Last Updated: May 31, 2025
Sweet & Whisk (“Sweet & Whisk”, “We”, “Us”, or “Our”), a company registered in the Republic of South Africa, Registered Address: Sea Cottage Crescent, Milnerton, Cape Town, 7441, Email: belinda@sweetandwhisk.com, Telephone: ‪+27(0)873518441‬, operates https://www.sweetandwhisk.com. We are committed to protecting your personal information in accordance with the Protection of Personal Information Act, 2013 (POPIA) and other applicable South African laws, including the Electronic Communications and Transactions Act, 2002 (ECTA) and the Consumer Protection Act, 2008 (CPA).
This Privacy Policy explains how we collect, use, store, protect, and share your personal information when you use our website, purchase our baking premixes or related products, or interact with us. By using our website or services, you consent to the practices described in this policy. If you do not agree, please do not use our website or provide your personal information.
1. Definitions
“Personal Information”: Information relating to an identifiable, living person, as defined by POPIA, including but not limited to name, contact details, and payment information.
“Website”: https://www.sweetandwhisk.com.
“User”, “You”, or “Customer”: Any person accessing the website, purchasing products, or interacting with Sweet & Whisk.
“Processing”: Any operation performed on personal information, including collection, storage, use, or deletion, as defined by POPIA.
2. Information We Collect
We collect personal information to provide our products and services, enhance your experience, and comply with legal obligations. The types of information we collect include:
2.1. Information You Provide Directly:
Account Creation: Name, email address, phone number, and delivery address when you register an account or place an order.
Purchases: Payment details (e.g., credit/debit card information or EFT details, processed via secure third-party payment gateways like Yoco).
Communications: Information provided when you contact us (e.g., via email, WhatsApp, or customer support forms) or participate in promotions, reviews, or surveys.
User-Generated Content: Photos, videos, or comments you submit (e.g., via #SweetAndWhisk on social media).
2.2. Information Collected Automatically:
Browsing Data: IP address, browser type, device type, operating system, and pages visited, collected via cookies and similar technologies (see Section 7).
Analytics Data: Usage patterns, such as time spent on the website or products viewed, collected via tools like Google Analytics to improve our services.
2.3. Information from Third Parties:
We may receive information from third-party service providers (e.g., couriers providing delivery updates or payment processors confirming transactions).
Social media platforms (e.g., TikTok) may provide data if you interact with our content or link your account.
3. How We Use Your Information
We process your personal information for the following lawful purposes, as permitted by POPIA:
3.1. To Provide Products and Services:
Process and fulfill orders, including payment processing and delivery of baking premixes and related products.
Send order confirmations, invoices, and delivery updates via email or WhatsApp.
3.2. To Improve User Experience:
Personalize your website experience (e.g., recommending products based on past purchases).
Analyze website usage to enhance functionality and content.
3.3. To Communicate with You:
Respond to inquiries, complaints, or feedback sent to belinda@sweetandwhisk.com or ‪+27(0)873518441‬.
Send promotional offers, newsletters, or baking tips, with your consent (you may opt out at any time).
3.4. For Marketing and Promotions:
Use user-generated content (e.g., #SweetAndWhisk posts) for marketing, with your permission.
Promote products via targeted ads on platforms like TikTok, based on your interests.
3.5. To Comply with Legal Obligations:
Maintain records for tax purposes, as required by the Value Added Tax Act, 1991.
Comply with POPIA and other South African laws regarding data protection and consumer rights.
3.6. To Ensure Security:
Detect and prevent fraud or unauthorized access to the website.
Protect your personal information and our systems using secure technologies.
4. Legal Basis for Processing
Under POPIA, we process your personal information based on:
Consent: When you provide information (e.g., by placing an order or subscribing to newsletters). You may withdraw consent at any time (see Section 9).
Contractual Necessity: To fulfill orders or provide services under our Terms and Conditions.
