Privacy Policy

Effective Date: 01-01-2025

1. Introduction and Scope

American Nutrition LLC, doing business as My Chef Shirley, values the privacy of our clients, prospective clients, website visitors, gift certificate purchasers and recipients, job applicants, contractors, and other individuals who interact with us.

In this Privacy Policy, “My Chef Shirley,” “we,” “us,” and “our” refer to American Nutrition LLC and the personnel who act on its behalf.

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you:

• Visit or interact with the My Chef Shirley website;
• Contact us by telephone, email, text message, website form, social media, or another method;
• Request a quote or consultation;
• Purchase, schedule, or receive personal-chef, meal-preparation, event, cooking-class, nutrition, lactation, gift certificate, or related services;
• Make or receive a payment or refund;
• Provide dietary, allergy, health, household, or service-related information;
• Submit a review, testimonial, photograph, or other content;
• Apply to work with or provide services to My Chef Shirley; or
• Otherwise interact with our business.

This Privacy Policy does not apply to information governed by a separate employee, contractor, professional-services, health-records, or legally required privacy notice. When a separate notice applies to specific information or services, that more specific notice will control for that information.

2. Meaning of Personal Information

For purposes of this Privacy Policy, “personal information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or can reasonably be linked to an individual or household.

Personal information does not generally include information that has been lawfully made public or information that has been aggregated or deidentified so that it cannot reasonably be linked to an individual, subject to applicable law.

3. Information We May Collect

The information we collect depends on how you interact with us and which services you request.

A. Identity and contact information

We may collect:

• First and last name;
• Email address;
• Telephone number;
• Mailing address;
• Billing address;
• Service address;
• City, county, state, and ZIP code;
• Preferred method of communication; and
• Contact information for another authorized person.

B. Service and household information

We may collect information needed to evaluate, arrange, or provide services, including:

• Requested service;
• Number of people being served;
• Household composition;
• Service frequency;
• Requested start date;
• Event date and location;
• Kitchen information;
• Scheduling preferences;
• Menu preferences;
• Food likes and dislikes;
• Ingredient preferences;
• Grocery preferences;
• Budget or pricing information;
• Service history;
• Chef or professional preferences;
• Access, parking, security, or entry instructions; and
• Other information relevant to performing services at your home or event location.

C. Dietary, allergy, health, and other sensitive information

You may voluntarily provide information such as:

• Food allergies;
• Food intolerances;
• Dietary restrictions;
• Medical or therapeutic diets;
• Physical or mental health conditions relevant to the requested service;
• Pregnancy, postpartum, infant-feeding, or lactation information;
• Nutrition-related concerns or goals;
• Religious, cultural, or ethical food preferences;
• Information about a child or another household member;
• Instructions provided by a physician or other healthcare professional; and
• Other health-related information you choose to disclose.

We ask that you provide only the information reasonably necessary for us to evaluate or provide the requested service.

General website forms and ordinary email are not intended to function as emergency medical communications or secure patient portals. Do not use them to report a medical emergency or to submit health information that is not necessary for your inquiry.

D. Payment and financial information

When you make or arrange a payment, we or our payment-service providers may collect:

• Cardholder or account-holder name;
• Credit or debit card number;
• Card expiration date;
• Card verification code;
• Billing address;
• Bank account number;
• Bank routing number;
• Check information;
• ACH or electronic-payment authorization;
• Payment token or stored-payment identifier;
• The last four digits of an account;
• Invoice and payment amount;
• Payment date;
• Payment status;
• Refund information;
• Chargeback or payment-dispute information; and
• Related transaction and accounting records.

Depending on the payment method, payment information may be entered directly into a system operated by a payment processor, bank, invoicing service, accounting provider, or other financial-service provider. In other circumstances, certain payment information may be collected directly by us.

We use payment information only for legitimate purposes such as:

• Authorizing and processing payments;
• Processing deposits;
• Administering recurring payments that you have expressly authorized;
• Processing refunds or credits;
• Maintaining transaction, tax, and accounting records;
• Preventing fraud;
• Responding to payment disputes or chargebacks; and
• Complying with legal, contractual, banking, and payment-network requirements.

We do not retain card verification codes, such as CVV, CVC, CID, or similar security codes, after a payment has been authorized.

We may retain payment tokens, masked account information, ACH authorizations, bank information, transaction records, and other financial information when reasonably necessary for authorized payments, recurring services, refunds, accounting, legal compliance, dispute resolution, or another legitimate business purpose.

