Privacy policy

Who we are

The Content Cook is the customer-facing brand of The Content Cook Personal Sport Coaching Services, a sole proprietorship based in Dubai, United Arab Emirates. We use personal information to operate our website, manage customer relationships and provide digital resources.

This notice describes our rebuilt website and members portal. Where noted, it also explains services used on our existing website.

Information we collect and use

We process account details such as your name, email, account identifier and profile image if provided; purchase and membership details such as orders, payment status and access dates; support correspondence; email preferences and engagement; and technical information needed to deliver and protect our services, including IP addresses, browser information and authentication events.

We use this information to provide account access and purchased resources, manage subscriptions, respond to requests, send necessary service messages, prevent misuse and maintain required records. Optional emails are handled according to your preferences. Analytics and advertising practices are described below.

Please do not send passwords, full payment-card details or your clients’ health information in support messages.

Google sign-in

Google and Clerk authenticate your account using basic identity information, email and profile information, which may include your name and photograph. We do not receive your Google password, and this connection does not request your Gmail messages, Drive files, calendar or contacts. Signing in does not subscribe you to marketing.

You can revoke the connection through your Google Account settings. This does not automatically delete your Content Cook account, cancel a subscription or erase purchase records.

Providers we use

• Clerk: sign-in, account management and authentication security. Processing on our behalf is also covered by its processing terms.
• Google: Google sign-in, business email and Google Analytics.
• Polar: checkout, payments, subscriptions and invoices as merchant of record. We receive information needed to fulfil orders; our website does not directly collect full card numbers or security codes. Our checkout integration sends your IP address to Polar when available from our host.
• Cloudflare: hosting, delivery, security and application storage.
• Cromojo: optional public-page analytics after you accept analytics cookies. It receives technical connection information, public page addresses, browser/device details, engagement and link-click events.
• Beehiiv: email subscriptions, communications and email engagement tracking.
• Heyo: live-chat support and visitor conversations; see also its visitor-data processing terms.
• Meta: advertising, visitor retargeting and matching uploaded customer email lists to advertising audiences on our existing services.

Provider notices explain their own practices and supplement this policy. They do not replace our responsibilities for information used by The Content Cook. Contact us about information processed on our behalf.

Canva and Notion are external services for opening or customising resources. Buying a template does not automatically give us access to information you add to your own copy. We may also disclose information where required by law or necessary to establish, exercise or defend legal claims.

Email and advertising choices

Purchasing or signing in does not by itself subscribe you to optional marketing emails. You can unsubscribe through the link in an email or contact us. Necessary account and service messages may still be sent.

Beehiiv open and link-click tracking is enabled and provides email engagement information. Website cookie choices do not control email tracking or authorise customer-list advertising. Contact us to object to use of your information for direct marketing, including customer-list advertising.

Cookies and website analytics

Authentication technology keeps you signed in and protects sessions. Blocking it may prevent account features from working.

Cookie settings offers separate analytics and advertising choices. Preferences remain valid for 180 days and can be changed at any time. Google Analytics and Cromojo load only after analytics consent on eligible public pages, not on account, library or checkout pages. They receive technical connection and browser information to measure visits and engagement. We do not send names, email addresses or account authentication tokens to these analytics services. Google Analytics receives a public page address without query parameters; advertising personalisation and Google signals are disabled in our tag configuration.

With analytics consent, Google Analytics measures product views and checkout starts. When server-side purchase measurement is enabled, confirmed initial purchases can include an order identifier, product identifier, amount, tax and currency, linked to the consenting browser’s Google Analytics client and session identifiers. We do not invent analytics identifiers if the Google tag is blocked. Subscription renewals are excluded. Withdrawing analytics consent disables browser analytics and suppresses unsent purchase events associated with that browser’s consent identifier once the withdrawal reaches our server. It does not recall information already sent.

Meta Pixel loads only after advertising consent on eligible public pages to measure page views, product views and checkout intent. It receives public page and product information, technical connection information and advertising cookie identifiers. Browser tracking is not loaded on account, library or checkout pages. Services on the legacy WordPress website are separate.

Purchase measurement

With your advertising consent, Meta measures product views, checkout intent and eligible confirmed paid purchases. Purchase events may include product identifiers, the paid amount and currency, an order-based identifier, advertising cookie identifiers and a SHA-256 hashed email address for matching. Hashing does not make this information anonymous. We do not send invoice links, account session tokens or private library pages to Meta.

Withdrawing advertising consent in Cookie settings stops browser tracking and suppresses unsent purchase events associated with that browser’s consent identifier once the withdrawal reaches our server. It does not recall information already sent. Contact us for requests covering other browsers or earlier disclosures. Purchase measurement excludes subscription renewals, free orders and purchases without valid advertising consent.

Optional support chat

Our optional chat is provided by Heyo and loads only after you choose to open it. Heyo receives technical connection information, the public page address and potentially its referrer, plus messages and information you choose to submit. Its widget may set a visitor cookie lasting up to one year to recognise a conversation. We do not automatically identify signed-in customers to Heyo or send their names or email addresses.

Chat is not loaded on checkout or private library pages. Please do not share payment details, passwords or client health information. You can email ronan@thecontentcook.co instead of using chat.

Why we process information

Where applicable law requires a lawful basis, we rely on performing our contract to provide account and purchased-resource access, legal obligations for required records, legitimate interests in securing our service and responding to enquiries, and consent where required for optional marketing or non-essential tracking.

How long information is kept

Retention depends on the purpose: providing purchased access, managing your preferences, resolving support enquiries and payment issues, protecting the service, maintaining purchase and licence evidence, and meeting applicable legal record-keeping requirements. We do not state fixed deletion periods that have not been verified.

Beehiiv subscriber information is retained while needed to provide communications and manage preferences. Limited suppression information may remain after unsubscribing to prevent further marketing. Heyo conversations are retained according to support needs and its available storage and deletion controls. Provider policies linked above explain their own practices; you can contact us to request deletion.

The existing Google Analytics property has event-data retention set to two months and user-data retention set to fourteen months, with reset on new activity enabled. Returning users’ retention may therefore extend. These settings do not promise deletion of aggregate reports or all provider-held data.

Cookie preferences expire after 180 days; this does not mean all provider cookies or browser storage are erased at that moment.

Account deletion and subscriptions

Deleting your account removes login access but does not cancel an active subscription or automatically erase records in other systems. Use Manage billing in your library to cancel before deleting your account, or contact us for help. Cancellation is not a condition for submitting a privacy request.

Some records may remain where justified or legally required. We will explain applicable exceptions when responding. Deletion does not promise immediate removal from provider backups.

International processing and security

We operate from the UAE and use providers that may process information in other countries with different data-protection rules. Refer to their linked policies and processing terms for provider information, or contact us with questions about your information.

We use managed authentication and hosting to help protect information. No online service can guarantee absolute security. Keep credentials private and tell us if you suspect unauthorised access.

Your rights and requests

Depending on applicable law, you may have rights to access, correct, delete or receive a portable copy of your information, restrict or object to processing, and withdraw consent. Rights are subject to applicable conditions and exceptions. Withdrawing consent does not affect earlier lawful processing. You may also complain to the relevant data-protection authority.

Contact us to make a request. We may need proportionate information to verify your identity. We will update this notice and provide additional notice of material changes where required.