LGPD Privacy Policy

Privacy Policy (LGPD Compliant)

Last Updated: May 27, 2026

This Privacy Policy describes Our policies and procedures on the collection, use, and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You under the Brazilian General Data Protection Law (Lei Geral de Proteção de Dados - LGPD, Law No. 13.709/2018).

We use Your Personal Data to provide and improve the Service. By interacting with our Website and digital offerings, you acknowledge the processing parameters detailed in this Privacy Policy.

1. Interpretation and Definitions

Interpretation

The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

  • "Account" means a unique account created for You to access our Service or parts of our Service.

  • "Company" (referred to as either "the Company", "We", "Us" or "Our" in this Agreement) refers to Turnip Vegan LLC, 3639 Midway Drive, Suite B #184, San Diego, CA. For the purpose of the LGPD, the Company acts as the Data Controller.

  • "Cookies" are small files that are placed on Your computer, mobile device, or any other device by a website, containing the details of Your browsing history on that website among its many uses.

  • "Data Subject" (referred to as "You" or "Your") means the natural person whose personal data is subject to processing under the LGPD.

  • "Device" means any device that can access the Service such as a computer, a cellphone, or a digital tablet.

  • "Personal Data" means any information related to an identified or identifiable natural person. This includes online identifiers, location data, names, and transaction histories.

  • "Service" refers to the Website and the digital items (such as eBooks) sold through it.

  • "Service Provider" means any natural or legal person who processes data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate, deliver, or optimize the Service. Under the LGPD, Service Providers act as Data Operators.

  • "Usage Data" refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).

  • "Website" refers to Turnip Vegan, accessible from https://turnipvegan.com.

2. Collecting and Using Your Personal Data

Types of Data Collected

Personal Data

While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. This includes, but is not limited to:

  • Email address

  • First name and last name

  • Phone number

  • Address, State, Province, ZIP/Postal code, City

  • Financial Data (Payment card details and histories handled entirely via our secure third-party billing operators)

Usage Data

Usage Data is collected automatically when using the Service. It may include information such as Your Device's Internet Protocol address (e.g., IP address), browser type, browser version, the pages of our Service that You visit, the time and date of Your visit, the time spent on those pages, unique device identifiers, and other diagnostic data.


 

When You access the Service by or through a mobile device, We may collect certain information automatically, including the type of mobile device You use, Your mobile device unique ID, the IP address of Your mobile device, Your mobile operating system, the type of mobile Internet browser You use, and unique device identifiers.


 

Tracking Technologies and Cookies

We use Cookies and similar tracking technologies (such as web beacons, tags, and pixels) to track activity on Our Service and secure certain configurations.

  • Cookies or Browser Cookies. A cookie is a small file placed on Your Device. You can instruct your browser to refuse all Cookies or to indicate when a Cookie is being sent. However, if You do not accept Cookies, You may not be able to use some parts of our Service. Under the LGPD, tracking cookies used for marketing or behavioral advertising require your clear opt-in or option to manage preferences.


     

  • Web Beacons. Certain sections of our Service and our emails may contain small electronic files known as web beacons that permit the Company to count users who have visited those pages or opened an email and compile related website metrics.

We use both Session and Persistent Cookies for the purposes set out below:

  • Necessary / Essential Cookies (Session): Administered by Us. These are essential to provide You with services available through the Website, process transactions for digital assets like eBooks, and prevent fraudulent account actions.

  • Cookies Policy / Notice Acceptance Cookies (Persistent): Administered by Us. These identify if users have accepted or acknowledged the cookie settings on the Website.

  • Functionality Cookies (Persistent): Administered by Us. These allow us to remember choices You make when You use the Website, such as remembering your login details or language preference.

  • Tracking and Performance Cookies (Persistent): Administered by Third-Parties. These trace behavioral traffic patterns across the Website. This data is linked to pseudonymous identifiers to evaluate user trends, and no non-essential pixel scripts run without your ability to control consent.

3. Legal Bases for Processing Under the LGPD

In accordance with LGPD Article 7, the Company only processes Your Personal Data under valid lawful justifications. We rely on the following processing grounds:

  • Execution of a Contract: Processing is mandatory to fulfill our contract with you, such as delivering an eBook purchase, managing an account registration, or facilitating your orders.

  • Consent: Where you have explicitly opted in to receive promotional newsletters, plant-based recipes, and marketing emails. You can withdraw your consent at any time.

  • Legitimate Interests of the Controller: To secure our Website, monitor technical stability, prevent fraudulent actions, and optimize your experience with our plant-based community content.

  • Compliance with a Legal or Regulatory Obligation: To meet mandatory financial reporting, accounting audits, and statutory tax obligations in the United States or international jurisdictions.

