Crazy Daizy Privacy Policy

Last updated: 18 July 2026

This Privacy Policy explains how Crazy Daizy Cakes collects, uses, stores, shares and protects personal information when you use our website, submit an online order, make payment, select a collection branch, contact us or interact with us online.

Crazy Daizy Cakes respects your privacy and is committed to protecting personal information in accordance with the Protection of Personal Information Act, 4 of 2013, commonly known as POPIA.

By using our website or placing an order, you confirm that you have read and understood this Privacy Policy.

1. Responsible party

For the purposes of POPIA, the responsible party is:

Trading name: Crazy Daizy Cakes

Legal entity name: SWEFTTO FOODS CC

Legal status: Close Corporation

Registration number: 1990/026881/23

VAT number: 4190154270

Website: https://crazydaizycakeshop.co.za

Main business address: Unit nr 14, Higro Park, Fourie Street, Brackenfell, 7560

Customer support email: crazy2.daizy@gmail.com

Privacy email: crazy2.daizy@gmail.com

Customer support telephone: 087 150 7339

Customer support WhatsApp: 065 688 9013

2. Information Officer

Crazy Daizy Cakes’ Information Officer is responsible for privacy compliance and personal information requests.

Information Officer: Leon

Role: Owner

Email: crazy2.daizy@gmail.com

Telephone: 087 150 7339

Crazy Daizy Cakes may appoint a Deputy Information Officer or another authorised staff member to assist with privacy requests, customer data queries and POPIA compliance.

3. Order and customer support contact

Order and customer support requests may be handled by:

Order and customer support contact: Odette

Role: Bakery Manager

Email: crazy2.daizy@gmail.com

Telephone: 087 150 7339

WhatsApp: 065 688 9013

Odette may assist with order queries, custom cake requests, cancellations, returns, refund requests and customer complaints.

4. Scope of this Privacy Policy

This Privacy Policy applies when you:

  1. visit the website
  2. browse products or services
  3. submit a custom cake or bakery order
  4. provide design instructions, wording, images or references
  5. choose a collection branch
  6. make payment by EFT or bank payment
  7. send proof of payment
  8. collect an order from a branch
  9. contact Crazy Daizy Cakes by email, phone, WhatsApp, website form or social media
  10. submit a cancellation, return or refund request
  11. submit a complaint
  12. sign up for marketing
  13. interact with Crazy Daizy Cakes online advertisements or social media pages
  14. use any related online service provided by Crazy Daizy Cakes

This Privacy Policy applies to personal information processed through the website, online store, email, WhatsApp, phone communication, branch support and related customer service channels.

5. Personal information we collect

Crazy Daizy Cakes may collect the following personal information:

  1. full name
  2. email address
  3. phone number
  4. WhatsApp number
  5. billing details
  6. payment reference
  7. proof of payment
  8. bank details where needed for an approved refund
  9. order details
  10. selected products or requested products
  11. custom cake design instructions
  12. cake wording, names, ages, dates or messages
  13. uploaded images, photos or reference designs
  14. selected collection branch
  15. selected collection date
  16. customer notes
  17. allergy or dietary information supplied by you
  18. communication history
  19. complaint details
  20. return or refund request details
  21. photos supplied for a complaint or product issue
  22. marketing preferences
  23. IP address
  24. device information
  25. browser information
  26. website usage information
  27. cookie and tracking information
  28. approximate location information from website tools, analytics or social media platforms

Crazy Daizy Cakes does not intentionally collect card numbers, CVV numbers or full card payment details through its website because website orders are currently paid by bank payment or EFT only unless Crazy Daizy Cakes confirms another method.

6. Special personal information

In some cases, you may voluntarily provide special or sensitive personal information.

This may include:

  1. allergy information
  2. health-related dietary information
  3. religious dietary requirements
  4. information relating to children where a cake is ordered for a child
  5. a child’s name, age or photo for a personalised cake
  6. photos or personal messages used for a custom design
  7. information included in a complaint or refund request

Crazy Daizy Cakes will only use this information for the purpose for which it was provided, such as preparing a custom order, checking product suitability, responding to a customer request, handling a complaint or processing an approved refund.

