Privacy policy

The Ladles of Love Foundation Trust ("Ladles of Love") is the responsible party for the personal information in One Pot, its digital systems platform. One Pot is built and operated for Ladles of Love by TurboPress, a trading name of Van Biljon Digital (Pty) Ltd (Reg. No. 2026/562544/07), which processes that information on Ladles of Love's behalf as its operator and for no purpose of its own. Ladles of Love names its Information Officer in its approved privacy notice.

• Supporters: name, email address, phone number, donations, subscriptions, tax receipts and event tickets.
• People at companies and partner organisations: contact details, and the notes, tasks and emails of the relationship.
• Deliveries: a feeding centre's contacts, the driver's name and vehicle, and the name typed to confirm a delivery.
• Staff: name, work email address, role and sign-in records.

One Pot never stores a payment card number or a bank account number. For the children in Nourish Our Children it holds the register described below, under the consent recorded for each child; a growth screening is scored on the device, and every report is in counts.

From Ladles of Love's website (donations, shop orders, event tickets and forms), from the payment providers that process a donation, from QuickBooks (below), from the records of Ladles of Love's earlier CRM, and from staff who record a conversation, a delivery or a programme return.

Ladles of Love uses it to record and receipt donations, to look after its relationships with supporters, companies and partners, to run its programmes and deliveries, to keep One Pot in step with its QuickBooks books, and to meet its legal and reporting duties.

What a parent or guardian consents to on a centre's Nourish Our Children consent page. The marked wording in this section is still to be approved; the rest is proposed for review.

Nourish Our Children holds your child's names, sex, date of birth, population group, nationality status, any health or developmental conditions and enrolment, the meals recorded at the centre and your child's growth measurements.

Ladles of Love uses it to run the feeding programme and to report on it in counts; no report names a child.

It is stored with Supabase (the database, hosted in London, United Kingdom).

How long it is kept: [As advised]

You can withdraw at any time, on the consent page with your reference number and surname, or at the centre.

One Pot connects to Ladles of Love's QuickBooks Online company through Intuit's own sign-in (OAuth 2.0), asking only for the accounting scope, com.intuit.quickbooks.accounting.

What One Pot reads from QuickBooks

• The company's name and id.
• Products and services, and tax codes.
• Customers (a name, an email address), to find a supporter or a company already in the books.
• The invoices One Pot raised, and the payments applied to them.
• The profit and loss report, as a monthly summary.

What One Pot writes to QuickBooks

• A customer (a name, and an email address where there is one), when a supporter or company One Pot invoices is not yet in the books.
• An invoice raised from a fundraising deal.

One Pot keeps what it reads only where it is needed (an invoice's number, status and amounts on the deal, a payment on the ledger); it does not keep a copy of QuickBooks. The tokens Intuit issues are kept on the server, where no signed-in person can read them, and are never shown, logged or sent to a browser.

How to disconnect QuickBooks

A super administrator opens Settings, Integrations, QuickBooks in One Pot and presses Disconnect (for the production connection, on one-pot.org): One Pot revokes its tokens at Intuit and deletes the connection. An administrator of the QuickBooks company can also disconnect One Pot from the company's connected apps. Either way nothing more is read or written; what One Pot already recorded stays with Ladles of Love's records.

Ladles of Love staff, each only what their role needs: every page that shows a record asks for a sign-in. TurboPress, as operator. And the providers One Pot runs on, each for its own part: Supabase (the database, hosted in London, United Kingdom), Vercel (which serves the application), Intuit (QuickBooks), Microsoft (staff sign-in and email), Cloudflare (a check against automated sign-in attempts) and the email service that delivers One Pot's receipts and notices. Some of these providers process information outside South Africa; Ladles of Love's approved privacy notice sets out how those transfers are protected.

Every staff page needs a sign-in, access follows the person's role, and secrets and tokens stay on the server. Information is kept for as long as Ladles of Love needs it for the purposes above or the law requires (tax records, for example), as its approved privacy notice sets out.

One Pot sets a sign-in cookie for staff, and may remember a light or dark theme choice. This policy, the terms of use and the delivery confirmation page set no sign-in cookie.

You may ask Ladles of Love what personal information it holds about you, ask for it to be corrected or deleted, and object to its use for direct marketing. You may also complain to the Information Regulator (South Africa).

Requests and questions about this policy go to Ladles of Love at [contact address: Barry to name]. A changed version of this policy is posted on this page with its date.