Do not send full credit card numbers, card verification codes, bank account numbers, or other payment credentials through a general website inquiry form, ordinary email, ordinary text message, social-media message, or voicemail unless we have specifically instructed you to use an approved method for providing that information.

E. Transaction and commercial information

We may collect:

• Services requested, purchased, scheduled, completed, or canceled;
• Quotes, proposals, contracts, invoices, and receipts;
• Gift certificate purchases and redemptions;
• Discounts or promotional offers used;
• Menu and grocery records;
• Client preferences;
• Service notes;
• Refunds and account credits;
• Customer-support history; and
• Other information associated with our business relationship.

F. Communications

We may collect and retain communications you send to us or that we send to you, including:

• Website-form submissions;
• Emails;
• Text messages;
• Telephone notes;
• Scheduling communications;
• Consultation notes;
• Customer-service communications;
• Complaints or concerns;
• Feedback;
• Requests to exercise privacy rights; and
• Records of consent, instructions, approvals, or authorizations.

Telephone calls are not recorded unless we provide appropriate notice and obtain any consent required by applicable law.

G. Reviews, testimonials, photographs, and media

When you submit or authorize the use of a review, testimonial, photograph, video, recipe, menu, social-media post, or other content, we may collect:

• Your name;
• Your username or social-media profile;
• Your image or voice;
• The content you submit;
• Information about the service you received; and
• Your permission or release authorizing publication.

We will not publish private dietary, health, household, or service information as a testimonial merely because you provided it during an inquiry or engagement. Publication requires separate permission or another lawful basis.

H. Employment and contractor-applicant information

When you apply for employment, contract work, or a chef or professional role, we may collect:

• Name and contact information;
• Résumé or curriculum vitae;
• Employment and education history;
• Professional credentials;
• Certifications and registrations;
• References;
• Work availability;
• Geographic service area;
• Portfolio or work samples;
• Interview notes;
• Compensation expectations;
• Eligibility-to-work information; and
• Other information voluntarily provided during the application process.

Where permitted by law and separately authorized, we may also obtain reference, credential, driving-record, background-screening, or similar information from third parties.

I. Website, device, and usage information

When you visit the website, we and our service providers may automatically collect information such as:

• Internet Protocol address;
• Browser type;
• Device type;
• Operating system;
• Language setting;
• Approximate geographic location derived from an IP address;
• Referring website or campaign;
• Pages visited;
• Links and buttons selected;
• Date and time of access;
• Time spent on pages;
• Website-form interactions;
• Cookie or device identifiers;
• Error and diagnostic information; and
• Other information about how the website is accessed and used.

J. Information obtained from other sources

We may receive information from:

• A household member or person authorized to communicate on your behalf;
• A gift certificate purchaser or recipient;
• A person referring you to us;
• An event host or organizer;
• A healthcare professional when appropriately authorized;
• Payment processors, banks, or financial-service providers;
• Scheduling, accounting, invoicing, or customer-management platforms;
• Advertising, analytics, and marketing providers;
• Social-media and review platforms;
• Background-screening or credential-verification providers;
• Publicly available sources; and
• Other parties with your direction, authorization, or consent.

When you provide information about another person, you represent that you are authorized to provide it and that you have given the person any notice required by applicable law.

4. How We Use Personal Information

We may use personal information to:

• Respond to questions and inquiries;
• Determine whether we can provide a requested service;
• Prepare quotes, proposals, menus, schedules, and service agreements;
• Match clients with chefs, dietitians, lactation consultants, event personnel, or other professionals;
• Customize meals and services;
• Address dietary preferences, allergies, intolerances, and other disclosed needs;
• Purchase or coordinate groceries and supplies;
• Schedule, administer, and perform services;
• Communicate about appointments, events, payments, changes, and service issues;
• Process payments, deposits, refunds, credits, and gift certificates;
• Maintain financial, tax, accounting, insurance, and transaction records;
• Administer recurring services and authorized recurring payments;
• Provide customer service;
• Investigate and resolve complaints, disputes, chargebacks, and claims;
• Protect clients, personnel, property, and the public;
• Detect and prevent fraud, abuse, unauthorized access, and security incidents;
• Maintain and improve our website, services, and business operations;
• Understand website usage and campaign effectiveness;
• Send marketing communications where permitted by law;
• Recruit, evaluate, and communicate with applicants;
• Establish, exercise, or defend legal claims;
• Comply with contracts and legal obligations;
• Respond to lawful requests from courts, regulators, and government authorities;
• Carry out a merger, financing, acquisition, reorganization, sale, or transfer involving all or part of the business; and
• Perform another purpose disclosed at the time information is collected or authorized by you.