You should not submit unnecessary sensitive personal information through the website, email, WhatsApp or social media.

7. Children’s personal information

The website is intended for use by adults.

Crazy Daizy Cakes does not knowingly collect personal information directly from children without the consent of a parent or legal guardian.

Where a parent, guardian or authorised adult provides a child’s name, age, photo, event details or other information for a personalised cake, that person confirms that they are authorised to provide the information.

If you believe that a child has provided personal information to Crazy Daizy Cakes without proper consent, please contact us so that we can review, correct or delete the information where appropriate.

8. How we collect personal information

Crazy Daizy Cakes may collect personal information:

  1. directly from you when you submit an order
  2. directly from you when you complete a website form
  3. directly from you when you contact us by email, phone or WhatsApp
  4. directly from you when you send proof of payment
  5. directly from you when you request a refund
  6. directly from you when you send product photos or complaint details
  7. automatically when you use the website
  8. from branch staff when your order is prepared or collected
  9. from email, WhatsApp, website or social media communication tools
  10. from analytics, advertising and website security tools
  11. from service providers used to operate the website or manage customer communication

9. Why we process personal information

Crazy Daizy Cakes processes personal information to:

  1. operate the website
  2. receive online order requests
  3. process custom cake and bakery orders
  4. confirm order details
  5. prepare personalised products
  6. allocate orders to the selected collection branch
  7. manage collection dates
  8. verify EFT or bank payment
  9. match proof of payment to the correct order
  10. communicate with customers about orders
  11. send order updates or collection information
  12. handle cancellations
  13. assess returns and refund requests
  14. process approved refunds
  15. respond to customer queries
  16. manage customer complaints
  17. prevent fraud and payment abuse
  18. improve the website and customer experience
  19. maintain website security
  20. manage marketing where allowed by law
  21. keep business, accounting and tax records
  22. comply with consumer protection, food safety, tax, accounting and legal obligations
  23. enforce our Terms and Conditions
  24. protect our rights, property, staff, customers and business

10. Legal basis for processing

Crazy Daizy Cakes may process personal information where:

  1. you have given consent
  2. processing is necessary to process or perform an order
  3. processing is necessary to take steps at your request before an order is confirmed
  4. processing is required or authorised by law
  5. processing protects a legitimate interest of Crazy Daizy Cakes, the customer or another person
  6. processing is necessary for website security, fraud prevention or business administration
  7. processing is necessary to establish, exercise or defend legal rights

Where Crazy Daizy Cakes relies on consent, you may withdraw consent at any time. Withdrawal of consent will not affect lawful processing that took place before consent was withdrawn.

11. What happens if you do not provide information

Some personal information is required to process an order or respond to a request.

If you do not provide the required information, Crazy Daizy Cakes may not be able to:

  1. process your order
  2. confirm payment
  3. prepare the correct product
  4. personalise the product
  5. allocate your order to the correct branch
  6. contact you about the order
  7. assess a cancellation or refund request
  8. process an approved refund
  9. respond to a complaint
  10. provide customer support

12. EFT and bank payment information

Website orders are currently paid by bank payment or EFT only unless another payment method is confirmed by Crazy Daizy Cakes.

Crazy Daizy Cakes may process:

  1. proof of payment
  2. payer name
  3. payment reference
  4. payment amount
  5. payment date
  6. bank confirmation information
  7. customer banking details where needed for an approved refund

Crazy Daizy Cakes uses this information to verify payment, match payment to the correct order, prevent fraud and process approved refunds.

Customers must not send unnecessary banking information. Crazy Daizy Cakes will only request banking details where needed for an approved refund.

13. Refund information

If a refund request is assessed and accepted by the bakery, Crazy Daizy Cakes may ask for the customer’s contact details and banking details.

Refund information may be used to:

  1. confirm the customer’s identity
  2. confirm the order
  3. verify the refund reason
  4. process the approved refund
  5. keep business and accounting records
  6. prevent false refund claims

Crazy Daizy Cakes will only process refund details where there is a valid reason to do so.

