Privacy Policy

Version: 1.2

Last Updated: September 1, 2026

Privacy Notice

Company: Backyahd BBQ, LLC, Seattle, WA, United States

This privacy policy ("Policy") describes how Backyahd BBQ ("Company," "we," "us," or "our") collects, uses, stores, and shares your personal information when you use our website, content, product recommendations, advertising, giveaway platform, and related services ("Services").

By using our Services, you acknowledge that you have read this Policy. Where consent is required, we ask for it through our privacy controls rather than treating continued use as consent. Consent choices are stored with a timestamp and policy version.

Questions or concerns? Contact us at jonny@backyahdbbq.com

Summary of Key Points

What personal information do we collect? Name, email, phone number, mailing address, IP address, and Instagram username (depending on how you use our Services).

Do we process sensitive personal information? No, we do not collect or process sensitive personal information (e.g., financial data, health information, SSN, payment details).

Why do we collect your information? To operate and improve the Services, administer giveaways, deliver prizes, prevent fraud, provide analytics and advertising when permitted, and fulfill legal obligations.

Who do we share information with? Shipping carriers, brand partners for prize fulfillment, Microsoft and other service providers, and Google when you permit analytics or advertising.

Do we sell or share your information for advertising? We do not sell personal information for money. Advertising technology may constitute "sharing" or targeted advertising under some US state laws, so we provide advertising controls and honor Global Privacy Control.

How long do we keep your information? We retain your account indefinitely until you request deletion (unless legally required to retain longer).

What are your rights? Access, rectification, deletion, portability, objection, and restriction of processing (depending on your location).

How to exercise your rights? Email jonny@backyahdbbq.com

What Information We Collect

Information Collected from All Users

  • IP Address: Automatically collected for fraud prevention and security (detecting multiple entries from the same user)
  • Browser and Device Information: Browser type, device type, operating system (for technical support and analytics)

Information Collected When You Enter a Giveaway

  • Instagram Username: To verify eligibility and notify winners
  • Entry Timestamp: Date and time you entered the giveaway

Information Collected When You Claim a Prize

If you win and claim a prize, we collect:

  • Full Name: For shipping label and prize delivery
  • Email Address: For shipping notifications and confirmation
  • Phone Number: Optional, for shipping carrier delivery notifications
  • Mailing Address: Street address, city, state, ZIP code, country (for prize shipment)

How We Use Your Information

We use personal information for the following purposes:

  • Giveaway Administration: To manage entries, select winners, and verify eligibility
  • Prize Fulfillment: To coordinate and ship prizes to winners
  • Fraud Prevention: To detect and prevent duplicate entries, fake accounts, and abuse
  • Legal Compliance: To comply with sweepstakes regulations, tax reporting (if applicable), and legal obligations
  • Communication: To send giveaway notifications, prize delivery updates, and respond to inquiries
  • Service Improvement: With permission where required, to understand content usage and improve site performance
  • Advertising: With permission where required, to request, display, personalize, and measure a labelled Google AdSense footer advertisement

Cookies and Tracking Technologies

We use cookies and similar technologies to improve your experience and maintain session state. Here's what we use:

Essential Cookies

  • Authentication cookies: Azure B2C session cookies to maintain your login state
  • CSRF tokens: Security tokens to prevent cross-site request forgery
  • Cloudflare Turnstile: Bot protection tokens to prevent automated abuse (processes IP address and browser characteristics)
  • localStorage: Used to store favorited products, product comparison selections, filter preferences, user interface settings, and active cooking timers that you explicitly start. Active timer state stays on your device and is not transmitted to us. A local stop marker prevents a stopped timer from returning in another browser tab
  • Browser timer alerts: Best-effort alerts require browser notification permission and are available only while your browser can run the page. Closing the browser may prevent alerts
  • Cookie consent: Remembers your cookie banner preference

Local Preferences

  • Session counters: Tracks product views and filter usage for user experience improvements (stored locally, not transmitted)

Advertising Technologies

If you enable Advertising, Google AdSense may use cookies, local storage, consent signals, device and browser information, approximate location, referring pages, and ad interaction data to select, deliver, personalize, secure, and measure ads.

