Privacy Policy.

This is the short, honest version of what we do with your information. We collect what we need to send you your dog's plan and to keep you updated about The Premix — and nothing else. You can ask us to delete it at any time.

1. Who we are

This site is operated by Ruhan Oberoi (Individual / Sole Trader, ABN 60 805 688 583), trading as Teddy's Kitchen ("we", "us", "our") — an Australian pet food brand based in New South Wales. If you have any questions about this policy, email hello@teddyskitchen.com.au.

This policy is written to comply with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). It may also apply to you under the EU General Data Protection Regulation (GDPR) if you're in the European Economic Area.

2. What we collect

We try to collect as little as possible. Here's everything we ask for:

What we don't collect: We don't use Google Analytics, Facebook Pixel, or any cross-site tracking. We don't profile you across the web. If we ever add analytics, it will be a privacy-respecting tool like Plausible or Fathom, and we'll update this policy first.

3. How we use your information

We use the data you give us only for these purposes:

• Sending you your dog's plan — the calculated daily portions, recommended recipe, and shopping list.
• Occasional updates from us — recipe tips, news about The Premix launch, and the occasional cooking idea. You can unsubscribe from any email with one click.
• Improving the calculator and recipes — we look at aggregate patterns (e.g. how many people pick "sensitive stomach") to improve our content. We never identify individuals in this analysis.
• Customer support — if you email us, we'll use your address to reply.

We do not sell your data. We do not share it with advertisers. We do not use it to train AI models.

4. Who else sees your data

To run this service, we rely on a small number of trusted third parties. Each has their own privacy policy and we picked them because they take privacy seriously.

• MailerLite — email service provider. They store your email, name, and dog profile and send our emails on our behalf. Based in Lithuania, EU; GDPR-compliant.
• Netlify — website hosting and serverless functions. Processes requests and may briefly hold form submissions before forwarding to MailerLite. Based in the US.
• Stripe (in future) — when The Premix launches, payment processing will be handled by Stripe. Your card details go directly to Stripe and never touch our servers. We'll update this policy when this is live.

Because MailerLite and Netlify are based outside Australia, your data may be transferred and stored in the EU or US. By using this site, you consent to this transfer. Both providers offer protections equivalent to Australian standards.

5. Cookies and local storage

We don't use traditional tracking cookies. We use one piece of browser local storage: a small entry called tk_email that remembers your email so the calculator doesn't ask for it again on return visits. This stays on your device and is never transmitted anywhere except when you actively submit the calculator.

You can clear this any time by clearing your browser's local storage for our domain.

6. Your rights

Under Australian Privacy Principles (and GDPR if applicable to you), you have the right to:

• Access — request a copy of the personal information we hold about you.
• Correct — ask us to update or fix inaccurate information.
• Delete — ask us to remove your data entirely (this is called the "right to erasure" or "right to be forgotten").
• Withdraw consent — unsubscribe from emails any time by clicking the link at the bottom of any email, or by emailing us.
• Lodge a complaint — if you think we've mishandled your data, you can complain to the Office of the Australian Information Commissioner: oaic.gov.au.

To exercise any of these rights, email hello@teddyskitchen.com.au. We'll respond within 30 days.

7. Data retention

• Active subscribers — we keep your data while you remain on our mailing list.
• Unsubscribed users — when you unsubscribe, MailerLite retains a hashed record of your email for compliance (so you're not re-added by mistake) but deletes the rest of your profile within 30 days.
• If you ask us to delete — we'll remove all data within 30 days. We may retain a minimal record showing your deletion request was honoured.
• Server logs — Netlify retains these for up to 30 days, then deletes them.

8. Security

We take reasonable steps to protect your data:

• All connections use HTTPS encryption.
• We use modern, well-maintained service providers (MailerLite, Netlify, Stripe).
• We minimise the data we collect — we can't lose what we don't have.

That said, no system on the internet is 100% secure. If a data breach affects you, we'll notify you within 72 hours of becoming aware of it, as required under the Notifiable Data Breaches scheme.

9. Children

This site is not directed at children under 16. We don't knowingly collect personal information from children. If you're under 16, please ask a parent or guardian before using the site or submitting any information.

10. Changes to this policy

If we change this policy in a way that affects how we use your existing data, we'll email you before the change takes effect. Minor changes (typos, clarifications) will be updated here without notice — the "last updated" date at the top of this page will always be current.