14. Custom cake information

Where you place a custom order, you may provide names, ages, dates, messages, colours, photos, event details, characters, logos, design examples or personal instructions.

Crazy Daizy Cakes uses this information to prepare the custom order and communicate with you about the order.

You are responsible for ensuring that any wording, spelling, names, ages, dates, photos, logos, images or design references supplied by you are accurate and that you have the right to use them.

15. Order-related communication

Crazy Daizy Cakes may contact you by email, phone, SMS, WhatsApp or another communication method for order-related purposes.

Order-related communication may include:

  1. order confirmations
  2. payment verification
  3. proof of payment requests
  4. design or wording queries
  5. product availability updates
  6. branch collection details
  7. order changes
  8. cancellation notices
  9. refund communication
  10. complaint handling

Order-related communication is not marketing. You may still receive order-related messages even if you opt out of marketing.

16. Direct marketing

Crazy Daizy Cakes may send marketing communication by email, SMS, WhatsApp, phone or other electronic channels where permitted by law.

Marketing may include:

  1. special offers
  2. seasonal promotions
  3. new product updates
  4. cake range updates
  5. branch updates
  6. event-related offers
  7. competition information

Marketing communication may be sent where:

  1. you have given consent
  2. you are an existing customer and the marketing relates to similar Crazy Daizy Cakes products or services, where allowed by law
  3. you have not opted out of receiving marketing

Marketing consent must be separate from acceptance of the Terms and Conditions.

Recommended marketing checkbox wording:

I would like to receive offers, updates and news from Crazy Daizy Cakes. I understand that I can unsubscribe at any time.

This checkbox should not be pre-ticked.

You may opt out of marketing at any time by using the unsubscribe option where available or by contacting Crazy Daizy Cakes at crazy2.daizy@gmail.com.

17. Cookies and tracking technologies

Crazy Daizy Cakes may use cookies and similar technologies on the website.

Cookies may be used to:

  1. keep the website working
  2. support the order process
  3. remember form or cart information where applicable
  4. keep website sessions secure
  5. remember cookie preferences
  6. analyse website traffic
  7. improve website performance
  8. measure advertising results
  9. show relevant marketing where permitted

Some cookies are strictly necessary for the website to function. Other cookies, such as analytics or marketing cookies, may require consent depending on how they are used.

More information is provided in the Crazy Daizy Cakes Cookie Policy.

18. Website analytics

Crazy Daizy Cakes may use analytics tools to understand how visitors use the website.

Analytics information may include:

  1. pages visited
  2. time spent on pages
  3. traffic sources
  4. device type
  5. browser type
  6. approximate location
  7. clicks and browsing behaviour
  8. order process behaviour
  9. error reports

This helps Crazy Daizy Cakes improve the website, fix errors and understand customer needs.

Where reasonably possible, Crazy Daizy Cakes will use analytics in a way that limits unnecessary personal identification.

19. Advertising and social media platforms

Crazy Daizy Cakes may use advertising or social media platforms such as Google, Facebook, Instagram, Meta or similar platforms.

These platforms may use cookies, pixels or similar technologies to measure advertising performance or show relevant adverts.

If you interact with Crazy Daizy Cakes on social media, the relevant platform may also process your personal information according to its own privacy policy.

Crazy Daizy Cakes is not responsible for the privacy practices of external social media platforms.

20. Customer reviews, photos and user content

If you submit a review, comment, testimonial, photo or other content to Crazy Daizy Cakes, we may use that content for customer service, quality control or marketing.

Crazy Daizy Cakes will take reasonable care not to publish private information such as phone numbers, email addresses, payment details or private complaint details.

Where a photo or personalised cake includes names, ages, dates, faces, private messages or children’s information, Crazy Daizy Cakes will take reasonable care before using it publicly.

You may request that Crazy Daizy Cakes not use your review, photo or personalised cake image in public marketing.

21. Product photography and social media

Crazy Daizy Cakes may photograph its own products for internal records, quality control, marketing or social media.

