GDPR / UK GDPR Addendum

Effective date: May 20, 2026  ·  myjamm.com

This Addendum applies to individuals located in the European Economic Area, United Kingdom, or Switzerland, where applicable data protection laws apply.

1. Controller

For purposes of GDPR and UK GDPR, the controller of your personal data is:

David Gratton Consulting Ltd.
North Vancouver, BC
ddonat@gmail.com

A controller determines why and how personal data is processed.

2. Personal data we process

We may process:

  • account data;
  • contact data;
  • recipe content;
  • uploaded images or pasted text;
  • recipe URLs;
  • payment and transaction records;
  • usage data;
  • device and log data;
  • support communications.

3. Purposes and lawful bases

PurposeExample dataLawful basis
Provide MyJammAccount data, recipes, recipe importsContract
Save and organize recipesRecipe content, notes, extracted recipe fieldsContract
Process purchasesBilling email, transaction ID, purchase statusContract, legal obligation
Provide supportEmail, support messages, account detailsContract, legitimate interests
Secure the serviceIP address, logs, security eventsLegitimate interests
Improve MyJammUsage data, errors, diagnosticsLegitimate interests
Legal and tax complianceTransaction records, invoicesLegal obligation
Optional communicationsEmail addressConsent or legitimate interests, depending on context

4. Special category data

MyJamm is not designed to collect special category data, such as health information, religious beliefs, or biometric data.

However, recipe notes or dietary information you choose to enter may reveal sensitive information. Please do not upload sensitive personal information unless you are comfortable storing it in MyJamm.

5. Automated decision-making

MyJamm may use automated tools to extract, structure, summarize, or format recipes.

We do not use automated processing to make legal or similarly significant decisions about you.

6. Processors and service providers

We may use processors to help provide MyJamm, including hosting, storage, payment, analytics, support, security, and AI processing providers.

Where required, we use data processing agreements or other appropriate contractual safeguards with processors.

7. International transfers

Because David Gratton Consulting Ltd. is based in Canada and may use providers in Canada, the United States, or other countries, your personal data may be transferred outside the EEA, UK, or Switzerland.

Where required, we rely on appropriate transfer mechanisms, such as adequacy decisions, standard contractual clauses, or other lawful safeguards.

8. Retention

We retain personal data only as long as necessary for the purposes described in this Addendum and our Privacy Policy.

Retention depends on:

  • whether your account remains active;
  • whether you choose to delete recipes or your account;
  • legal, tax, and accounting requirements;
  • security and fraud prevention needs;
  • unresolved disputes or support issues.

9. Your GDPR rights

Subject to legal limits, you may have the right to:

  • access your personal data;
  • correct inaccurate personal data;
  • delete your personal data;
  • restrict processing;
  • object to processing based on legitimate interests;
  • receive a portable copy of your data;
  • withdraw consent where processing is based on consent;
  • complain to a supervisory authority.

To exercise these rights, contact ddonat@gmail.com.

10. Right to complain

You may have the right to lodge a complaint with your local data protection authority.

We would appreciate the opportunity to address your concern first, but you are not required to contact us before contacting a regulator.

11. EU or UK representative

If MyJamm begins actively targeting users in the EEA or UK, we may be required to appoint an EU or UK representative unless an exemption applies.

Current representative status:

  • EU Representative: Not appointed
  • UK Representative: Not appointed

This should be reviewed before actively marketing MyJamm to EU or UK residents.

12. Contact

For GDPR or UK GDPR requests:

David Gratton Consulting Ltd.
North Vancouver, BC
ddonat@gmail.com