision, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or certification of the recipient under the EU-US Data Privacy Framework and its UK extension. You can ask us for more information about these safeguards.

8. How long we keep your information

Information	How long
Orders, payments and invoices	Up to 7 years after the purchase, to meet tax and accounting rules
Delivery and access records	Up to 2 years after the purchase, to re-send downloads and handle disputes
Customer service messages	Up to 3 years after the last contact
Marketing email data	Until you unsubscribe. We then keep only your email address on a do-not-contact list, so we respect your choice.
Customer account	Until you close the account or ask us to delete it
Analytics and advertising data	According to the settings of each provider, generally up to 26 months

After these periods, we delete or anonymize your information.

9. How we protect your information

We use appropriate technical and organizational security measures. Our store runs on Shopify, which encrypts data in transit (HTTPS/TLS) and processes card payments under the PCI DSS security standard. Access to customer information is limited to people who need it for their work. No system is completely secure, but we work to protect your information and will notify you and the relevant authorities of a data breach where the law requires.

10. Your privacy rights

Depending on where you live, you can ask us to:

• tell you what personal information we hold about you and how we use it, and give you a copy (access);
• correct information that is wrong or incomplete (correction);
• delete your information, unless we must keep it, for example for tax records (deletion);
• give you your information in a commonly used electronic format, or send it to another business (portability);
• stop or limit certain uses of your information, including direct marketing (objection and restriction);
• withdraw your consent at any time, without affecting what happened before.

How to make a request: email margaret@sundaysatmargarets.com with the subject "Privacy request" and tell us what you would like. To protect you, we may ask you to confirm your identity, usually by replying from the email address you used with us. You can also ask an authorized agent to make a request for you; we may ask for proof that they are authorized.

Requests are free. We respond within the time required by the law that applies to you, usually within 30 days (one month in the UK and EU; 45 days under US state laws; 20 working days in New Zealand). If we need more time, we will tell you why. We will never treat you differently, or charge you a different price, because you used your privacy rights.

11. Additional information for your country or region

United States (including California). Residents of California and other states with comprehensive privacy laws (such as Colorado, Connecticut, Oregon, Texas, Utah and Virginia) have the rights described in Section 10 and the right to opt out of the sale or sharing of personal information and of targeted advertising. In the past 12 months we collected the categories of information listed in Section 2 (identifiers, commercial information, internet activity, approximate geolocation and inferences about your interests from advertising partners), from the sources listed there, for the purposes in Section 3. We disclosed them to the recipients in Section 6. We do not use sensitive personal information to infer characteristics about you, and we do not knowingly sell or share the information of anyone under 16. If we decline your request, you can appeal by replying to our decision with the subject "Privacy appeal". If you are not satisfied with the result, you can contact your state Attorney General. We do not disclose personal information to third parties for their own direct marketing purposes.

United Kingdom and European Economic Area. You also have the right to lodge a complaint with a data protection authority. In the UK, this is the Information Commissioner's Office (ico.org.uk). In the EU, you can contact the authority in the country where you live or work. We would appreciate the chance to address your concern first.

Canada. We handle personal information in line with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial laws. By using our website and placing an order, you consent to the collection, use and disclosure described in this policy, and you may withdraw your consent at any time, subject to legal and contractual limits. Our Privacy Officer is responsible for our compliance. Residents of Quebec may also ask about the communication of their information outside Quebec, request that their information be provided in a structured technological format, and file a complaint with the Commission d'accès à l'information du Québec. Others may contact the Office of the Privacy Commissioner of Canada (priv.gc.ca).

Australia. We handle personal information in line with the Australian Privacy Principles. Your information may be disclosed to recipients in the countries listed in Section 7. If you have a complaint, please contact us first; we will respond within 30 days. If you are not satisfied, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).

New Zealand. We handle personal information in line with the Privacy Act 2020. You can ask to access and correct your information. If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner (privacy.org.nz).

Other countries. We sell to customers worldwide. Wherever you live, you can use the rights in Section 10, and nothing in this policy limits rights you have under the privacy laws of your country.

12. Children

Our website and products are intended for adults and are not directed at children under 13 (or under 16 in the UK and EU). We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.

13. Links to other websites

Our website links to other websites and services, such as Instagram. Their privacy practices are their own; please read their privacy policies.

14. Changes to this Privacy Policy

We may update this Privacy Policy when our business, our services or the law changes. We will post the updated version on this page with a new "Last updated" date. If we make significant changes, we will let you know by a notice on our website or by email where appropriate.

15. Contact us

• Privacy Officer, Sundays at Margaret's
• Operated by: Moneza LLC
• Business address: 1501 South Greeley Hwy, Ste C, Cheyenne, WY 82007, United States
• Email: margaret@sundaysatmargarets.com (subject: "Privacy request")
• Instagram: @sundaysatmargarets