Where applicable law requires consent for a particular use of sensitive information, we will seek the required consent through an appropriate affirmative action. This Privacy Policy does not itself replace any separate consent required by law.

5. Dietary, Health, Nutrition, and Lactation Information

Dietary and health-related information may be particularly sensitive. We use such information only for purposes reasonably connected with:

• Evaluating whether we can provide the requested service;
• Preparing or modifying menus;
• Addressing disclosed food allergies or intolerances;
• Providing requested nutrition or lactation services;
• Coordinating care or instructions when authorized;
• Protecting health and safety;
• Maintaining appropriate professional or service records; and
• Complying with applicable legal and professional obligations.

We do not sell dietary or health information. We do not use dietary or health information for cross-site targeted advertising.

We may share relevant dietary or health information with a chef, dietitian, lactation consultant, contractor, event worker, or other professional assigned to evaluate, coordinate, or provide your service. We limit such disclosures to information reasonably necessary for the person’s role.

Depending on the nature of a professional nutrition or lactation service and how it is administered, certain information may be governed by a separate professional-services privacy notice, health-records policy, authorization, consent, or Notice of Privacy Practices. When that occurs, the more specific notice will govern the applicable professional records.

Nothing in this Privacy Policy should be interpreted as a representation that every service provided by My Chef Shirley is subject to the Health Insurance Portability and Accountability Act, commonly known as HIPAA. HIPAA applies only when its legal requirements are met.

6. How We Disclose Personal Information

We may disclose personal information to the following categories of recipients.

A. Personnel and assigned service providers

We may disclose information to employees, chefs, dietitians, lactation consultants, event personnel, independent contractors, and other individuals who need the information to evaluate, schedule, administer, or provide services.

B. Business and technology providers

We may disclose information to providers that support functions such as:

• Website hosting and maintenance;
• Website forms;
• Email and messaging;
• Telephone and communications;
• Scheduling;
• Customer relationship management;
• Cloud storage;
• File sharing;
• Accounting and bookkeeping;
• Invoicing;
• Payment processing;
• Banking and ACH transactions;
• Fraud prevention;
• Information security;
• Data backup;
• Analytics;
• Advertising and marketing;
• Review collection;
• Document signing;
• Applicant tracking;
• Background or credential screening;
• Insurance;
• Legal and professional services; and
• Other operational support.

These providers may process personal information on our behalf or under their own privacy notices, depending on the service and relationship.

C. Payment processors and financial institutions

We may disclose payment and transaction information to:

• Credit and debit card processors;
• Merchant-service providers;
• Banks;
• ACH processors;
• Invoicing and accounting platforms;
• Fraud-prevention providers;
• Payment networks; and
• Other parties involved in authorizing, processing, settling, refunding, or disputing a transaction.

Those parties may independently collect and process information under their own terms and privacy policies.

D. People you authorize

We may disclose information to a household member, caregiver, healthcare professional, event organizer, gift certificate purchaser or recipient, or another person when you request or authorize the disclosure.

E. Legal, safety, and compliance recipients

We may disclose information when we reasonably believe disclosure is necessary to:

• Comply with applicable law;
• Respond to a subpoena, court order, warrant, or other lawful process;
• Respond to an authorized government or regulatory request;
• Enforce a contract or protect legal rights;
• Investigate fraud, theft, unauthorized activity, or a security incident;
• Protect the health or safety of a client, employee, contractor, or another person;
• Protect property or the operation of the business; or
• Establish, exercise, or defend a legal claim.

Where appropriate and legally permitted, we may seek to limit or object to a request that appears excessive, invalid, or inconsistent with applicable law.

F. Professional advisers and insurers

We may disclose information to attorneys, accountants, tax professionals, insurers, auditors, consultants, and other professional advisers when reasonably necessary for their work.

G. Business transactions

Personal information may be reviewed or transferred as part of an actual or proposed:

• Merger;
• Acquisition;
• Financing;
• Reorganization;
• Sale of assets;
• Change in ownership;
• Bankruptcy;
• Dissolution; or
• Similar business transaction.

Recipients will be subject to applicable confidentiality, contractual, and legal obligations.

H. Aggregated and deidentified information

We may create and use aggregated or deidentified information for lawful business purposes, including service improvement, planning, analytics, and reporting.

We will not attempt to reidentify information that is maintained as deidentified except where permitted by law, such as testing whether the deidentification process remains effective.

7. Sale of Information and Targeted Advertising

We do not sell payment credentials, bank account information, dietary information, or health information.

