Introduction

Belgian Baked (“we”, “us”, or “our”) is committed to protecting your personal information in accordance with the Protection of Personal Information Act, 2013 (POPIA) and any other applicable South African legislation. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website at belgianbaked.co.za and place orders with us.

By using our website or placing an order, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal information as described below.

Information We Collect

We collect personal information that you voluntarily provide to us when you place an order, create an account, subscribe to communications, or contact us. This may include:

  • Your full name
  • Email address
  • Phone number
  • Delivery address within the Western Cape
  • Payment information (processed securely through our third-party payment provider)
  • Order history and preferences
  • Any information you provide when contacting us via email, phone, or WhatsApp

We may also automatically collect certain technical information when you visit our website, including your IP address, browser type, device information, pages visited, and referring URL. This information is collected through cookies and similar technologies.

Purpose of Processing

We process your personal information for the following purposes:

  • To process, prepare, and deliver your orders
  • To communicate with you about your orders, including delivery arrangements
  • To process payments and issue invoices or receipts
  • To respond to your enquiries and provide customer support
  • To send you marketing communications, where you have opted in to receive them
  • To improve our website, products, and services
  • To comply with legal obligations under South African law
  • To detect and prevent fraud

Legal Basis for Processing

Under POPIA, we process your personal information on the following lawful grounds:

  • Consent: Where you have given us explicit consent, such as opting in to marketing communications.
  • Contractual necessity: Where processing is necessary to fulfil an order you have placed with us.
  • Legal obligation: Where we are required by law to retain or disclose certain information.
  • Legitimate interest: Where processing is necessary for our legitimate business interests, provided this does not override your rights.

Cookies

Our website uses cookies to enhance your browsing experience and to enable the functioning of our online store. Cookies are small text files stored on your device. We use the following types of cookies:

  • Essential cookies: Required for the website and shopping cart to function correctly. These cannot be disabled.
  • Functional cookies: Remember your preferences such as login details and language settings.
  • Analytics cookies: Help us understand how visitors use our website so we can improve it.

You can manage or disable cookies through your browser settings. Please note that disabling essential cookies may affect the functionality of our website and your ability to place orders.

Third-Party Service Providers

We may share your personal information with trusted third-party service providers who assist us in operating our business. These include:

  • Payment processors for secure transaction handling
  • Delivery and courier services to fulfil your orders
  • Email service providers for order confirmations and communications
  • Website hosting and analytics providers

These service providers are contractually bound to process your personal information only for the purposes we specify and in compliance with POPIA. We do not sell, trade, or rent your personal information to any third party.

Data Retention

We retain your personal information only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Order records and related personal information are retained for a minimum period as required by the Consumer Protection Act (No. 68 of 2008) and the Tax Administration Act (No. 28 of 2011). When personal information is no longer required, it will be securely destroyed or de-identified.

Your Rights Under POPIA

As a data subject under POPIA, you have the following rights:

  • The right to be informed about the collection and use of your personal information
  • The right to access your personal information held by us
  • The right to request correction of inaccurate or incomplete personal information
  • The right to request deletion of your personal information, subject to legal retention requirements
  • The right to object to the processing of your personal information
  • The right to withdraw consent for marketing communications at any time
  • The right to lodge a complaint with the Information Regulator if you believe your rights have been infringed

To exercise any of these rights, please contact us using the details provided below.

Information Security

We take reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, destruction, or damage. Our website uses SSL encryption to secure data transmitted between your browser and our server. Payment information is processed through PCI-compliant payment gateways and is not stored on our systems.

While we take every reasonable precaution to protect your information, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

Children’s Privacy

Our website is not directed at children under the age of 18. We do not knowingly collect personal information from children. If you are under 18, please do not submit any personal information through our website without the consent of a parent or guardian.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.

Contact Us

If you have any questions about this Privacy Policy, wish to exercise your rights under POPIA, or would like to lodge a complaint, please contact us:

  • Email: orders@belgianbaked.co.za
  • Phone: 076 034 6921
  • Hours: Monday to Friday, 09:00 to 17:00

You also have the right to lodge a complaint with the Information Regulator (South Africa) at:

  • Website: https://inforegulator.org.za
  • Email: enquiries@inforegulator.org.za

Effective date: 8 May 2026