In the EEA, UK, and Switzerland, enabling the site Advertising preference may be followed by Google's certified regional consent message. Google's message is authoritative for Google and IAB vendor purposes in those regions. Optional purposes and vendors are off until you choose them.

Managing Cookies

You can control cookies through your browser settings. Note that disabling essential cookies may prevent you from using certain features (like logging in or entering giveaways).

For more information, visit our Cookie Preferences page.

Analytics and Usage Tracking

With your consent, we use Google Analytics 4 (GA4) to understand how visitors use our site. This helps us improve content and user experience.

What We Track

  • Page views: Which pages you visit and navigation patterns
  • Product interactions: Product views, searches, filter usage, and comparison selections
  • Content engagement: Scroll depth (25%, 50%, 75%, 100%), video plays, and time on page
  • Technical data: Browser type, device type, screen resolution, and general location (country/region level)

Privacy Protections

  • IP Anonymization: Your full IP address is not stored by Google Analytics
  • Consent-based: Analytics only activates after you accept cookies
  • No cross-site tracking: We do not use Google Signals or Google Analytics advertising features
  • Opt-out available: You can disable analytics via our Cookie Preferences page or browser extensions

Google Analytics is provided by Google LLC. For more information, see Google's Privacy Policy.

Advertising

With your separate advertising consent, Google AdSense may display one clearly labelled, responsive advertisement near the site footer on eligible content pages. We do not use automatic ad placement.

  • The AdSense script and ad request remain off until you enable advertising.
  • Legal, account, contact, error, and utility pages do not display ads.
  • You can withdraw the site Advertising preference at any time through Cookie Preferences. Covered European users can also reopen Google's regional privacy choices.
  • Global Privacy Control signals keep advertising disabled.

Google may process cookies, local storage, consent signals, device and browser information, approximate location, referring pages, and ad interaction data under its own privacy terms. Personalized ads are permitted only after the required affirmative consent. See How Google uses information for advertising.

Third-Party Embedded Content

Our site embeds content from third-party platforms. When you view this content, those platforms may collect data according to their own privacy policies:

These third parties may use cookies and tracking technologies. We do not control their data collection practices. You can manage third-party cookies through your browser settings.

Affiliate Links and Marketing

Some links on our site are affiliate links. When you click these links and make a purchase, we may earn a commission at no additional cost to you.

Affiliate Partners

  • Amazon Associates: Product links to Amazon.com (tracking ID in URL)
  • ShareASale: Links to brand partner websites
  • Direct brand partnerships: ThermoWorks, Heritage Steel, and other BBQ equipment brands

What Affiliates Track

When you click an affiliate link, the affiliate network may collect:

  • Click timestamp and referring page
  • Your IP address and device information
  • Purchase information (if you complete a transaction)

We do not share your personal information with affiliates. They only know that a click came from our site.

Newsletter and Email Communications

If you subscribe to our newsletter, we collect and use your information as follows:

Information Collected

  • Email address: Required to send newsletter
  • Name: Optional, for personalization
  • Subscription date: When you signed up
  • Email engagement: Open rates and click rates (aggregated)

How We Use It

  • Send periodic updates about new content, recipes, and gear reviews
  • Notify you about giveaways and promotions
  • Share exclusive discount codes (for subscribers only)

Unsubscribe

You can unsubscribe at any time by clicking the "Unsubscribe" link at the bottom of any email. We will remove your email from our mailing list within 48 hours.

Contact Form Submissions

When you submit our contact form, we collect:

  • Name: To address you in our response
  • Email address: To reply to your inquiry
  • Message content: Your question or feedback
  • Submission timestamp: When you contacted us

Contact form data is used solely to respond to your inquiry and is retained for reference purposes until you request deletion.

