Privacy Policy

Version: 1.1

Last Updated: February 2, 2026

Privacy Notice

Company: Backyahd BBQ, LLC, Seattle, WA, United States

This privacy policy ("Policy") describes how Backyahd BBQ ("Company," "we," "us," or "our") collects, uses, stores, and shares your personal information when you use our giveaway platform and related services ("Services").

By using our Services, you acknowledge that you have read and understood this Policy and agree to the collection, use, storage, and sharing of your information as described herein. We track your consent with date and time stamps for audit purposes.

Questions or concerns? Contact us at jonny@backyahdbbq.com

Summary of Key Points

What personal information do we collect? Name, email, phone number, mailing address, IP address, and Instagram username (depending on how you use our Services).

Do we process sensitive personal information? No, we do not collect or process sensitive personal information (e.g., financial data, health information, SSN, payment details).

Why do we collect your information? To administer giveaways, deliver prizes, prevent fraud, and fulfill legal obligations.

Who do we share information with? Shipping carriers, brand partners (for prize fulfillment), and service providers (Azure SQL Database via Microsoft).

Do we sell your information? No, we do not sell, rent, or trade your personal information.

How long do we keep your information? We retain your account indefinitely until you request deletion (unless legally required to retain longer).

What are your rights? Access, rectification, deletion, portability, objection, and restriction of processing (depending on your location).

How to exercise your rights? Email jonny@backyahdbbq.com

What Information We Collect

Information Collected from All Users

  • IP Address: Automatically collected for fraud prevention and security (detecting multiple entries from the same user)
  • Browser and Device Information: Browser type, device type, operating system (for technical support and analytics)

Information Collected When You Enter a Giveaway

  • Instagram Username: To verify eligibility and notify winners
  • Entry Timestamp: Date and time you entered the giveaway

Information Collected When You Claim a Prize

If you win and claim a prize, we collect:

  • Full Name: For shipping label and prize delivery
  • Email Address: For shipping notifications and confirmation
  • Phone Number: Optional, for shipping carrier delivery notifications
  • Mailing Address: Street address, city, state, ZIP code, country (for prize shipment)

How We Use Your Information

We use your personal information solely for the following purposes:

  • Giveaway Administration: To manage entries, select winners, and verify eligibility
  • Prize Fulfillment: To coordinate and ship prizes to winners
  • Fraud Prevention: To detect and prevent duplicate entries, fake accounts, and abuse
  • Legal Compliance: To comply with sweepstakes regulations, tax reporting (if applicable), and legal obligations
  • Communication: To send giveaway notifications, prize delivery updates, and respond to inquiries

Cookies and Tracking Technologies

We use cookies and similar technologies to improve your experience and maintain session state. Here's what we use:

Essential Cookies

  • Authentication cookies: Azure B2C session cookies to maintain your login state
  • CSRF tokens: Security tokens to prevent cross-site request forgery
  • Cloudflare Turnstile: Bot protection tokens to prevent automated abuse (processes IP address and browser characteristics)

Functional/Preference Cookies

  • localStorage: Used to store favorited products, product comparison selections, filter preferences, and user interface settings
  • Cookie consent: Remembers your cookie banner preference
  • Session counters: Tracks product views and filter usage for user experience improvements (stored locally, not transmitted)

Managing Cookies

You can control cookies through your browser settings. Note that disabling essential cookies may prevent you from using certain features (like logging in or entering giveaways).

For more information, visit our Cookie Preferences page.

Analytics and Usage Tracking

With your consent, we use Google Analytics 4 (GA4) to understand how visitors use our site. This helps us improve content and user experience.

What We Track

  • Page views: Which pages you visit and navigation patterns
  • Product interactions: Product views, searches, filter usage, and comparison selections
  • Content engagement: Scroll depth (25%, 50%, 75%, 100%), video plays, and time on page
  • Technical data: Browser type, device type, screen resolution, and general location (country/region level)

Privacy Protections

  • IP Anonymization: Your full IP address is not stored by Google Analytics
  • Consent-based: Analytics only activates after you accept cookies
  • No cross-site tracking: We do not use Google Signals or advertising features
  • Opt-out available: You can disable analytics via our Cookie Preferences page or browser extensions

Google Analytics is provided by Google LLC. For more information, see Google's Privacy Policy.

