Big Bald Bites BIG BALD BITES · Privacy Policy

PRIVACY POLICY

Last updated: March 2026  ·  Applies to: bigbaldbites.com

This Privacy Policy explains how Big Bald Bites collects, uses, and protects personal data submitted through the contact form on this website, in accordance with the EU General Data Protection Regulation (GDPR), Regulation (EU) 2016/679. We only collect data when you voluntarily contact us.

1. Who Operates This Website

This website is operated by Big Bald Bites, a creator platform and YouTube channel focused on food and travel content. We are not a registered company. This is a small creator website operated by individuals.

Channel name: Big Bald Bites
Contact email: hello@bigbaldbites.com
Website: https://bigbaldbites.com

For privacy-related enquiries or to exercise your data protection rights, please contact us at the email address above.

2. Personal Data We Collect

When you submit the contact form on this website, we collect the following personal data:

Full name
To address you personally in our reply
Email address
To send you a reply
Enquiry type
To route and handle your message appropriately
Message content
To understand and respond to your enquiry

We also use Cloudflare Turnstile for spam protection. Turnstile analyses browsing behaviour signals (such as mouse movements and browser characteristics) to determine whether the submission is human. No personal data is stored by us as a result of this check. It is processed solely by Cloudflare. See Section 5 for more.

3. Purpose and Legal Basis for Processing

We process your personal data for the following purposes and on the following legal bases under GDPR Article 6:

Responding to your enquiry
Legal basis: Legitimate interest (Article 6(1)(f)). It is in our and your legitimate interest to reply to a message you have sent us.
Spam and abuse prevention
Legal basis: Legitimate interest (Article 6(1)(f)). This protects our systems and services from automated abuse.

4. How Your Data Is Processed

When you submit the contact form, your data follows this path:

  1. Your form submission is sent over HTTPS to a Cloudflare Worker, a serverless function running on Cloudflare's infrastructure.
  2. The Worker verifies the Cloudflare Turnstile token to confirm the submission is not automated spam.
  3. The Worker uses Cloudflare Email Routing to format and forward your message as an email to our inbox.
  4. The email is received and stored in a Gmail inbox (Google Workspace), where it may be retained for correspondence purposes.
  5. We read your message and reply to your email address.

We do not store your data in any database. The data exists only within the email thread in our inbox.

5. Third-Party Data Processors

Your data is processed by the following third-party service providers acting as data processors under GDPR Article 28:

Cloudflare, Inc. Workers · Email Routing · Turnstile · CDN

Cloudflare processes your form data in transit, runs the spam-prevention Turnstile check, and routes the email. Cloudflare is headquartered in the United States and is certified under the EU-US Data Privacy Framework, providing an adequate level of data protection under GDPR Article 45.
Cloudflare Privacy Policy →

Google LLC Gmail inbox

Your submitted message is delivered to and stored in a Gmail inbox. Google is headquartered in the United States and is certified under the EU-US Data Privacy Framework.
Google Privacy Policy →

We do not sell, rent, or share your personal data with any other third parties. Your data is never used for advertising or profiling.

6. Data Retention

Your personal data is retained only for as long as necessary to handle your enquiry and any follow-up correspondence. In practice, this means:

  • Form submissions are not stored in any database. They exist solely as email messages in our inbox.
  • Email correspondence is retained for up to 2 years from the date of your last message, unless you request deletion earlier (see Section 7).
  • We periodically review and delete old correspondence that is no longer needed.

7. Your Rights Under GDPR

Under the GDPR, you have the following rights regarding your personal data:

Right of access
You can request a copy of the personal data we hold about you (Article 15).
Right to rectification
You can ask us to correct inaccurate or incomplete data (Article 16).
Right to erasure
You can ask us to delete your personal data, subject to certain conditions (Article 17).
Right to restriction
You can ask us to restrict how we process your data in certain circumstances (Article 18).
Right to data portability
You can request your data in a structured, machine-readable format (Article 20).
Right to object
You can object to processing based on legitimate interests at any time (Article 21). We will cease processing unless we can demonstrate compelling legitimate grounds.

To exercise any of these rights, please contact us at hello@bigbaldbites.com. We will respond within 30 days as required by GDPR Article 12.

8. Right to Lodge a Complaint

If you believe we have not handled your personal data lawfully, you have the right to lodge a complaint with the data protection supervisory authority in your EU member state of habitual residence, place of work, or place of the alleged infringement.

You can find the contact details of your national data protection authority at:

European Data Protection Board: Member Authorities →

We would, however, appreciate the opportunity to address your concerns directly before you contact a supervisory authority. Please reach out to us at hello@bigbaldbites.com.

9. Security

All data transmitted through the contact form is encrypted in transit using TLS (HTTPS). Form submissions are processed by Cloudflare Workers, which run in Cloudflare's secure, globally distributed infrastructure. We do not store submitted data in any database accessible from the web.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The "Last updated" date at the top of this page will be revised accordingly. We encourage you to review this page periodically. Continued use of the contact form after any update constitutes acceptance of the revised policy.

Questions about this policy

If you have any questions about how we handle your data, contact us at hello@bigbaldbites.com

Back to Big Bald Bites