Privacy Policy

Effective Date: January 7, 2026
Domain: dessertlush.com
Owner: Billy Mackenzie

This Privacy Policy governs the collection, use, disclosure, and protection of Personal Data gathered from users (“Users,” “you,” or “your”) of the website dessertlush.com (the “Site”). This policy is designed to comply with the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), and the General Data Protection Regulation (GDPR) to the extent it applies to EU/UK data subjects.

1.1 Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings ascribed to them below:

“Personal Data” means any information that relates to, relates back to, identifies, or could reasonably be linked directly or indirectly to a particular consumer or household.
“Cookies” are small text files placed on a user’s device (computer, smartphone, tablet) by a website, containing information about the user’s browsing history and interactions with the site.
“Usage Data” refers to data collected automatically when you access the Site. This may include your IP address, browser type, browser version, the pages of our Site that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers, and other diagnostic data.
“Data Controller” refers to Billy Mackenzie, who determines the purposes and means of the processing of Personal Data.
“Data Processor” refers to third-party entities that process Personal Data on behalf of the Data Controller.

1.2 Information Collection and Use

We collect various types of Personal Data to provide and improve our dessert and holiday recipe services to you:

Information Provided Voluntarily: When you subscribe to our newsletter or contact us, we may collect your name, email address, and any message content you provide.
Automatically Collected Information: We automatically collect Usage Data, including IP addresses and browsing behavior, utilizing Tracking Technologies (defined below).

1.3 Tracking Technologies (Pixels, Cookies, Web Beacons)

dessertlush.com and our third-party service providers use cookies, web beacons, tracking pixels, and similar tracking technologies on the Site to track the activity on our Site and store certain information.

Cookies: Used to remember your preferences and track your progress through the Site.
Web Beacons (Clear GIFs): Small graphic images embedded in emails or on web pages used to monitor user interaction and site traffic analytics.
Tracking Pixels: Tiny 1×1 graphic images embedded in the code of the Site or in emails, allowing us and our partners to read cookies and track actions, such as clicks and conversions from Pinterest and advertising partners. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of the Site.

1.4 Third-Party Advertising

dessertlush.com monetizes its content through third-party advertising networks. We partner with HBAgency and its network partners, who act as independent third-party vendors and data processors, to serve personalized advertisements to you on our Site.

Data Processing for Personalized Ads: HBAgency and its network partners use Cookies, Tracking Pixels, and Web Beacons to collect Usage Data (such as your IP address, browser type, and browsing behavior on this and other websites) to provide reports about your interests and to display targeted advertisements that align with your preferences.
GDPR & ePrivacy Compliance: For users within the European Economic Area (EEA), HBAgency processes personal data for personalized advertising based on your consent, obtained via our Consent Management Platform prior to setting non-essential cookies.
Third-Party Policies: The data collection practices of HBAgency and its network partners are governed by their respective privacy policies. We do not control the data collection practices of these third parties.

1.5 California Privacy Rights (CCPA/CPRA)

If you are a resident of California, you are granted specific rights regarding your Personal Data under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). dessertlush.com acts as a “Business” under these statutes.

1.5.1 The Right to Know

You have the right to request that we disclose to you: (a) the categories of Personal Data we have collected about you; (b) the specific pieces of Personal Data we have collected about you; (c) the categories of sources from which the Personal Data was collected; (d) the business or commercial purpose for collecting, selling, or sharing the Personal Data; and (e) the categories of third parties to whom we disclose Personal Data.

1.5.2 The Right to Delete

You have the right to request the deletion of any Personal Data we have collected from you, subject to certain exceptions (e.g., completing a transaction, detecting security incidents, or complying with legal obligations). Upon receipt of a verifiable request, we will delete your Personal Data from our records and direct our service providers to do the same.

Under California law, the term “sale” is broadly defined to include the exchange of Personal Data for monetary or other valuable consideration. The “sharing” of Personal Data refers to making it available to third parties for cross-context behavioral advertising.

dessertlush.com does not sell Personal Data for monetary compensation.
However, we do “share” Personal Data for cross-context behavioral advertising via our advertising partner, HBAgency.
You have the right to opt-out of this “sharing” and “sale” at any time by clicking the “Do Not Sell or Share My Personal Information” link in our footer, or by utilizing the Global Privacy Control (GPC) signal on your browser.

1.5.4 Exercising Your Rights

To exercise any of these rights, please submit a verifiable consumer request by contacting us at [email protected]. We will verify your identity and respond to your request within 45 days of receipt, as required by law. We will not discriminate against you for exercising any of your CCPA/CPRA rights.

If you are located in the European Economic Area or the United Kingdom, you have certain rights under the GDPR:

Lawful Basis: We process your Personal Data based on your consent (for marketing and non-essential cookies) and our Legitimate Interests (for providing and securing the Site).
Data Subject Rights: You have the right to access, rectify, erase, restrict processing, object to processing, and data portability.
To exercise these rights, contact us at [email protected].

1.7 Contact Us

If you have questions about this Privacy Policy, contact Billy Mackenzie at [email protected].