We do not sell personal information in exchange for monetary payment.

We may use analytics, campaign-measurement, social-media, or advertising technologies that collect online identifiers and website-activity information. Depending on the technology used and the law that applies, certain disclosures associated with those technologies may be legally characterized as a “sale,” “sharing,” or processing for targeted advertising even when no money is paid to us.

Where such laws apply to us, we will provide any required notice and method for opting out.

Targeted advertising or remarketing is used:

We use certain third-party advertising and remarketing technologies that may collect online identifiers and website-activity information for targeted advertising. Where applicable, you may opt out by using the “Your Privacy Choices” or cookie-settings link displayed on the website or by contacting us as described below.

8. Cookies and Similar Technologies

We and our service providers may use cookies, pixels, tags, local storage, scripts, and similar technologies.

Depending on the website’s configuration, these technologies may include:

Essential technologies

These support security, page operation, form submission, fraud prevention, load balancing, and other functions necessary for the website to work.

Functional technologies

These remember preferences or support optional website features.

Analytics technologies

These help us understand website traffic, performance, referral sources, and how visitors use the website.

Advertising technologies

When used, these help measure advertising campaigns, limit repeated advertisements, develop audiences, or provide advertising based on online activity.

You can manage many cookies through your browser settings. The website may also provide cookie or privacy controls. Disabling certain technologies may affect website functions.

Some third-party technologies are controlled by their providers. Their handling of information is governed by their own privacy policies and controls.

Where applicable law requires consent before using nonessential cookies or similar technologies, we will request that consent.

9. Email, Telephone, and Text Communications

We may contact you regarding:

• Your inquiry;
• A quote or consultation;
• Scheduling;
• Menu or service details;
• A payment;
• A gift certificate;
• A change, cancellation, or emergency;
• A customer-service issue;
• An applicant or contractor relationship; or
• Another requested or existing business matter.

Where permitted, we may also send promotional emails or other marketing messages.

You may unsubscribe from promotional email using the unsubscribe instructions included in the message or by contacting us. Unsubscribing from marketing will not prevent us from sending non-promotional communications reasonably necessary for an inquiry, transaction, appointment, service, legal notice, or existing business relationship.

When marketing text messages are used, they will be sent only as permitted by applicable law. Consent to receive promotional text messages will not be required as a condition of purchasing a service where prohibited by law. You may opt out of marketing texts by replying STOP or using the instructions in the message.

Message and data rates may apply.

10. Retention of Personal Information

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer period is required or permitted by law.

Retention may depend on:

• The type and sensitivity of the information;
• The service provided or requested;
• The duration of the client relationship;
• Payment and transaction requirements;
• Tax, accounting, and insurance requirements;
• Food-safety and allergy considerations;
• Professional recordkeeping requirements;
• Contractual obligations;
• The possibility of a dispute or legal claim;
• Fraud and security considerations;
• Applicable statutes of limitation; and
• Legal or regulatory requirements.

Transaction, accounting, tax, payment, ACH-authorization, and service records may be retained after services end when reasonably necessary for legal, financial, recordkeeping, dispute-resolution, or compliance purposes.

Professional health or nutrition records, when applicable, may be subject to separate retention requirements.

Information stored in backups may remain for a limited period after deletion from active systems. Backup information will not be restored to active use except for disaster recovery, security, legal, or operational purposes.

When information is no longer reasonably necessary, we may delete it, securely destroy it, deidentify it, or restrict its use.

11. Information Security

We use reasonable administrative, technical, and physical safeguards intended to protect personal information in light of:

• The nature and sensitivity of the information;
• The amount of information;
• The context in which it is processed;
• The systems used;
• The size and resources of the business; and
• Reasonably foreseeable risks.

Safeguards may include measures such as access restrictions, authentication, vendor controls, secure payment systems, device and account protections, backups, personnel procedures, and secure disposal practices, as appropriate to the circumstances.

No website, communication method, storage system, or transmission method can be guaranteed to be completely secure. We therefore cannot guarantee that personal information will never be accessed, used, disclosed, altered, lost, or destroyed without authorization.

You are responsible for using reasonable care when sending sensitive information. Do not transmit payment credentials or unnecessary health information through an unapproved or insecure method.

If we determine that a security incident requires notification under applicable law, we will provide legally required notices to affected individuals, regulators, or other parties.