State-Specific Giveaway Eligibility

Certain states require registration and bonding for giveaways exceeding specific prize value thresholds. To avoid compliance costs, we may exclude residents of these states from specific giveaways based on total prize value:

  • Rhode Island: Giveaways with total prize value exceeding $500
  • Florida: Giveaways with total prize value exceeding $5,000
  • New York: Giveaways with total prize value exceeding $5,000

State exclusions are clearly disclosed in each giveaway's official rules. These exclusions are based on legal compliance requirements, not on protected class characteristics, and are standard industry practice.

Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), UK, or Switzerland, we process your personal information under the following legal bases:

  • Contract Performance (GDPR Art. 6(1)(b)): Processing is necessary to perform our contract with you (administering giveaways and delivering prizes)
  • Legitimate Interest (GDPR Art. 6(1)(f)): We have a legitimate interest in preventing fraud, ensuring fair participation, and maintaining the integrity of our giveaways
  • Legal Obligation (GDPR Art. 6(1)(c)): Processing is necessary to comply with legal obligations (e.g., sweepstakes regulations, tax reporting)
  • Consent (GDPR Art. 6(1)(a)): Where required, we obtain your consent before optional analytics, advertising storage, advertising user data, or personalized advertising

Who We Share Your Information With

Shipping Carriers

We share your name, address, and phone number with shipping carriers (USPS, UPS, FedEx, DHL) to deliver prizes. They are contractually obligated to use your information only for delivery purposes.

Brand Partners

We may share your Instagram username with brand partners who sponsor giveaways for winner verification and prize coordination. Brand partners are contractually required to protect your information and may not use it for marketing without your separate consent.

Service Providers (Data Processors)

We use third-party service providers to operate our Services, including:

  • Cloud infrastructure and database hosting providers
  • Authentication and identity management services
  • Email delivery services (for notifications)

These providers are contractually bound to protect your information under GDPR Standard Contractual Clauses (SCCs) and other data protection agreements.

Google Analytics and AdSense

When permitted by your choices, Google may receive online identifiers, consent signals, device and browser information, approximate location, page and referrer information, and interaction data to provide analytics or advertising. Google may act as a service provider or independently determine aspects of its processing, depending on the product, settings, region, and purpose.

Sale and Sharing Choices

Backyahd BBQ does not sell personal information for money. Some laws define disclosures for cross-context behavioral advertising as "sharing" even without payment.

You can disable Advertising through Cookie Preferences. We also honor Global Privacy Control as an opt-out of advertising sharing and targeted advertising.

International Data Transfers

Your personal information is stored on Microsoft Azure servers located in the United States (Azure US East region). If you are located outside the United States, your information will be transferred to and processed in the U.S.

For data transfers from the EEA, UK, or Switzerland, we rely on:

  • Standard Contractual Clauses (SCCs): EU-approved data transfer mechanisms between us and Microsoft Azure
  • Adequacy Decisions: Where applicable, we rely on adequacy decisions by the European Commission
  • Consent: Where applicable and legally valid, a provider may rely on your consent for a specific transfer or processing purpose

How Long We Keep Your Information

Retention Periods

  • Account Data: Retained indefinitely until you request deletion
  • Giveaway Entry Data: Retained with your account until you request deletion
  • Winner Shipping Information: Retained until you request deletion (unless legal retention required)
  • IP Addresses (Fraud Prevention): 90 days, then automatically deleted
  • Google Analytics and Advertising Data: Retained according to our configured Google product settings and Google's applicable retention policies
  • Legal/Tax Records: May be retained longer if required by law (e.g., tax reporting obligations)

We do not automatically delete your account or personal data. You may request deletion at any time (see "Your Privacy Rights" section), subject to legal retention requirements.

