Privacy Policy

Sweet Tooth is a chef-crafted dessert and tasting-experience brand based in Johannesburg, Gauteng, South Africa, founded by Chef Ayanda Mkhwanazi. We are the “responsible party” (data controller) for the personal information described in this policy. Our designated Information Officer is Mpumelelo Mkhize (www.mpumelelomkhize.com). For any privacy or data-protection matter, you can reach the Information Officer at privacy@itssweettooth.co.za, or through our contact page.

We only collect information that you choose to give us, together with limited technical data needed to keep our website secure and to respond to enquiries.

Information you provide

• Contact & booking enquiries:your name, email address, the type of experience or event you're interested in, and the contents of your message — submitted through our contact and collaboration forms.

Information collected automatically

• Technical & security data: when you submit a form, our systems record your IP address, browser and device type, the page the request came from, and an approximate location (country, city, and region) derived from your IP address. We use this to prevent spam and abuse and to understand where enquiries originate.

We do not sell your personal information, and we do not knowingly collect information from children.

We use the information we collect to:

• respond to your enquiries and booking requests;
• plan, quote for, and deliver dessert experiences, events, and collaborations;
• protect our website and forms against spam, fraud, and abuse; and
• comply with our legal obligations.

We rely on your consent and on our legitimate business interests as the lawful basis for this processing under POPIA. We will only send you marketing communications if you have specifically opted in, and you can withdraw your consent at any time.

We share personal information only with trusted service providers who help us operate this website and respond to you, and only to the extent they need it:

• Email delivery: form submissions are delivered to our inbox using a third-party email service provider (Resend).
• Website hosting & infrastructure: our site is served through a cloud hosting provider, which processes technical request data such as IP addresses on our behalf.

These providers may process data outside South Africa. Where that happens, we take reasonable steps to ensure your information continues to receive a comparable level of protection, as required by POPIA. We may also disclose information where required by law or to protect our legal rights.

Sweet Tooth does not use advertising or cross-site tracking cookies. Our website may use a small number of strictly necessary cookies or similar technologies required for the site to function and remain secure. You can control or delete cookies through your browser settings at any time.

We keep enquiry and booking information only for as long as necessary to respond to you, fulfil the experience or collaboration, and meet our legal and accounting obligations — after which it is securely deleted or anonymised. Technical security logs are retained for a short period and then discarded.

We apply reasonable technical and organisational measures to safeguard your personal information against loss, unauthorised access, and misuse — including rate limiting on our forms, encrypted connections (HTTPS), and limiting access to your data to those who genuinely need it. No method of transmission over the internet is completely secure, but we work to protect your information at every step.

Under POPIA, you have the right to:

• ask what personal information we hold about you and request access to it;
• ask us to correct or delete information that is inaccurate or no longer needed;
• object to the processing of your personal information;
• withdraw consent you previously gave (for example, to marketing); and
• lodge a complaint with the Information Regulator of South Africa.

To exercise any of these rights, please email our Information Officer, Mpumelelo Mkhize, at privacy@itssweettooth.co.za or reach out via our contact page. You may also contact the Information Regulator at inforegulator.org.za.

We may update this Privacy Policy from time to time to reflect changes in our practices or the law. When we do, we'll revise the “Last updated” date at the top of this page. We encourage you to review it periodically.

If you have any questions about this policy or how we handle your personal information, we'd love to hear from you. Email our Information Officer, Mpumelelo Mkhize, at privacy@itssweettooth.co.za or get in touch through our contact page.