privacy policy

Privacy Policy

Last updated: October 18, 2026

1. Introduction

Welcome to Coco and Camellia.

Your privacy is important to us. This Privacy Policy explains how we collect, use, store, and protect personal information when you visit our website, https://www.cocoandcamellia.com.

It also explains your rights and the choices available to you regarding your personal information.

Through our website, you can explore recipes, read articles, leave comments, subscribe to our newsletter, and discover digital products.

We aim to handle personal information responsibly and transparently, in accordance with applicable data protection laws, including the European Union’s General Data Protection Regulation (GDPR).

2. Who We Are

Coco and Camellia is an independent food, baking, and recipe website based in Portugal.

Our website shares recipes, baking resources, and educational content, with a particular focus on gluten-free and dairy-free baking.

For questions about privacy, personal information, or requests to exercise your data protection rights, please contact us through our Contact page.

3. Information We Collect

Depending on how you interact with our website, we may collect the following information.

Information You Provide Voluntarily

When you contact us, leave a comment, subscribe to our newsletter, or request information, we may collect:

  • Your name.
  • Your email address.
  • Information submitted through contact forms.
  • Information included in comments or messages.
  • Your communication preferences.
  • Other information you voluntarily share with us.

Information Collected Automatically

When you visit our website, certain technical information may be collected through our website infrastructure, security services, cookies, and analytics tools.

This may include:

  • IP address.
  • Browser type and version.
  • Device and operating system information.
  • Pages visited and interactions with website content.
  • Referring websites or traffic sources.
  • Approximate geographic location.
  • Date and time of visits.

The information collected depends on the services involved, your privacy preferences, and the permissions you provide.

4. How We Use Your Information

We may use personal information to:

  • Operate, maintain, and improve our website.
  • Respond to messages, questions, and enquiries.
  • Manage comments and prevent spam.
  • Deliver newsletters and content you have requested.
  • Share updates about recipes, baking resources, and digital products.
  • Provide customer support relating to purchases.
  • Understand website performance and visitor behaviour.
  • Maintain website security and prevent misuse.
  • Comply with applicable legal obligations.

We do not use personal information for unrelated purposes without an appropriate legal basis.

5. Legal Basis for Processing Personal Information

Under the GDPR, we rely on different legal bases depending on the purpose of processing.

Consent

We rely on consent where required, including for optional analytics cookies, certain third-party technologies, and marketing email subscriptions.

You can withdraw your consent at any time.

Legitimate Interests

We may process certain information where necessary for legitimate purposes, such as maintaining website security, preventing spam, responding to enquiries, and ensuring the proper functioning of our services.

We consider the potential impact on individuals’ rights and freedoms when relying on legitimate interests.

Contractual Necessity

When you purchase a digital product or request a service, certain information may be processed where necessary to fulfil the transaction or provide the requested service.

Legal Obligations

Some information may need to be processed or retained to comply with applicable accounting, tax, consumer protection, or other legal requirements.

6. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to support essential functions, remember preferences, analyse website activity, and enable certain third-party features.

We use Complianz to manage cookie consent.

When you visit our website, you can accept, reject, or manage optional cookies through our consent banner.

We also use Google Consent Mode to communicate relevant consent choices to Google services.

Depending on the technical configuration, Google services may process limited information without setting analytics cookies when consent is denied.

You can change or withdraw your cookie consent at any time through the cookie preferences available on our website.

For detailed information about the cookies we use, their purposes, and retention periods, please read our Cookie Policy.

7. Google Analytics

We use Google Analytics 4 (GA4) to understand how visitors interact with our website.

Google Analytics helps us understand:

  • Which recipes and articles receive visitors.
  • How visitors discover our website.
  • Which pages are most frequently viewed.
  • How visitors interact with our content.
  • How our website performs over time.

Information processed by Google Analytics may include page views, interactions, device information, traffic sources, and approximate geographic location.

The use of analytics cookies is subject to the consent preferences selected by visitors.