12. Your Privacy Rights and Choices

Depending on where you reside, the nature of the information, and the law that applies to us, you may have the right to request that we:

• Confirm whether we process your personal information;
• Provide access to certain personal information;
• Correct inaccurate personal information;
• Delete certain personal information;
• Provide a portable copy of certain information;
• Restrict or object to certain processing;
• Opt you out of certain targeted advertising;
• Opt you out of a legally defined sale or sharing of personal information;
• Withdraw consent where processing is based on consent; or
• Review an appeal concerning a prior privacy-request decision.

These rights are not absolute. We may deny or limit a request where permitted by law, including when information is reasonably necessary to:

• Complete a transaction;
• Provide a requested service;
• Maintain financial, tax, or accounting records;
• Maintain professional or health records;
• Comply with a contract or legal obligation;
• Detect or prevent fraud or security incidents;
• Protect health and safety;
• Exercise or defend legal claims;
• Maintain evidence of a prior request;
• Preserve another person’s rights; or
• Meet another exception permitted by law.

How to submit a request

Submit privacy requests using either of the following methods:

Email: contact@mychefshirley.com
Subject line: Privacy Request

Mail:
American Nutrition LLC
Doing business as My Chef Shirley
21000 Southbank Street, Suite 106, #475
Potomac Falls, Virginia 20165

Please identify the right you are requesting to exercise and provide enough information for us to understand and respond to the request.

Do not include a full credit card number, card security code, bank account number, Social Security number, password, or unnecessary medical information in a privacy-request email.

Verification

We may need to verify your identity before completing a request. Verification may involve matching information you provide with information already maintained by us or requesting additional information reasonably necessary to prevent unauthorized access or deletion.

We will not request more information than reasonably necessary for verification.

Authorized agents

Where applicable law permits an authorized agent to submit a request, we may require proof of the agent’s authority and may contact you directly to verify the request.

Appeals

Where applicable law gives you a right to appeal our decision, you may submit an appeal using the same email or mailing address and the subject line:

Privacy Appeal

We will review and respond within the period required by applicable law.

Non-discrimination

We will not unlawfully discriminate against you for exercising an applicable privacy right. However, certain information may be necessary to provide a requested service or complete a transaction.

13. Children’s Privacy

The website is intended for adults and is not directed to children under 13.

We do not knowingly collect personal information directly online from a child under 13 without legally required parental consent.

A parent, guardian, or responsible adult may provide information about a child when reasonably necessary to arrange family meal preparation, address food allergies, purchase a gift, provide nutrition or lactation services, or obtain another requested service.

We use information about children only for the purpose for which it was provided and other purposes permitted by law. We do not sell information about children or use it for targeted advertising.

A parent or guardian who believes a child submitted information directly to us without appropriate authorization may contact us to request review or deletion.

14. Applicant Information

Applicant information is used to:

• Evaluate qualifications;
• Communicate about positions or contracting opportunities;
• Verify credentials or references;
• Conduct permitted screening;
• Maintain recruiting records;
• Comply with employment and contracting laws;
• Protect legal rights; and
• Consider the applicant for current or future opportunities.

Submitting an application does not guarantee employment, contract work, an interview, or further consideration.

Applicant information may be shared with personnel involved in hiring, screening providers, professional advisers, and others reasonably involved in the process.

15. Third-Party Websites and Services

The website may contain links to, embedded content from, or integrations with third-party websites and services, including:

• Payment platforms;
• Mapping services;
• Social-media platforms;
• Review services;
• Scheduling tools;
• Video or media services; and
• Other external websites.

We do not control the privacy, security, availability, or content of third-party services. This Privacy Policy does not govern information collected directly by those third parties.

Review the privacy policies of third-party services before providing information to them.

16. Processing in the United States

My Chef Shirley operates in the United States. Personal information may be processed and stored in the United States or in other locations where our service providers operate.

Individuals accessing the website from outside the United States understand that privacy laws in those locations may differ from the laws of their home jurisdiction.

We do not intentionally direct or market our services to residents of another country unless expressly stated.

17. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in:

• Our services;
• Our information practices;
• Our payment or technology systems;
• Our vendors;
• Applicable law; or
• Other business circumstances.

The revised policy will be posted with an updated effective date.

When required by law, we will provide additional notice or obtain consent before applying a materially different practice to personal information previously collected.

Changes will apply prospectively unless otherwise permitted by law.

18. Contact Information

Questions, concerns, or requests concerning this Privacy Policy may be directed to:

American Nutrition LLC
Doing business as My Chef Shirley
21000 Southbank Street, Suite 106, #475
Potomac Falls, Virginia 20165

Email: contact@mychefshirley.com
Phone: (571) 207-6641