Privacy Policy
Effective Date: June 9, 2025
Last Updated: June 9, 2025
At Tough Kraut, your privacy matters. This policy explains what personal data we collect, why we collect it, how we use it, and the choices you have. We’re committed to being transparent, respectful, and compliant with data privacy laws like the General Data Protection Regulation (GDPR) in the EU and California Consumer Privacy Act (CCPA/CPRA) in the U.S.
1. Who We Are
This website is operated by a private individual based in Portugal under the brand Tough Kraut. For any questions or concerns about this policy or your data, please reach out to:
​
Contact: toughkraut.contact@gmail.com
2. What Information We Collect (And Why)
We collect personal information you voluntarily provide — like your name and email address when you sign up for our newsletter, comment, or contact us. We also collect certain data automatically (like IP address, browser type, and device information) through cookies and analytics tools to understand how visitors use our site.
This information helps us improve the website, respond to inquiries, deliver requested content, and send occasional updates if you’ve opted in. We aim to collect the minimum necessary data for clearly defined purposes.
3. How We Use Your Data
We use your data to:
​
-
Operate and improve the website
-
Communicate with you (e.g., respond to questions or send updates)
-
Understand usage patterns and optimize site content
-
Comply with legal and regulatory obligations
-
Send marketing content — but only with your explicit consent (opt-out available anytime)
-
Provide relevant affiliate or product recommendations, where applicable
​​
We do not sell or share your personal information for money.
4. Legal Grounds for Processing Your Data
Under the GDPR, we rely on the following legal bases to process your data:
​
-
Consent – When you sign up for newsletters or marketing emails
-
Contractual necessity – When responding to direct inquiries
-
Legal obligation – For compliance with applicable laws
-
Legitimate interests – To operate and improve our website, as long as your rights aren’t overridden
​
Under the CCPA/CPRA, we may process your data for "business purposes" (e.g., analytics, communication) and allow third-party services that may qualify as “sharing” — but you may opt out at any time. We honor “Do Not Sell or Share My Personal Information” requests.
5. How Long We Keep Your Data
We keep your personal data only as long as necessary to fulfill the purposes for which it was collected - unless required by law to retain it longer. You can request deletion of your data at any time by contacting us.
6. Your Rights
If you're in the EU/EEA (GDPR):
You have the right to:
-
Access, correct, or delete your data
-
Withdraw consent at any time
-
Object to or restrict processing
-
Data portability (receive your data in a usable format)
-
File a complaint with a supervisory authority
​
If you're a California resident (CCPA/CPRA):
You have the right to:
-
Know what personal info we collect and why
-
Request access to and deletion of your data
-
Opt out of sale or sharing of your data
-
Correct inaccurate personal information
-
Limit the use of sensitive personal information
​
To exercise these rights, email us at toughkraut.contact@gmail.com.
7. Cookies
We use cookies and similar technologies to enhance your browsing experience, remember preferences, and analyze website performance. Some cookies are necessary, while others (like for analytics or marketing) require your consent.
​
You can control cookie settings in your browser and reject non-essential cookies anytime. For detailed info, see our Cookie Policy.
8. Third-Party Services
We use tools like Wix Analytics, Wix Email, and other integrations that may process data on our behalf. These third-party providers have their own privacy policies and comply with relevant laws.
We only work with partners that demonstrate strong data protection practices.
9. International Data Transfers
If you’re visiting from outside the EU (especially the U.S.), please note that your information may be transferred to and processed in countries with different data protection standards. We take steps to safeguard your data, including using secure tools and agreements aligned with GDPR requirements (e.g., Standard Contractual Clauses).
10. Security
We use industry-standard tools (including Wix’s secure infrastructure and HTTPS encryption) to keep your data safe. However, no system is 100% bulletproof. If a breach ever occurs, we’ll notify affected users and regulators as required by law.
11. Opting Out / “Do Not Sell or Share My Info”
You can unsubscribe from emails at any time using the link in the footer. California residents can also submit a “Do Not Sell or Share My Personal Information” request by contacting us at toughkraut.contact@gmail.com.
​
We honor Global Privacy Control (GPC) signals where applicable.
12. Children’s Privacy
This website is not intended for children under the age of 16 (or under 13 in the U.S.). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we’ll promptly delete it.
13. Changes to This Policy
We may update this policy occasionally to reflect changes in law or how we operate. If updates are significant, we’ll notify you via the site or email. The “Last updated” date will always reflect the latest revision.
14. Contact Us
If you have questions, concerns, or data requests, contact us at:
​
Email: toughkraut.contact@gmail.com
Data Controller: Michael W.
Location: Portugal
​
We’re happy to help - and committed to keeping your data safe.