Third-Party Embedded Content

Our site embeds content from third-party platforms. When you view this content, those platforms may collect data according to their own privacy policies:

These third parties may use cookies and tracking technologies. We do not control their data collection practices. You can manage third-party cookies through your browser settings.

Affiliate Links and Marketing

Some links on our site are affiliate links. When you click these links and make a purchase, we may earn a commission at no additional cost to you.

Affiliate Partners

  • Amazon Associates: Product links to Amazon.com (tracking ID in URL)
  • ShareASale: Links to brand partner websites
  • Direct brand partnerships: ThermoWorks, Heritage Steel, and other BBQ equipment brands

What Affiliates Track

When you click an affiliate link, the affiliate network may collect:

  • Click timestamp and referring page
  • Your IP address and device information
  • Purchase information (if you complete a transaction)

We do not share your personal information with affiliates. They only know that a click came from our site.

Newsletter and Email Communications

If you subscribe to our newsletter, we collect and use your information as follows:

Information Collected

  • Email address: Required to send newsletter
  • Name: Optional, for personalization
  • Subscription date: When you signed up
  • Email engagement: Open rates and click rates (aggregated)

How We Use It

  • Send periodic updates about new content, recipes, and gear reviews
  • Notify you about giveaways and promotions
  • Share exclusive discount codes (for subscribers only)

Unsubscribe

You can unsubscribe at any time by clicking the "Unsubscribe" link at the bottom of any email. We will remove your email from our mailing list within 48 hours.

Contact Form Submissions

When you submit our contact form, we collect:

  • Name: To address you in our response
  • Email address: To reply to your inquiry
  • Message content: Your question or feedback
  • Submission timestamp: When you contacted us

Contact form data is used solely to respond to your inquiry and is retained for reference purposes until you request deletion.

State-Specific Giveaway Eligibility

Certain states require registration and bonding for giveaways exceeding specific prize value thresholds. To avoid compliance costs, we may exclude residents of these states from specific giveaways based on total prize value:

  • Rhode Island: Giveaways with total prize value exceeding $500
  • Florida: Giveaways with total prize value exceeding $5,000
  • New York: Giveaways with total prize value exceeding $5,000

State exclusions are clearly disclosed in each giveaway's official rules. These exclusions are based on legal compliance requirements, not on protected class characteristics, and are standard industry practice.

Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), UK, or Switzerland, we process your personal information under the following legal bases:

  • Contract Performance (GDPR Art. 6(1)(b)): Processing is necessary to perform our contract with you (administering giveaways and delivering prizes)
  • Legitimate Interest (GDPR Art. 6(1)(f)): We have a legitimate interest in preventing fraud, ensuring fair participation, and maintaining the integrity of our giveaways
  • Legal Obligation (GDPR Art. 6(1)(c)): Processing is necessary to comply with legal obligations (e.g., sweepstakes regulations, tax reporting)
  • Consent (GDPR Art. 6(1)(a)): Where required, we obtain your explicit consent before processing (e.g., marketing communications, if applicable)

Who We Share Your Information With

Shipping Carriers

We share your name, address, and phone number with shipping carriers (USPS, UPS, FedEx, DHL) to deliver prizes. They are contractually obligated to use your information only for delivery purposes.

Brand Partners

We may share your Instagram username with brand partners who sponsor giveaways for winner verification and prize coordination. Brand partners are contractually required to protect your information and may not use it for marketing without your separate consent.

Service Providers (Data Processors)

We use third-party service providers to operate our Services, including:

  • Cloud infrastructure and database hosting providers
  • Authentication and identity management services
  • Email delivery services (for notifications)

These providers are contractually bound to protect your information under GDPR Standard Contractual Clauses (SCCs) and other data protection agreements.

WE DO NOT SELL YOUR PERSONAL INFORMATION

Backyahd BBQ does not sell, rent, trade, or monetize your personal information to third parties. We do not engage in the sale of personal information as defined under CCPA, GDPR, or any other privacy law.

International Data Transfers

Your personal information is stored on Microsoft Azure servers located in the United States (Azure US East region). If you are located outside the United States, your information will be transferred to and processed in the U.S.