4. Third-Party Links, Affiliates, and Separate Platforms

Our Website contains links to external, third-party websites and separate digital spaces that are not operated under this specific domain. This includes:

  • The Turnip Vegan Recipe Club: Links to our premium membership community located at www.topturnipvegan.club. Please note that the Recipe Club operates on a separate web platform with its own membership architecture, subscription billing systems, and separate data handling profiles.

  • Our Publisher: Links to purchase our physical cookbook from external book retailers.

  • Affiliate Partnerships: Partner links to third-party items we love and recommend, such as our mushroom grow kit collaboration with North Spore.

When you click on these links or navigate to these external spaces, you leave this Website. We do not control, review, or assume responsibility for the privacy practices, cookie deployment, or individual data processing methods of these separate entities. We highly encourage you to read the privacy policies of any external website or membership platform you visit.

5. How Shopify Helps & Uses Data

We use Shopify to power our online store. Shopify acts as our service provider (Data Operator) to process and store your data on our behalf.

Shopify utilizes integrated data and automated systems across its native ecosystem—including apps like the Shop channel, Shopify Email, Shopify Audiences, Search & Discovery, and Shopify Collabs—to help enhance our store's performance, prevent fraud, and personalize your checkout experience. Shopify does not share your private data between competing merchants.

Because Turnip Vegan LLC is located in the United States, your data will be transferred internationally and hosted outside of Brazil. Shopify utilizes verified cross-border data transfer mechanisms, standard contractual clauses, and strict encryption matrices to safeguard this international data pipeline legally. You can review the Shopify Privacy Policy here.

6. Sharing and Disclosure of Your Personal Data

The Company may share Your personal information in the following specific situations:

  • With Service Providers (Operators): We share data with third-party processors (such as Shopify, Stripe, or PayPal) to manage payment pipelines, fulfill digital assets, and distribute customer communication.

  • For Targeted Marketing: We may share pseudonymous data with ad networks (like Meta or Google) to display relevant interest-based promotions. You can restrict or opt out of this behavior at any time.

  • For Business Transactions: In connection with, or during negotiations of, any merger, sale of Company assets, financing, or acquisition of all or a portion of Our business.

  • For Law Enforcement: If required to do so by applicable laws, subpoenas, or valid requests by public authorities (e.g., a court or government regulatory body).

  • With Your Explicit Consent: We may disclose Your personal information for any other purpose with Your specific direction.

7. Data Retention and International Transfers

The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy, including fulfilling transaction histories and resolving dispute metrics (e.g., maintaining standard accounting and tax logs for up to 7 years).

Your information is processed at the Company's operating offices and on secure servers located in the United States. Your acknowledgment of this Privacy Policy indicates your agreement to this international data transfer, which we protect using strict data processing agreements and technical security frameworks.

8. Your Data Protection Rights Under the LGPD

Under Article 18 of the LGPD, Brazilian citizens and individuals whose data is processed while located in Brazil possess clear rights regarding their personal data. You may request from Us:

  • Confirmation of Processing: Confirmation that your personal data is being processed.

  • Access to Data: A legible copy of all personal information we hold about you.

  • Correction: The rectification of incomplete, inaccurate, or outdated data records.

  • Anonymization, Blocking, or Elimination: The removal or masking of unnecessary, excessive, or unlawfully processed data.

  • Data Portability: Transfer of your data to another service provider upon explicit request, in accordance with regulatory guidelines.

  • Information on Sharing: A breakdown of the public and private entities with whom we have shared your data.

  • Information on Consent Choice: Information about the possibility of denying consent and the consequences of such refusal.

  • Revocation of Consent: The cancellation of processing actions previously authorized via consent.

To exercise any of your legal LGPD rights, please submit an official request to turnipvegan@gmail.com. To safeguard your security, we will ask you to verify your customer identity before processing the data release. We fulfill valid data right requests within the statutory timelines set by the National Data Protection Authority (ANPD).

9. Security of Your Personal Data

The security of Your Personal Data is a top priority. We implement administrative and digital security protocols to prevent unauthorized access, alteration, or data destruction. However, remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While We strive to use commercially acceptable means to protect Your Personal Data, We cannot guarantee its absolute security.

10. Children's Privacy

Our Service does not target or knowingly collect data from children under the age of 13. If we discover that a child under 13 has provided us with personal info without verified parental consent, we take immediate steps to remove that information from our servers.

11. Changes to this Privacy Policy

We may update Our Privacy Policy from time to time to align with structural modifications or legal changes. We will notify You of any changes by posting the revised text on this page and updating the "Last updated" date at the top of this document. We advise you to review this page periodically.

12. Contact Us

If you have any questions about this Privacy Policy or wish to contact our Data Protection Officer (DPO) regarding your LGPD rights, you can reach us at:

Thank you for trusting us, and happy plant-based cooking! 🌱