Where a product includes personal information, such as a person’s name, age, event date, photo or private message, Crazy Daizy Cakes will take reasonable care before publishing it.

Customers may request that a personalised order not be used in public marketing.

Crazy Daizy Cakes may refuse to publish or may remove product photos that include sensitive personal information, offensive content or information that should not reasonably be public.

22. Sharing personal information

Crazy Daizy Cakes may share personal information with:

  1. branch staff who prepare and manage orders
  2. bakery and order support staff
  3. customer support staff
  4. website hosting providers
  5. website developers and technical support providers
  6. email and WhatsApp communication providers
  7. accounting, tax and bookkeeping providers
  8. banking institutions where payment or refund processing is required
  9. analytics providers
  10. advertising platforms
  11. cookie consent providers
  12. fraud prevention and security providers
  13. legal and compliance advisers
  14. insurers where relevant
  15. regulatory authorities where required by law
  16. law enforcement where legally required or justified
  17. parties involved in a business sale, merger, restructuring or transfer

Crazy Daizy Cakes will only share personal information where there is a lawful reason to do so.

23. Operators and service providers

Some third-party service providers may process personal information on behalf of Crazy Daizy Cakes.

These service providers may include website hosts, website developers, email systems, WhatsApp tools, analytics providers, marketing tools, security tools, banking systems and technical support providers.

Crazy Daizy Cakes will take reasonable steps to ensure that service providers process personal information securely and only for authorised purposes.

24. Cross-border transfers

Some external services used by Crazy Daizy Cakes may store or process personal information outside South Africa.

Where personal information is transferred outside South Africa, Crazy Daizy Cakes will take reasonable steps to ensure that appropriate privacy, security or contractual safeguards are in place.

These safeguards may include using reputable service providers, contractual data protection obligations or other measures required by law.

25. Security safeguards

Crazy Daizy Cakes takes reasonable technical and organisational measures to protect personal information against loss, misuse, unauthorised access, disclosure, alteration or destruction.

Security measures may include:

  1. secure website hosting
  2. SSL encryption
  3. password protection
  4. access control
  5. limited staff access
  6. website security tools
  7. malware protection
  8. backups
  9. system monitoring
  10. confidentiality measures
  11. technical support controls
  12. responsible handling of refund and banking details
  13. reasonable control over customer communication channels

No website, banking system or electronic communication method can be guaranteed to be completely secure.

Customers are responsible for keeping their own devices, email accounts, WhatsApp accounts and login details secure.

26. Security compromises

If Crazy Daizy Cakes becomes aware of a security compromise involving personal information, we will take reasonable steps to investigate, contain and address the issue.

Where required by law, Crazy Daizy Cakes will notify affected persons and the Information Regulator.

The notification may include information about the possible compromise, the steps taken by Crazy Daizy Cakes and recommended steps the affected person can take.

27. Retention of personal information

Crazy Daizy Cakes will keep personal information only for as long as reasonably necessary for the purpose for which it was collected or as required by law.

Retention periods may depend on:

  1. order processing requirements
  2. accounting and tax obligations
  3. food safety or complaint records
  4. refund and payment records
  5. legal claim periods
  6. fraud prevention needs
  7. customer account activity where applicable
  8. marketing consent records
  9. business recordkeeping needs

Order, payment, refund, tax and accounting records may be kept for legal, audit and recordkeeping purposes.

Complaint records may be kept where needed to resolve disputes, handle repeat issues or protect legal rights.

Marketing records may be kept until you unsubscribe or request removal, unless Crazy Daizy Cakes needs to keep a suppression record to ensure that you are not contacted again.

28. Deleting or anonymising information

When personal information is no longer needed, Crazy Daizy Cakes will take reasonable steps to delete, destroy, de-identify or anonymise it.

Some information may be retained where required by law or where needed to protect legitimate business or legal interests.

29. Your privacy rights

Under POPIA, you may have the right to:

  1. know what personal information Crazy Daizy Cakes holds about you
  2. request access to your personal information
  3. request correction of inaccurate, outdated or incomplete information
  4. request deletion or destruction of personal information where lawful
  5. object to processing in certain circumstances
  6. object to direct marketing
  7. withdraw consent where processing is based on consent
  8. submit a complaint to the Information Regulator
  9. institute civil proceedings where allowed by law

To exercise your rights, contact Crazy Daizy Cakes at crazy2.daizy@gmail.com.