We use this information to improve our website, understand our audience, and develop more useful content.

For more information, please visit the Google Privacy Policy.

8. Newsletter and Email Communications

Visitors may subscribe to receive recipes, baking tips, updates, and information about Coco and Camellia’s digital products.

Our newsletter may be delivered through Substack or another email service provider used for the subscription.

When you subscribe, we may collect your email address, your name if provided, and information necessary to manage your subscription.

Depending on the email platform and your privacy settings, certain information about email delivery and interactions may also be processed.

We use this information to provide the communications you requested and improve our newsletter content.

You can unsubscribe from marketing communications at any time by clicking the unsubscribe link included in our emails.

Purchasing a product or downloading a free resource does not automatically mean that you have agreed to receive marketing emails. Promotional communications are managed according to the consent or other applicable legal basis for the subscription.

We do not sell our newsletter subscribers’ email addresses to advertisers.

9. Comments

Visitors may leave comments on recipes and articles published on our website.

When you leave a comment, WordPress may collect the information entered into the comment form, together with technical information such as your IP address and browser details.

This information may be used to display comments, moderate discussions, prevent spam, and maintain website security.

Approved comments may remain publicly visible unless removed by us or following an appropriate request.

Please avoid including sensitive personal information in public comments.

We may use security and anti-spam services to help protect our website and its visitors.

10. Digital Products and Purchases

Coco and Camellia offers digital products, including ebooks and baking resources, and may introduce additional educational products or courses in the future.

Purchases may be processed through Hotmart, an external digital commerce platform.

When you purchase a product through Hotmart, personal information may be collected to process payments, provide access to purchased products, issue receipts, prevent fraud, and comply with legal requirements.

We may receive relevant purchase information, such as:

  • Your name.
  • Your email address.
  • The product purchased.
  • Order status.
  • Transaction information necessary for customer support.

Payment card details are processed through the relevant payment service providers rather than being stored directly by the Coco and Camellia website.

Hotmart processes personal information according to its own privacy practices and applicable agreements.

We encourage you to review Hotmart’s privacy information before completing a purchase.

11. Third-Party Content and Social Media

Our website may include links, social sharing features, or embedded content from third-party platforms, including:

  • Pinterest.
  • Instagram.
  • YouTube.
  • Other relevant websites and content providers.

Embedded content may behave in a similar way to visiting the third-party website directly.

These services may collect information or use cookies and similar technologies according to their own privacy practices.

Where required, non-essential third-party content and tracking technologies are subject to your consent preferences.

Our website uses Google Fonts to display typography. These fonts are hosted locally on our website to reduce unnecessary connections to Google’s servers and help protect visitors’ privacy.

We encourage visitors to review the privacy policies of third-party services before interacting with them.

12. Advertising, Affiliate Marketing and Future Services

As Coco and Camellia develops, we may introduce additional advertising, marketing, and affiliate services.

These may include:

  • Google AdSense and other advertising networks.
  • Meta (Facebook) Pixel.
  • Pinterest Tag.
  • Affiliate marketing programmes.
  • Advertising conversion measurement services.
  • Other marketing and analytics technologies.

Such services may be used to display advertisements, understand advertising performance, measure conversions, or support relevant marketing campaigns.

The inclusion of these services in this Privacy Policy does not necessarily mean that they are currently active on our website.

Before introducing new services that involve personal data processing or non-essential tracking, we will review and update the relevant privacy information and obtain consent where required by applicable law.

Some links on our website may be affiliate links. Where applicable, we may earn a commission from qualifying purchases without an additional cost to you.

Affiliate relationships will be disclosed where required by applicable advertising and consumer protection rules.

13. Sharing Personal Information

We may share personal information with trusted third-party service providers where necessary to operate our website and deliver our services.

Depending on the services used, these providers may include:

  • Website hosting providers, including BigScoots.
  • Website performance and security services, including Cloudflare.
  • Google Analytics and other analytics providers.
  • Email and newsletter providers, including Substack.
  • Digital commerce platforms, including Hotmart.
  • WordPress-related services and security tools.

