Privacy policy

1. What we collect

• Contact details you give us: name, email address, phone number, company name and registration number.
• Information needed to perform a service you order: identity numbers, tax reference numbers, CIPC details, financial records, payroll information and supporting documents.
• Order and payment records. Card details are entered on Netcash's secure page and are never stored by us.
• Website usage information such as pages visited, device and browser type, collected through cookies and similar technologies.

2. Why we use it

• To perform the accounting, tax, payroll and company secretarial services you engage us for, including submissions to SARS, CIPC, the Department of Labour and the Central Supplier Database on your behalf.
• To process orders and payments, send confirmations, invoices and reminders about deadlines that affect you.
• To answer enquiries and provide support by email, phone and WhatsApp.
• To meet our legal obligations, including record keeping under the Tax Administration Act, the Companies Act and the Financial Intelligence Centre Act.
• To improve our website and, where you have agreed, to send you useful tax and business updates. You can opt out at any time.

3. Who we share it with

We share personal information only where needed to deliver our services: with SARS, CIPC and other regulators when we submit on your behalf; with Netcash to process payments; with Xero and the other software providers on which we keep client records; and with our staff and contractors who are bound by confidentiality. We do not sell personal information. Some providers store data outside South Africa; where they do, we make sure adequate protection applies as POPIA requires.

4. How long we keep it

We keep client records for at least five years after the end of the engagement, as tax and company law require, and enquiry information for as long as is needed to respond to you. After that, information is deleted or anonymised unless the law requires longer retention.

5. Security

We protect personal information with access controls, encrypted connections, secure cloud systems and staff confidentiality obligations. If a security compromise affecting your information ever occurs, we will notify you and the Information Regulator as POPIA requires.

6. Your rights

You may ask what personal information we hold about you, ask us to correct or delete it, object to processing for direct marketing, and withdraw consent where processing relies on consent. To exercise these rights, email [email protected]. You may also lodge a complaint with the Information Regulator of South Africa.

7. Cookies

Our website uses necessary cookies to work properly and analytics cookies to understand how it is used. You can block cookies in your browser settings; some parts of the site may then not work as intended.

8. Changes

We may update this policy from time to time. The current version is always published on this page.