In brief: We use limited first-party analytics to understand which pages and sections are useful and to connect a submitted application or email inquiry with the same browser’s prior journey. We do not sell personal data, use it for targeted advertising, record sessions, capture keystrokes, or import email content into analytics. You can opt out or delete the current browser journey through Privacy Choices.
1. Who we are and scope
Personal Chef Ana LLC operates chefana.site. Our current service and recruiting area is Texas, primarily Greater Houston. The website may be viewed from elsewhere, but viewing it does not mean services or engagements are available outside Texas. This Notice applies to every website visitor regardless of service eligibility.
Privacy contact: info@personalchefana.com or (346) 218-3912.
2. Information we collect
Website analytics. A random browser identifier and a 30-minute session identifier; normalized page path and title; page-view, CTA-click, form-start, value-free field-progress milestones, active-time, scroll-depth, named-section engagement, and active video-watch-time events; entry, exit, and page sequence; broad device class; coarse browser, operating-system, and device families (for example, Safari, iOS, and iPhone); a CSS viewport-width band; primary browser-language group; effective connection category and Save-Data preference when the browser makes them available; referring host; and bounded UTM source, medium, and campaign values. A field-progress milestone says only that an authored field category, such as contact, experience, or availability, was interacted with; it does not include what was typed or selected.
Estimated location. At the Cloudflare edge, we may classify a request as Houston area, elsewhere in Texas, outside Texas, or unknown. We may also retain an approved Greater Houston city name, such as The Woodlands or Conroe, derived from Cloudflare’s IP geolocation and shown internally as Estimated city (IP-based). This estimate may be inaccurate because of VPN, mobile-carrier, or Internet-provider routing and is not treated as a residence address. We do not retain the raw IP address, postal code, coordinates, metro code, or an unbounded city value in analytics.
Application information. If you submit the application form, we receive the name, telephone or messaging handle, cooking experience, availability, city or ZIP code, source answer, and the text you intentionally enter. Please do not submit medical, dietary, financial, government-identification, or other sensitive information in free-text fields.
Email inquiry attribution. When analytics is enabled, an email link may use a short random six-character alias assigned to this browser for up to 180 days. If you send to that address, the message remains in our ordinary Google Workspace mailbox and a technical copy may pass through a private Cloudflare Email Routing address so we can connect the inquiry to the same browser journey. The analytics system reads and retains only bounded routing metadata: sender address and display name, the original aliased recipient, a hashed message identifier for duplicate prevention, receipt time, message size, coarse spam or phishing status, and coarse SPF, DKIM, or DMARC results when available. The alias and original recipient are protected with keyed hashing and encryption at rest.
Email content boundary. The analytics system does not read or import the subject, message body, HTML, signature, attachments, or later correspondence. Those contents still exist in the business mailbox if you intentionally send an email and are handled as ordinary business communications. Messages without a current browser alias, messages classified as spam or phishing, and replies in an existing thread are not imported as analytics leads.
What analytics does not retain. We do not retain IP addresses, full user-agent strings, exact browser or operating-system versions, exact device models, exact viewport or screen dimensions, hardware characteristics, installed fonts or plugins, canvas or WebGL output, fingerprint identifiers, raw query strings, full referrer URLs, keystrokes, form-field contents, unfinished names or telephone numbers, recordings, or session replay in the analytics database. The request user-agent is classified in memory and discarded rather than stored. An incomplete form is visible only as anonymous progress milestones. The submitted application itself is stored separately from behavioral event properties.
If we later offer an optional save-and-resume draft, we will update this Notice and present a clear disclosure next to that feature before any unfinished contact value is stored. We will not silently convert the current value-free progress measurement into field-value collection.
3. How and why we use information
- Operate, secure, troubleshoot, and improve the site.
- Understand useful pages, common paths, funnels, and points where visitors leave.
- Compare responsive layout, browser compatibility, and site behavior across coarse technology segments.
- Measure applications and email inquiries and connect them with the same browser’s earlier first-party journey.
- Review an application or inquiry, communicate with the sender or applicant, and manage related business records.
- Comply with law and respond to privacy requests.
We use data only as reasonably necessary and proportionate to these disclosed purposes. We do not combine journeys across unrelated brands or business units.
4. Cookies and privacy signals
First-party analytics uses pca_vid for up to 180 days, pca_sid for 30 minutes, and, when available, pca_email_code for up to 180 days. They contain random identifiers or an opaque routing code, not a name, telephone number, or email address. If Global Privacy Control (GPC) is enabled, the tracker does not create these identifiers, substitute a personalized email alias, or send analytics events. An opt-out choice is stored in a first-party cookie so the site can remember it.
Manage these controls at Privacy Choices. The application form and ordinary, non-personalized email address remain available after analytics opt-out.
5. Disclosure and processors
We do not sell personal data or share it for cross-context behavioral or targeted advertising. We may disclose only what is necessary to service providers acting for us, including Cloudflare for website delivery, Workers, D1 storage, security, and transit processing of technical forwarded email copies; Google Workspace for the ordinary business mailbox and routing rule; professional advisers; and public authorities when legally required. We require service providers to process information for the contracted purpose.
The site currently loads display fonts from Google Fonts. That request may expose ordinary connection information, such as an IP address, to Google even though we do not place a Google advertising or analytics tag.
6. Retention
- Anonymous visitor identifiers, sessions, and raw events: up to 180 days.
- Browser email aliases: active for up to 180 days after the last first-party activity, then permanently retired and never reassigned.
- Applications, email-inquiry metadata, and linked lead records: normally up to 365 days, unless a shorter deletion request applies or longer retention is reasonably required for an active engagement, dispute, or legal obligation.
- Deidentified aggregate reporting: up to 396 days. Aggregates are not used to reconstruct an individual journey.
- Opt-out and request audit records: only as needed to honor and document the request.
7. Your Texas privacy choices
Subject to applicable law and verification, you may ask to access, correct, delete, or obtain a portable copy of personal data we hold about you. You may opt out of targeted advertising, sale of personal data, and certain profiling. We currently do none of those three activities, and we also provide a separate first-party analytics opt-out.
Submit a browser-level request through Privacy Choices, or an identified request by emailing info@personalchefana.com. Describe the request and the contact details used in an application so we can reasonably verify it. We will respond within 45 days when required, with a possible additional 45 days if reasonably necessary and permitted by law.
If we decline a request, you may appeal by replying with “Privacy appeal” in the subject line. We will explain the appeal result and, when required, how to contact the Texas Attorney General. We will not discriminate against you for exercising a privacy right.
8. Security and children
We use reasonable administrative and technical safeguards, including restricted dashboard access, encrypted transport, bounded collection, data minimization, and retention deletion. No system can guarantee absolute security.
This recruiting and services website is not directed to children under 13, and we do not knowingly collect their personal information. Do not submit an application on behalf of a child.
9. Changes
We may update this Notice as the site or law changes. The effective date above identifies the current version. Material changes will be presented before the new practice begins when notice or consent is required.