How we look after your information

This website is run by Mynhardt's Cakes (Pty) Ltd, trading as Mynhardt. Under POPIA that makes us the responsible party for the personal information described here. Our address is KWV Cathedral Cellar, Kohler Street, Southern Paarl, Paarl, 7646.

To ask about anything on this page, write to our Information Officer at chef@mynhardt.co.za. You can also call us on +27 76 033 1839.

• We collect what we need to take your order or answer your enquiry, and we use it for that.
• Your card details go straight to our payment provider, Yoco. They never reach this website.
• We use Google Analytics and the Meta Pixel to see how the site is used and whether our advertising works. Neither runs on the pages that show your order.
• We never send Google or Meta your name, email address, phone number or delivery address.

To take and deliver an order, we ask for:

• your name, email address and phone number
• whether you will collect or want delivery, and on which day
• your delivery address, if you choose delivery
• anything you write in the notes box, such as a message to go with a gift

We record what you ordered, what it cost and whether payment went through. If you are signed in when you order, the order is linked to your account.

We use these details to make and deliver your order, to send your confirmation, to contact you if anything about the order needs checking, and to keep proper financial records. Your name, email address and phone number are required, and so is an address for delivery: without them we cannot take the order.

Paying

You pay on Yoco's secure payment page. We send Yoco the amount, the items in your order and our reference for it. You give your card details to Yoco directly, and they never reach us. Yoco then tells us whether the payment succeeded, and we keep that notification with the order.

Confirmation and delivery

Your confirmation email, and the kitchen's copy of your order, are sent through Resend, an email delivery service. If you choose delivery, we give your name, phone number and address to the courier who brings it to you.

You never need an account to order. If you would like one, to see all your orders in one place, you sign in with your email address: we send you a link that works once, for 15 minutes. There is no password.

An account holds your email address, and your name if we have it from an order. When you sign in, we link the account to any earlier orders placed with the same email address. A cookie called mynhardt_session keeps you signed in for up to 30 days, or until you sign out.

When someone asks for a sign-in link, we record the internet (IP) address the request came from, so that the form cannot be used to flood people's inboxes.

The enquiry form asks for your email address, what you are enquiring about and your message, and your name if you would like to give it. It is sent by email, through Resend, to our inbox so that we can reply. The website itself does not keep a copy.

To stop automated abuse of the enquiry and order forms, we record the IP address each submission comes from and count how often it arrives. Those records only need to cover the last few minutes, so we clear them out once they are more than 60 minutes old, the next time the form is used.

On the live website we use two tools from other companies. They do not run on the pages that show your order (the order confirmation and order tracking pages) or on the sign-in page, because the addresses of those pages contain a private link. They do not run in your account either.

Google Analytics

Google Analytics shows us which pages people visit and how they found us. It sets cookies (with names starting _ga) to recognise a returning browser, and sends Google the pages you view, the page you came from, and details of your browser and device. Google receives your IP address with each request.

Meta Pixel

The Meta Pixel helps us measure our Facebook and Instagram advertising, and show our ads to people likely to be interested. It tells Meta when you view a page, view a product or add something to your cart, including which product, how many and its price. It sets a cookie called _fbp, and also _fbc if you arrived by clicking one of our ads. Meta receives your IP address and details of your browser, and may connect these visits to a Facebook or Instagram account you use.

The Pixel does not read anything you type into forms on this site.

When an order is paid

When an order is paid, our server tells Meta that a purchase was made. It sends the order value, the products, and identifiers captured when you checked out: the _fbp and _fbccookie values, your IP address and your browser's user agent (a short description of your browser and device). We do not send Meta your name, email address, phone number or delivery address, in any form. This lets us see whether our ads lead to sales. We only do this if the Meta Pixel ran in your browser: if you blocked it, we capture nothing and tell Meta nothing about your purchase.

What Meta asks us to tell you

Meta and other third parties may use cookies, web beacons and similar technologies on this website to collect or receive information from it and from elsewhere on the internet, and use that information to provide measurement services and target ads. You can opt out as described under your choices below.

Google explains how it uses this information in how Google uses information from sites that use its services, and Meta in its privacy policy.

mynhardt_session

A cookie that keeps you signed in. Set only when you sign in, and lasts 30 days or until you sign out.

Your cart

Kept in your browser's storage so it is still there when you come back. We only see it when you check out, and it is emptied once your order is paid.

Your checkout details

What you typed at checkout, kept for that browser tab only, so returning from the payment page does not leave you with a blank form. Forgotten when you close the tab, or once your order is paid.

_ga

Google Analytics cookies. Set by Google, on the live website only.

_fbp, _fbc

Meta Pixel cookies. Set by Meta, on the live website only.

We share only what each of these providers needs for the job described on this page:

• Railway, which hosts this website and its database, and so holds everything the website stores.
• Yoco, our payment provider.
• Resend, which sends our email: order confirmations, the kitchen's copy of each order, sign-in links and enquiries.
• Our email provider, which hosts the inboxes your enquiries and orders arrive in.
• The courier who delivers your order, if you choose delivery.
• Google, for Google Analytics.
• Meta, for the Meta Pixel and for measuring purchases.

Some of these providers store or process information outside South Africa. Google and Meta process information in the United States and other countries, and Railway (which hosts this website and its database) and Resend (which sends our email) also run outside South Africa.

POPIA allows this where the information stays protected to a standard comparable to its own, or where sending it is needed to fulfil your order. Each of these providers commits, in its own terms, to protecting the personal information it handles for us.

Orders

As long as tax law requires us to keep records of a sale. If your account is deleted, your orders are kept for that time, but are no longer linked to it.

Your account

Until you ask us to delete it.

Sign-in requests, with their IP address

Kept with your account, and deleted with it.

Form safety records

Cleared once more than 60 minutes old.

Enquiries

In our inbox, for as long as we need them to answer you and arrange anything you book.

Purchase identifiers sent to Meta

Kept with your order.

Google Analytics

Google keeps analytics data for the period set in our Google Analytics account, under its own policy.

Meta

Meta keeps what it receives under its own policy.

Under POPIA you may:

• ask what personal information we hold about you, and for a copy of it
• ask us to correct it, or to delete it
• object to us using it, including for analytics and advertising

Write to our Information Officer at chef@mynhardt.co.za. We may ask you to confirm who you are first, so that we never hand your information to someone else. Some records we may need to keep, such as the record of a paid order; if so, we will tell you what we are keeping and why.

If you are unhappy with how we have handled your information, you can complain to the Information Regulator. We would welcome the chance to put it right first.

• Block or clear cookies in your browser's settings. Clearing this site's data also empties your cart.
• Stop Google Analytics on every website with Google's opt-out add-on.
• Change how Meta uses your activity for ads in your Meta ad preferences.
• Opt out of interest-based advertising from participating companies at aboutads.info, or youronlinechoices.eu in Europe.

Blocking these tools changes nothing about ordering or making an enquiry: the site works the same without them.

When this policy changes, we update this page and the date at the top.