Last updated

1. Who we are

is the responsible party for the personal information described in this notice. We provide accounting, tax, fractional CFO and corporate advisory services to businesses and individuals across South Africa.

2. What we collect

Through this website. When you send an enquiry we receive your name, business name, email address, phone number, the service you need and your message. Our hosting provider also records technical information such as your IP address, browser type and the pages you request, for security and performance.

When you become a client. Depending on the engagement, we collect identity details such as names, ID or passport numbers and company registration numbers, contact details, tax reference numbers, financial records, bank statements, payroll and employee information, shareholding and beneficial ownership details, and any other information the work requires.

Some engagements, such as B-BBEE verification support, may involve special personal information such as race. We process special personal information only with your consent or where POPIA otherwise permits it.

3. Why we use it

• To respond to your enquiry and prepare a quote.
• To deliver the services we are engaged for, including accounting, tax, financial statements, modelling, funding applications and advisory work.
• To meet our legal and professional obligations, including tax, company and professional conduct requirements.
• To manage our relationship with you, including billing and conflict checks.
• To keep this website and our systems secure.

We do not sell personal information.

4. Our lawful basis

We process personal information only where section 11 of POPIA allows it: with your consent, to conclude or perform a contract with you, to comply with a legal obligation, to protect your legitimate interests, or to pursue our legitimate interests or those of a third party to whom the information is supplied.

5. Who we share it with

• The South African Revenue Service, the Companies and Intellectual Property Commission and other authorities, as your instructions or the law require.
• Banks, development finance institutions, funds and other funders, only when you instruct us to submit information to them.
• Auditors, professional bodies and regulators, where the law or professional standards require it.
• Service providers who process information on our behalf, including website hosting (Netlify), enquiry form delivery (FormSubmit), email hosting, cloud storage and accounting software. These operators must keep your information confidential and secure.

6. Transfers outside South Africa

Some of the service providers above store information on servers outside South Africa. We transfer personal information across borders only where section 72 of POPIA permits it, for example where the recipient is bound by law, binding corporate rules or an agreement that provides protection substantially similar to POPIA, or where you have consented.

7. How long we keep it

Enquiries that do not lead to an engagement are deleted within twelve months. Client records are kept for as long as the engagement requires and for the periods set by law, generally five years under the Tax Administration Act and seven years under the Companies Act. After that, records are securely destroyed or permanently de-identified.

8. How we protect it

We apply reasonable technical and organisational measures, including restricted access, multi-factor authentication on email and core systems, encrypted devices, and confidentiality obligations on everyone who works with us and on our operators. If we believe your personal information has been accessed or acquired by an unauthorised person, we will notify the Information Regulator and you, as section 22 of POPIA requires.

9. Your rights

• To ask whether we hold personal information about you and to request a copy of it.
• To ask us to correct or delete information that is inaccurate, out of date, excessive or unlawfully obtained.
• To object to the processing of your information, and to withdraw consent you have given.
• To refuse direct marketing.
• To lodge a complaint with the Information Regulator.

To exercise any of these rights, contact our Information Officer. We will respond within 30 days. We may need to verify your identity first.

10. Direct marketing

We send marketing by email or other electronic means only with your consent, or to existing clients about services similar to those they already use. Every message includes a simple way to opt out.

11. Cookies and third-party services

This website does not set cookies or use tracking analytics. It loads its fonts from Google Fonts, which means your browser connects to Google's servers and Google receives your IP address. Links to WhatsApp, email and phone apps are subject to those providers' own privacy terms.

12. Complaints

Please raise any concern with our Information Officer first so that we can try to resolve it. You may also complain to the Information Regulator:

13. Changes to this notice

We may update this notice from time to time. The date at the top shows when it last changed.