Crazy Daizy Cakes may require proof of identity before processing a request.

30. Access requests

You may request access to the personal information Crazy Daizy Cakes holds about you.

Your request should include enough information for Crazy Daizy Cakes to identify you and locate the relevant records.

Crazy Daizy Cakes may refuse or limit access where allowed by law, including where disclosure would affect another person’s rights, reveal confidential information, compromise security or conflict with legal obligations.

31. Correction requests

You may ask Crazy Daizy Cakes to correct or update inaccurate, outdated, incomplete or misleading personal information.

Where reasonable, Crazy Daizy Cakes will correct the information or explain why the request cannot be fully accepted.

Customers are responsible for keeping their order details, contact details and refund details accurate.

32. Objection to processing

You may object to certain processing of your personal information where allowed by law.

You may object to direct marketing at any time.

If you object to processing that is necessary for an order, refund, complaint or legal obligation, Crazy Daizy Cakes may not be able to continue providing that service.

33. Withdrawal of consent

Where Crazy Daizy Cakes processes personal information based on consent, you may withdraw consent at any time.

Withdrawal of consent will not affect processing that happened before consent was withdrawn.

If you withdraw consent for processing that is needed to complete an order or request, Crazy Daizy Cakes may not be able to continue with that order or request.

34. Automated processing

Crazy Daizy Cakes may use automated tools for website security, analytics, spam prevention, fraud screening, advertising and order management.

Crazy Daizy Cakes does not intend to make decisions based solely on automated processing where that decision has a legal or similarly significant effect on you, unless permitted by law.

Where an automated tool flags an issue, Crazy Daizy Cakes may review the matter before deciding whether to accept, delay, reject or cancel an order.

35. Accuracy of information

You must provide accurate, complete and up-to-date personal information when placing an order, making payment, requesting a refund or contacting Crazy Daizy Cakes.

Crazy Daizy Cakes is not responsible for failed communication, incorrect orders, collection issues, refund delays or payment allocation problems caused by incorrect information supplied by the customer.

36. Third-party websites and links

The website may contain links to external websites, maps, social media pages or other platforms.

Crazy Daizy Cakes is not responsible for the privacy practices, security or content of external websites or platforms.

You should read the privacy policies of those third parties before using their services.

37. Complaints

If you have a privacy complaint, please contact Crazy Daizy Cakes first so that we can try to resolve the issue.

Privacy complaints can be sent to:

Email: crazy2.daizy@gmail.com

Telephone: 087 150 7339

WhatsApp: 065 688 9013

Address: Unit nr 14, Higro Park, Fourie Street, Brackenfell, 7560

If you believe your personal information has been processed unlawfully, you may lodge a complaint with the Information Regulator of South Africa.

38. Information Regulator contact

You may contact the Information Regulator of South Africa if you have a POPIA complaint.

Website: https://inforegulator.org.za

POPIA complaints email: POPIAComplaints@inforegulator.org.za

39. Changes to this Privacy Policy

Crazy Daizy Cakes may update this Privacy Policy from time to time.

The latest version will be published on the website.

The updated version will apply from the date of publication unless stated otherwise.

Customers should review this Privacy Policy from time to time, especially before placing an order.

40. Contact details

For privacy questions, requests or complaints, contact:

Crazy Daizy Cakes

Legal entity: SWEFTTO FOODS CC

Registration number: 1990/026881/23

VAT number: 4190154270

Privacy email: crazy2.daizy@gmail.com

Customer support email: crazy2.daizy@gmail.com

Telephone: 087 150 7339

WhatsApp: 065 688 9013

Address: Unit nr 14, Higro Park, Fourie Street, Brackenfell, 7560

Website: https://crazydaizycakeshop.co.za

Information Officer: Leon, Owner

Order and customer support contact: Odette, Bakery Manager