Privacy Policy

1. Introduction

Everyday Harvest operates everydayharvest.info as an educational website about balanced nutrition, everyday eating habits, and meal planning. This Privacy Policy explains the personal information involved when a visitor reads the site, chooses a cookie preference, contacts us, or submits an online dietitian consultation registration request. The contact details given below identify the website contact point for questions about these activities.

We aim to collect information relevant to the purpose for which it is provided. Information you give in a consultation request is treated differently from general page-view information: the former is entered intentionally to complete a form request, while the latter may arise automatically when a browser connects to a hosting service. Please read these sections to understand those differences.

2. Information We Collect

When you use the consultation form, the required fields are your full name, email address, and agreement to this policy. Additional comments are optional. Form inputs are checked for format and reasonable length before a confirmation is shown. You can choose to include a general question in the comments field.

Basic technical information may be processed by the web server or hosting infrastructure when pages are requested, including IP address, browser details, request timestamps, page addresses, and operational errors. A session identifier is also used to protect forms against cross-site request forgery and repeated automated submissions. Cookie preference selection is stored in the browser and is described in the Cookie Policy.

3. How We Use Personal Information

We process form details to validate the contact request you initiate and display a confirmation after the required fields have been checked. We do not use this form to create an online shop account, charge a payment, or automatically enroll visitors in a commercial program. A request does not by itself establish a paid service or a confirmed appointment.

Technical information is used to display pages, maintain website functionality, check form submissions, reduce abuse, and investigate operational problems. We do not install advertising trackers or an analytics platform as part of this website. If our practices change, the information provided in this policy and the consent controls will need to be reviewed accordingly.

4. Consultation Form Submissions

The contact page uses server-side validation for the online consultation form. Required fields must be complete, the email address must be in an accepted format, and consent must be given. Repeated submissions may be limited through session-based request controls, while a form security token helps validate the request.

When the supplied fields pass the checks, the website displays a confirmation page. When validation fails, an error message invites you to review the relevant field. You may also use the published email address to contact Everyday Harvest directly about educational topics or website enquiries.

5. Legal Basis and Consent

The registration form includes an explicit checkbox linking to this policy. By selecting that box and submitting the form, you consent to the handling of the entered information for form validation and confirmation. Consent is not assumed simply because you read an article or browse a public page. You may contact Everyday Harvest to withdraw your consent for future handling of an outstanding inquiry.

Certain limited technical operations may also be necessary to provide the pages you request, safeguard the form, and administer the website. Where applicable data protection requirements apply, requests concerning access, correction, deletion, and other applicable rights are assessed according to the relevant circumstances and legal obligations.

6. Information Storage and Security

The form relies on a session identifier and temporary form security tokens to complete validation and display the relevant confirmation or error. The session cookie is configured as HTTP-only and SameSite=Lax, with the Secure flag enabled when the website is accessed through HTTPS. Your browser may additionally retain standard autofill details according to its own settings.

The website also uses standard server-side validation and output escaping. These measures are designed to support ordinary operations but should not be interpreted as a claim of a particular security certification. Hosting, access controls, and HTTPS depend on the infrastructure used to operate the website.

7. Data Retention

Technical request logs, where maintained by hosting services, have retention settings determined by the host. We aim to limit access and retention to what is appropriate for running the site and applicable legal obligations. Visitors can ask about relevant technical retention and deletion arrangements using the contact information below.

Session identifiers and form security data are temporary. A session may end when the browser closes or the server expires the session, depending on hosting configuration. Your selected cookie-consent level is retained in your browser until you clear it or change the preference; the browser stores the selection rather than sending an independent analytics record to Everyday Harvest.

8. Sharing Information with Service Providers

Technical page requests and form validation may involve the website hosting provider because the server must handle requests and return responses. The technical location of the hosting service and its standard request-log practices depend on its operational configuration. Separate email correspondence sent directly to [email protected] may involve the sender’s and recipient’s email providers.

The site loads DM Serif Display and DM Sans through Google Fonts and Tailwind CSS from a content delivery network. Those browser requests may communicate ordinary connection metadata, such as an IP address, to the external providers. We do not embed advertising pixels or optional visitor-behavior analytics scripts. External services have their own technical practices and privacy information.

9. International Access and Transfers

Browser connections to external fonts and code-delivery providers may involve technical infrastructure operated in different jurisdictions. The specific safeguards that apply depend on the provider and the purposes of the relevant processing.

The geographic location of a visitor alone does not reveal all applicable privacy obligations. If the site changes hosting services, messaging systems, or data collection processes, those changes should be evaluated and this policy updated so it accurately reflects the actual technical and administrative arrangements.

10. User Privacy Rights

You may contact us about personal information associated with your use of the website, request correction or deletion where applicable, withdraw consent where this is relevant, or raise a concern about personal data processing. We may need reasonable information to verify that a request relates to you before acting on data associated with an email address.

Rights and possible exceptions depend on applicable law and the circumstances of the request. We will assess requests with reference to applicable privacy requirements and any other obligations that genuinely apply. Browser-based cookie storage can generally be cleared using your browser settings or changed with the Cookie preferences control available in the footer.

11. Contact Information and Policy Updates

For privacy questions or requests, contact Everyday Harvest at [email protected] or +62 22 742 9613. Our published postal address is the contact address listed on our Contact page. Please describe the nature of your request and the contact channel we can use to respond without unnecessarily disclosing private information.

This policy may be revised if the website’s forms, hosting, mail transport, legal obligations, or third-party services change. An updated policy will be made available on this page. Material changes to collection or processing should be evaluated before implementation, and readers may request clarification about processing arrangements using the published contact information.