Fine print
Privacy policy
What is collected, why, and what is never done with it.
Last updated July 2026
AC Doughworks is a sole-proprietor studio based in Pretoria, South Africa. This policy explains how personal information is handled, in line with the Protection of Personal Information Act (POPIA).
The short version: only what is needed to answer you or fulfil an order is collected, nothing is sold, and there is no advertising or behavioural tracking on this site.
What is collected
- When you send a note: your name, email address, business name if you give one, and the message itself.
- When you buy something: your name, email address, and the details of the order. Card details are never collected by this site — those are entered on Payfast's secure pages and are not visible to the studio.
- Standard server logs: the hosting provider records IP addresses and requested pages, as any web server does, for security and diagnostics.
What is not collected
- No advertising cookies, pixels, or cross-site trackers
- No behavioural profiling or audience-building
- No card or banking details
- No special personal information as POPIA defines it
Why it is used
- To reply to your enquiry
- To deliver what you bought and email you the files
- To handle refunds, faults or support requests
- To keep the records required by South African tax and accounting rules
Your details are not added to a mailing list unless you explicitly ask to be. There is no newsletter that signs you up by stealth.
Who it is shared with
Personal information is never sold or rented. It is shared only with:
- Payfast — to process your payment
- The hosting provider — which stores the site and its email
- SARS or a bookkeeper — where tax law requires it
How long it is kept
- Enquiries: up to 2 years, then deleted
- Order and invoice records: 5 years, as tax law requires
- Server logs: as long as the hosting provider retains them, typically a few months
Your rights under POPIA
You may at any time ask to:
- See what personal information is held about you
- Have anything inaccurate corrected
- Have your information deleted, where no tax obligation requires keeping it
- Object to how it is being used
- Complain to the Information Regulator of South Africa
Email info@acdoughworks.co.za to exercise any of these. You will get a reply within a reasonable period, and there is no charge.
Security
The site is served over HTTPS. Payments are handled entirely by Payfast, a registered South African payment provider, so card data never touches this server. That said, no method of transmission over the internet is completely secure, and no absolute guarantee can honestly be made.
Children
This site is not directed at children under 18, and information is not knowingly collected from them.
Changes
If this policy changes, the revised version appears here with a new date at the top. Material changes affecting existing customers will be emailed.
Contact
Andrea Benninghoff, AC Doughworks — Pretoria, Gauteng, South Africa.
info@acdoughworks.co.za