These providers may process personal information on our behalf or act as independent data controllers, depending on the services they provide.

We may also disclose information when required by law, to respond to lawful requests, or to protect our legal rights.

We do not sell personal information directly collected through our website to data brokers.

14. International Data Transfers

Some third-party services used by our website may process or store personal information outside Portugal or the European Economic Area (EEA), including in the United States.

Where international data transfers occur, applicable data protection requirements must be respected.

Depending on the destination and service provider, relevant safeguards may include adequacy decisions recognised by the European Commission or contractual protections such as Standard Contractual Clauses.

The specific safeguards and transfer arrangements depend on the provider involved.

You can find additional information about international data transfers in the privacy policies of the relevant service providers.

You may also contact us for information about transfers relevant to personal data processed under our responsibility.

15. How Long We Keep Personal Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, unless a longer period is required by applicable law.

Retention periods depend on the type of information and the service involved.

For example:

  • Newsletter information: generally retained while your subscription remains active, subject to records needed to respect unsubscribe requests or legal requirements.
  • Contact messages: retained for as long as necessary to respond to enquiries and manage related correspondence.
  • Comments: may remain stored while published or required for moderation and related records.
  • Purchase information: retained as necessary for customer support, contractual obligations, and applicable accounting or tax requirements.
  • Analytics information: retained according to the configured settings of the relevant analytics service.
  • Cookie preferences: stored for the periods described in our Cookie Policy.

You may contact us to request information about the retention of your personal data or to exercise your applicable rights.

16. Your Privacy Rights

If the GDPR applies to the processing of your personal information, you may have the right to:

Access: Request information about the personal data we hold about you.

Rectification: Request correction of inaccurate or incomplete information.

Erasure: Request deletion of your personal data where applicable.

Restriction: Request that certain processing activities be restricted.

Data Portability: Request your personal data in a structured, commonly used, machine-readable format where the legal requirements are met.

Objection: Object to certain processing activities, including direct marketing.

Withdrawal of Consent: Withdraw your consent at any time where processing is based on consent.

These rights are subject to the conditions and limitations established by applicable law.

To exercise your rights, please contact us through our Contact page.

We may need to verify your identity before responding to requests involving personal information.

You also have the right to lodge a complaint with the relevant data protection authority.

In Portugal, the supervisory authority is the Comissão Nacional de Proteção de Dados (CNPD).

Website: https://www.cnpd.pt

Visitors outside the European Economic Area may have additional rights under the privacy laws applicable to their location.

17. Children’s Privacy

Our website provides food, baking, and lifestyle content intended for a general audience.

We do not knowingly solicit personal information from children in circumstances where parental consent or another legal basis would be required.

If you believe that a child has provided personal information in circumstances requiring its removal, please contact us so that we can review the situation and take appropriate action.

18. Data Security

We take reasonable technical and organisational measures to help protect personal information from unauthorised access, loss, misuse, or disclosure.

These measures may include secure website connections, hosting protections, software updates, access controls, and website security tools.

However, no method of internet transmission or electronic storage can be guaranteed to be completely secure.

We aim to review our website’s security practices and address identified risks where appropriate.

19. External Websites

Our website may contain links to external websites, products, or services.

When you leave Coco and Camellia, the privacy practices of the external website will apply.

We encourage you to review the privacy policies and terms of any third-party services you choose to use.

20. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our website, services, privacy practices, or applicable legal requirements.

When we make material changes, we will update the date shown at the top of this page and provide any additional notice required by law.

We encourage visitors to review this page periodically.

21. Contact Us

If you have any questions about this Privacy Policy, how we handle personal information, or how to exercise your privacy rights, please contact us.

Coco and Camellia

Portugal

Website: https://www.cocoandcamellia.com

Contact: https://cocoandcamellia.com/contact/

We will review privacy-related enquiries and respond in accordance with applicable data protection requirements.