Legal Obligation: To comply with South African laws (e.g., tax or consumer protection regulations).
Legitimate Interests: To improve our website, prevent fraud, or market our products, provided your rights are not overridden.
5. Sharing Your Information
We do not sell or rent your personal information. We may share it with trusted third parties under strict conditions:
5.1. Service Providers:
Couriers (e.g., The Courier Guy) to deliver products.
Payment processors (e.g., Yoco) to handle transactions securely.
Analytics providers (e.g., Google Analytics) to analyze website performance.
Marketing platforms (e.g., TikTok or email services) for promotions, with your consent.
5.2. Legal Requirements:
We may disclose information to comply with South African laws, court orders, or regulatory authorities (e.g., SARS or the Information Regulator).
5.3. Business Transfers:
If Sweet & Whisk is sold or merged, your information may be transferred to the new entity, subject to POPIA compliance.
All third parties are contractually obligated to protect your information and process it only for specified purposes.
6. Data Security
6.1. We implement reasonable technical and organizational measures to protect your personal information, including:
SSL encryption for website transactions.
Secure payment gateways compliant with PCI-DSS standards.
Access controls and regular security audits.
6.2. Despite our efforts, no online system is 100% secure. We are not liable for unauthorized access beyond our reasonable control, as permitted by ECTA Section 43(5).
6.3. You are responsible for keeping your account login details secure and notifying us of any breaches at belinda@sweetandwhisk.com.
7. Cookies and Tracking Technologies
7.1. We use cookies and similar technologies to enhance your experience, analyze usage, and deliver personalized ads. Cookies may collect data like your IP address or browsing preferences.
7.2. Our Cookie Policy details the types of cookies used and how to manage them. You can adjust cookie settings via your browser or our website’s cookie consent tool.
7.3. By using the website, you consent to cookies unless you opt out, as required by POPIA and ECTA.
8. Data Retention
8.1. We retain personal information only for as long as necessary to fulfill the purposes outlined in this policy or to comply with legal obligations (e.g., 5 years for tax records under the Tax Administration Act, 2011).
8.2. Once no longer needed, we securely delete or anonymize your information in accordance with POPIA.
9. Your Rights Under POPIA
As a South African data subject, you have the following rights:
Access: Request a copy of the personal information we hold about you.
Correction: Request correction of inaccurate or incomplete information.
Deletion: Request deletion of your information, subject to legal retention requirements.
Objection: Object to processing based on legitimate interests or direct marketing.
Restriction: Request restriction of processing in certain cases.
Data Portability: Request your information in a structured, portable format.
Withdraw Consent: Withdraw consent for processing at any time, without affecting prior lawful processing.
To exercise these rights, contact our Information Officer at belinda@sweetandwhisk.com. We will respond within 30 days, as required by POPIA. You may also lodge a complaint with the Information Regulator.
10. International Data Transfers
10.1. Our website and services are hosted in South Africa. If personal information is transferred outside South Africa (e.g., to cloud providers), we ensure the recipient complies with POPIA or equivalent standards.
10.2. By using our website, you consent to such transfers where necessary for service delivery.
11. Third-Party Links
Our website may contain links to third-party sites (e.g., TikTok, payment gateways). We are not responsible for their privacy practices. Review their policies before providing personal information.
12. Children’s Privacy
Our website and products are not intended for children under 13. We do not knowingly collect personal information from children without parental consent. If you believe we have such information, contact us at belinda@sweetandwhisk.com for removal.
13. Amendments to This Policy
We may update this Privacy Policy to reflect changes in our practices or legal requirements. Updates will be posted on the website, and the “Last Updated” date will reflect the latest version. Continued use of the website constitutes acceptance of the updated policy.
14. Contact Us
For questions, requests, or complaints about this Privacy Policy or your personal information, contact our Information Officer:
Email: belinda@sweetandwhisk.com
Phone: +27(0)873518441
We aim to respond within 48 hours. You may also contact the Information Regulator.