Hazel's Cake Lounge is the responsible party for the personal information collected through this website. This notice explains what I collect, why I need it, the providers that help me run the service, and the choices you have. I do not sell personal information or use it for another company's marketing.
1. Information I collect
- Your name, email address and phone number.
- Your delivery address, if you choose delivery rather than collection.
- Occasion details, the people and dates in your Occasion Book, order details, flavour preferences, email replies and other messages you send me.
- Photos you choose to upload as cake inspiration, profile photos, and Community review photos.
- Account details, including your sign-in email and security activity. Passwords are handled by the sign-in provider and are never visible to Hazel's Cake Lounge.
- Limited technical information needed to protect the site, such as an IP-derived one-way hash used for short anti-spam limits.
2. Why I use it
- To reply to an enquiry, prepare and deliver or arrange collection of your order, send quotes, invoices and receipts, and provide customer support.
- To run the Occasion Book and send the email or WhatsApp reminders you have chosen. Marketing-style WhatsApp reminders require your opt-in and are never required to place an order.
- To maintain account security, prevent spam and protect the service from misuse.
- To show a Community review, review photo or profile image only where you have selected public permission and Hazel has approved it. Reviews are not automatically published.
The legal grounds are the steps needed to provide the service or perform an order, your consent where you choose an optional reminder or public review, Hazel's legitimate interest in operating a safe service, and legal record-keeping obligations where they apply.
3. Providers that process information for this service
- Supabase: customer accounts, database, authentication and private file storage.
- Resend: sending email such as confirmations, invoices, receipts and reminders, receiving replies, and reporting delivery failures or complaints.
- Vercel: hosting and delivering this website and the admin dashboard.
- Google: optional Google sign-in. Google Fonts are also requested by your browser to display the site's typography.
- Unsplash: selected website imagery is requested directly by your browser from Unsplash.
These providers may process information outside South Africa. I use them only to run this service and take reasonable steps to use providers with suitable privacy and security commitments. I do not give them customer information for their own marketing.
4. Uploads, reviews and public sharing
- Customer uploads are stored in private storage with access controls. Review images and profile photos are private by default.
- A Community review is visible only after Hazel's approval and only if the reviewer ticked permission to feature it. The reviewer controls whether their name is shown. A profile photo is shown only if it is separately selected for that review.
- When you remove a profile photo, it is removed from storage. When you delete your account, attached Occasion Book, review and inspiration uploads are removed with the account where they are not part of a record Hazel must retain by law.
5. Retention and deletion
- Account details, saved dates and optional uploads are kept while your account or Occasion Book is active, unless you ask for deletion sooner.
- Email conversation text and delivery records are kept with the relevant customer service or order history. Attachment names may be recorded, but email attachment files are not copied into the Command Centre.
- You can edit or remove your address and saved dates in your account. You can delete your account from its security area.
- On account deletion, the account, saved dates, profile image, Community review content and non-essential order details are removed. Necessary invoices, receipts and payment records may be retained for the period required by tax law, then should be reviewed for deletion or anonymisation.
6. Cookies and automated decisions
The site uses essential browser storage to keep a signed-in session working and remember basic interface choices. It does not use advertising trackers. It does not use an AI chatbot or make automated decisions about you using your personal information.
7. Your rights and contact
- You may ask what information is held about you, request a correction or deletion, object to certain processing, withdraw optional consent, or ask for a public review or photo to be removed.
- For a privacy request, contact the Information Officer for Hazel's Cake Lounge at hello@hazelscakelounge.co.za.
- You may also raise a concern with South Africa's Information Regulator.