Privacy notice

Who is responsible

Margaretha Joubert, trading as The Sugarcraft Circle is the responsible party for personal information processed through The Baker Directory. Privacy requests can be sent to the contact address.

Information we process

• a baker's Circle sign-in email, Circle member number and membership status;
• baker name, business details, public contact choices, general location, specialities and photographs;
• submission, revision, review, acceptance and publication records;
• random browser identifiers used for saves and overall interest counts; and
• information supplied in safety, privacy or takedown correspondence.

We don't ask bakers for a street address. Public location stops at suburb, town and region.

Why we use it

We process information to sign bakers in, confirm membership, create and publish requested pages, run search and saves, review authenticity and safety, prevent duplicate or abusive pages, answer requests, keep necessary records, protect users and comply with the law. Depending on the activity, this is based on consent, providing the requested service, legitimate interests in running a safe directory, or a legal obligation.

Who handles it

Service providers process information for us: Supabase for the database and sign-in, Cloudinary for submitted images, Cloudflare for website hosting, Circle for community accounts, membership and sign-in messages, and OpenStreetMap data (through the Photon search service) for place searches. Their systems may process information outside South Africa. We choose providers and safeguards suited to the service, and disclose information where required by law or necessary to protect rights and safety.

Keeping and protecting it

Published information remains while a page is active. Drafts, review records, terms acceptances, reports and essential audit records are kept only as long as reasonably needed for the service, disputes, safety and legal duties. We use access controls and other reasonable safeguards, but no internet service can promise absolute security.

Your choices and rights

You may ask what information we hold, request correction or deletion, object to certain processing, withdraw consent where consent is the basis, or complain. Some records may be kept where the law or a genuine safety or dispute need requires it. You may also complain to the Information Regulator (South Africa).

Browser storage

Saved cakes and bakers are stored in your browser and stay on that device. Clearing your browser data may remove them. The Desk keeps bakers signed in using browser storage on the device they signed in on.

Children

The directory is for general audiences, but a person under 18 may not manage a baker's page without a parent or legal guardian accepting responsibility. Please don't submit a child's personal information unless you have lawful authority and it's genuinely necessary.