Your Privacy Rights

Rights for All Users (GDPR, CCPA, and Similar Laws)

  • Right to Access: Request a copy of your personal information
  • Right to Rectification: Correct inaccurate or incomplete information
  • Right to Deletion ("Right to be Forgotten"): Request deletion of your personal information (subject to legal exceptions)
  • Right to Data Portability: Receive your data in a structured, machine-readable format (JSON or CSV)
  • Right to Restrict Processing: Limit how we use your information
  • Right to Object: Object to processing based on legitimate interests (e.g., fraud prevention, analytics)
  • Right to Withdraw Consent: If processing is based on consent, you may withdraw it at any time

Additional Rights for California Residents (CCPA/CPRA)

  • Right to Know: Request disclosure of categories and specific pieces of personal information we have collected
  • Right to Delete: Request deletion of your personal information (subject to exceptions)
  • Right to Opt-Out of Sale or Sharing: We do not sell personal information for money. You may opt out of advertising sharing and targeted advertising through Cookie Preferences or Global Privacy Control
  • Right to Non-Discrimination: Equal service and pricing regardless of privacy rights exercised
  • Right to Correct: Request correction of inaccurate information
  • Authorized Agent: Where applicable, an authorized agent may submit a request on your behalf, subject to identity and authority verification
  • Right to Appeal: Where applicable, you may appeal our decision on a privacy request by replying to our response

Right to Lodge a Complaint (EU/UK Residents)

If you are located in the European Economic Area (EEA) or United Kingdom, you have the right to lodge a complaint with your local Data Protection Authority (DPA) if you believe we have violated your privacy rights.

EU residents: Find your local DPA at European Data Protection Board

UK residents: Contact the Information Commissioner's Office (ICO)

How to Exercise Your Rights

To exercise any of your privacy rights, please contact us at:

Email: jonny@backyahdbbq.com

Subject Line: "Privacy Rights Request"

Response Time: We will respond within 30 days (or as required by applicable law). We may need to verify your identity before processing your request.

Legal Exceptions: We may not be able to fulfill deletion requests if information is required for legal compliance (e.g., tax reporting, sweepstakes regulations, ongoing legal disputes).

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, loss, alteration, or disclosure, including:

  • Encryption of data in transit (HTTPS/TLS) and at rest (Azure SQL encryption)
  • Role-Based Access Control (RBAC) limiting employee access to personal data
  • Regular security audits and vulnerability assessments
  • Secure authentication (Azure B2C with multi-factor authentication support)
  • Firewall and network security controls

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security, but we continuously work to improve our security practices.

Data Breach Notification (72-Hour Procedure)

In the event of a data breach affecting your personal information, we will:

  • GDPR (EU Residents): Notify the relevant supervisory authority within 72 hours of discovery and notify affected individuals without undue delay
  • CCPA (California Residents): Notify affected individuals as required by California law
  • Other Jurisdictions: Comply with applicable state and federal breach notification laws

Notification Method: We will notify you via email to the address associated with your account, and/or by prominent notice on our website.

Children's Privacy (COPPA)

Our Services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at jonny@backyahdbbq.com and we will delete such information promptly.

If we learn we have collected personal information from a child under 13 without verification of parental consent, we will delete that information as quickly as possible.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service offerings.

We will notify you of material changes by:

  • Updating the "Last Updated" date at the top of this page
  • Posting a prominent notice on our website
  • Sending an email notification (for significant changes affecting your rights)

Your continued use of our Services after changes become effective constitutes your acceptance of the revised Policy.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: jonny@backyahdbbq.com

Contact Form: backyahdbbq.com/contact

Company: Backyahd BBQ LLC

Location: Seattle, WA, United States

Privacy Policy Version: 1.2

Effective Date: September 1, 2026

Last Reviewed: September 1, 2026

Privacy obligations depend on where you live and whether a law applies to Backyahd BBQ. We maintain controls intended to support applicable requirements and update them as our Services change. For the terms governing your use of our Services, please see our Terms of Service.