Privacy Policy
At Sugar Comeback (operating at sugarcomeback.com), we respect your privacy and are committed to protecting any personal information you share with us. This policy outlines how we collect, store, process, and safeguard your data across the United States, Canada (PIPEDA / Quebec Law 25), and the European Union / United Kingdom (GDPR / UK GDPR).
1. Data Controller & Designated Contact
The entity responsible for the processing of your personal information is:
- Brand: Sugar Comeback
- Operator / Privacy Officer: Sunny Lam
- Location: Quebec, Canada
- Direct Contact: [email protected]
2. What Information We Collect
We maintain a strictly minimal data footprint:
- Information You Provide Voluntarily: When you subscribe to our newsletter or request our free guide (The 30-Day Sugar Reset), you provide your email address (and optionally first name). We collect this only with your explicit consent.
- Technical & Analytical Data: We utilize Cloudflare Web Analytics to monitor aggregate site performance, bandwidth, and security. Cloudflare Web Analytics is privacy-focused, cookie-less, and does not track you across other websites or record personal IP identifiers.
- No Sensitive Personal Data: We never request, collect, or store sensitive categories of data (e.g. government IDs, financial accounts, health card numbers, biometric data, or medical records).
3. Lawful Basis for Processing (GDPR Article 6)
Under the European General Data Protection Regulation (GDPR) and UK GDPR, we process your information based on:
- Consent: By entering your email address into our opt-in form, you provide unambiguous consent for us to deliver The 30-Day Sugar Reset PDF guide and our weekly educational newsletter.
- Legitimate Interests: Necessary processing to prevent fraudulent bot submissions, maintain network security, and verify domain integrity.
4. Third-Party Service Providers (Sub-Processors)
We partner only with industry-leading, compliant sub-processors:
- Kit (ConvertKit): Our email marketing automation infrastructure. Kit securely stores subscriber emails, tracks opt-in timestamps, and delivers automated broadcast sequences. Kit complies with global data security frameworks and standard contractual clauses.
- Cloudflare, Inc.: Our global edge hosting, DNS management, and SSL security provider. Cloudflare caches our static website assets and processes incoming web traffic without storing persistent cookies.
5. Zero Sale or Sharing of Personal Data
In full adherence to the California Consumer Privacy Act (CCPA / CPRA) and global standards: We do not sell, rent, monetize, or trade your personal information to third parties, data brokers, or advertisers under any circumstances.
6. Your Rights & 1-Click Unsubscribe
Regardless of your geographic location, you possess full control over your personal data:
- Instant 1-Click Unsubscribe: Every single email broadcast sent by Sugar Comeback includes an automated, working "Unsubscribe" link at the bottom. Clicking this link immediately removes you from our email sequence without questions or delays.
- Right to Access & Rectification: You may request a copy of the personal data we hold about you or ask us to correct inaccurate records.
- Right to Erasure ("Right to Be Forgotten"): You may request that we permanently delete your email record from our Kit subscriber database at any time by emailing [email protected].
7. International Data Transfers
Because Sugar Comeback operates in Canada and utilizes Cloudflare and Kit servers located in the United States and globally, your information may be transferred across international borders. These transfers are safeguarded under standard contractual privacy frameworks that guarantee an adequate level of data protection.
8. Changes to This Policy
We may periodically update this policy to reflect technological or statutory shifts. When updates occur, the "Effective Date" at the top will be updated accordingly.