For data transfers from the EEA, UK, or Switzerland, we rely on:

  • Standard Contractual Clauses (SCCs): EU-approved data transfer mechanisms between us and Microsoft Azure
  • Adequacy Decisions: Where applicable, we rely on adequacy decisions by the European Commission
  • Your Consent: By using our Services, you consent to this transfer

How Long We Keep Your Information

Retention Periods

  • Account Data: Retained indefinitely until you request deletion
  • Giveaway Entry Data: Retained with your account until you request deletion
  • Winner Shipping Information: Retained until you request deletion (unless legal retention required)
  • IP Addresses (Fraud Prevention): 90 days, then automatically deleted
  • Legal/Tax Records: May be retained longer if required by law (e.g., tax reporting obligations)

We do not automatically delete your account or personal data. You may request deletion at any time (see "Your Privacy Rights" section), subject to legal retention requirements.

Your Privacy Rights

Rights for All Users (GDPR, CCPA, and Similar Laws)

  • Right to Access: Request a copy of your personal information
  • Right to Rectification: Correct inaccurate or incomplete information
  • Right to Deletion ("Right to be Forgotten"): Request deletion of your personal information (subject to legal exceptions)
  • Right to Data Portability: Receive your data in a structured, machine-readable format (JSON or CSV)
  • Right to Restrict Processing: Limit how we use your information
  • Right to Object: Object to processing based on legitimate interests (e.g., fraud prevention, analytics)
  • Right to Withdraw Consent: If processing is based on consent, you may withdraw it at any time

Additional Rights for California Residents (CCPA/CPRA)

  • Right to Know: Request disclosure of categories and specific pieces of personal information we have collected
  • Right to Delete: Request deletion of your personal information (subject to exceptions)
  • Right to Opt-Out of Sale: We do not sell personal information, so this right is not applicable
  • Right to Non-Discrimination: Equal service and pricing regardless of privacy rights exercised
  • Right to Correct: Request correction of inaccurate information

Right to Lodge a Complaint (EU/UK Residents)

If you are located in the European Economic Area (EEA) or United Kingdom, you have the right to lodge a complaint with your local Data Protection Authority (DPA) if you believe we have violated your privacy rights.

EU residents: Find your local DPA at European Data Protection Board

UK residents: Contact the Information Commissioner's Office (ICO)

How to Exercise Your Rights

To exercise any of your privacy rights, please contact us at:

Email: jonny@backyahdbbq.com

Subject Line: "Privacy Rights Request"

Response Time: We will respond within 30 days (or as required by applicable law). We may need to verify your identity before processing your request.

Legal Exceptions: We may not be able to fulfill deletion requests if information is required for legal compliance (e.g., tax reporting, sweepstakes regulations, ongoing legal disputes).

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, loss, alteration, or disclosure, including:

  • Encryption of data in transit (HTTPS/TLS) and at rest (Azure SQL encryption)
  • Role-Based Access Control (RBAC) limiting employee access to personal data
  • Regular security audits and vulnerability assessments
  • Secure authentication (Azure B2C with multi-factor authentication support)
  • Firewall and network security controls

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security, but we continuously work to improve our security practices.

Data Breach Notification (72-Hour Procedure)

In the event of a data breach affecting your personal information, we will:

  • GDPR (EU Residents): Notify the relevant supervisory authority within 72 hours of discovery and notify affected individuals without undue delay
  • CCPA (California Residents): Notify affected individuals as required by California law
  • Other Jurisdictions: Comply with applicable state and federal breach notification laws

Notification Method: We will notify you via email to the address associated with your account, and/or by prominent notice on our website.

Children's Privacy (COPPA)

Our Services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at jonny@backyahdbbq.com and we will delete such information promptly.

If we learn we have collected personal information from a child under 13 without verification of parental consent, we will delete that information as quickly as possible.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service offerings.

We will notify you of material changes by:

  • Updating the "Last Updated" date at the top of this page
  • Posting a prominent notice on our website
  • Sending an email notification (for significant changes affecting your rights)

Your continued use of our Services after changes become effective constitutes your acceptance of the revised Policy.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: jonny@backyahdbbq.com

Contact Form: backyahdbbq.com/contact

Company: Backyahd BBQ LLC

Location: Seattle, WA, United States

Privacy Policy Version: 1.1

Effective Date: February 2, 2026

Last Reviewed: January 5, 2026

This Privacy Policy is compliant with GDPR (EU), CCPA/CPRA (California), and other applicable data protection laws. For the full terms governing your use of our Services, please see our Terms of Service.