Privacy Policy

This notice explains what personal information Apron & Atlas collects throughhttps://apronandatlas.com, why, how long it is kept, and what you can ask me to do about it. It is written under the South African Protection of Personal Information Act 4 of 2013 (POPIA).

The short version: the only personal information I ask for is what you type into the quote form, I use it to answer you, I do not sell it and I do not send marketing. Audience measurement is off until you switch it on.

Who is responsible for your information

What is collected, and why

The quote request form

This is the only place on the site where you are asked to give me anything. The form collects:

• your name;
• your email address;
• your telephone number, if you choose to give it — the field is optional;
• the kind of occasion you are planning and the approximate number of guests;
• your preferred date, an alternative date if you give one, and whether you are flexible;
• roughly where in Cape Town you are, so I know whether and how far I am travelling;
• whatever you write in the message — which may include dietary requirements or allergies, if you choose to tell me about them.

Purpose: to read your request, write you a menu and a quote, and correspond with you about it. Nothing else. Justification under POPIA: the information is necessary to take steps at your request before entering into a contract, and you consent to it explicitly by ticking the box on the form.

Health-related information. If you tell me about an allergy or a dietary requirement, that is special personal information under POPIA section 26. I ask for it only so that nobody at your table is served something they should not eat, I use it for no other purpose, and you give it to me voluntarily by choosing to write it in the message field. If you would rather not put it in writing on the site, leave it out and tell me by telephone instead.

All fields except the telephone number are required, because a request without them cannot be answered. There is no account to create, no newsletter to subscribe to, and no marketing list.

Audience measurement

The site uses Microsoft Clarity to understand which pages are useful and which are confusing. It is switched off until you accept it, and you can change your mind at any time from the "Manage cookies" link in the footer. It records how pages are used — clicks, scrolling, a replay of the session — not who you are. The detail, including every cookie involved, is in the Cookie Policy.

Server logs

The hosting provider records standard technical information for every request — IP address, date and time, page requested, browser type. This happens for security and reliability, and it happens on every website. It is not linked to anything you send through the form.

What is not collected

No payment details of any kind — nothing is sold or paid for through this site. No advertising or profiling cookies. No social network trackers. No location tracking. Nothing is sold or rented to anyone, ever.

Who else sees it

Each of these acts as an operator under POPIA: they process information on my instructions and for no purpose of their own. Nobody else receives your information, and it is never sold.

Information leaving South Africa

The recipients above are outside South Africa, so your information is transferred across borders. POPIA section 72 permits this where the recipient is bound by rules providing an adequate level of protection, or where the transfer is necessary to perform a contract at your request. Both apply here: these providers publish contractual data-protection commitments, and answering your enquiry requires sending you an email.

How long it is kept

{TO COMPLETE — deferred by the client, 2026-08-04} — retention periods. The periods in the project intake were drawn from French commercial law and do not apply to a South African business; they have deliberately not been reproduced here. Retention will be set against South African law and published on this page before the site goes live. Until then, the working rule is simple: your information is kept while it is needed to answer you and to honour a booking, and deleted when it is not.

You can ask me to delete your request at any time, whatever the eventual retention period says.

How it is protected

The site is served only over HTTPS. The form posts directly to a transactional email provider and is not stored in a database on this site — there is no visitor database to breach. Access to the inbox that receives requests is limited to Antoine Essig. If a breach ever affects your information, POPIA section 22 requires me to notify you and the Information Regulator, and I will.

Your rights

Under POPIA you may:

• ask what personal information I hold about you, and be given a copy (section 23);
• ask me to correct or delete anything inaccurate, irrelevant or out of date (section 24);
• object to my processing your information (section 11(3));
• withdraw a consent you previously gave, at any time, without giving a reason;
• complain to the Information Regulator.

Write to contact@apronandatlas.com and I will reply within a reasonable time. There is no charge for a first request.

If you are not satisfied with my answer, you can complain to theInformation Regulator (South Africa) —inforegulator.org.za.

Children

This site is not aimed at children and I do not knowingly collect information about anyone under 18. If a child's information reaches me through the form, tell me and I will delete it.

Changes to this notice

If this notice changes, the date at the top of the page changes with it. Material changes will be flagged on the site rather than made quietly.

Questions about any of this: contact@apronandatlas.com.