Privacy Policy

1. Personal information we collect

The information we collect depends on how you interact with us and may include:

• Contact and enquiry information: your name, email address, telephone or WhatsApp number, business name, and the contents of your message.
• Client and service information: information reasonably needed to assess an enquiry or provide agreed bookkeeping, payroll, company-registration, tax, VAT, or related services. This may include identification, contact, financial, employee, banking, company, and tax information.
• Communications: records of correspondence by email, telephone, WhatsApp, or another agreed channel.
• Website and technical information: information such as pages viewed, referring pages, approximate location, browser, operating system, device type, and website performance data.

We usually collect information directly from you. Where relevant and permitted, we may also receive it from your authorised representatives, employees, service providers, public records, or bodies such as CIPC or SARS.

2. Purposes and lawful grounds for processing

We may process personal information to:

• respond to enquiries and communicate with you;
• prepare proposals, take steps requested before an agreement, and provide agreed services;
• manage client relationships, administration, billing, and business records;
• meet applicable legal, regulatory, tax, accounting, and professional obligations;
• operate, secure, troubleshoot, and improve our website and services;
• prevent misuse and establish, exercise, or defend legal claims; and
• send direct marketing where permitted and subject to your right to opt out.

Depending on the circumstances, processing may be based on your consent, steps requested before entering into a contract, performance of a contract, compliance with a legal obligation, the protection or pursuit of a legitimate interest, or another ground permitted by the Protection of Personal Information Act 4 of 2013 ("POPIA").

3. Information you need to provide

The website enquiry form requires your name, email address, and message so that we can identify and respond to your request. A telephone number and business name are optional. If you become a client, some information may be required by law or to provide the agreed services. If required information is not provided, we may be unable to respond fully or provide the relevant service.

4. Sharing and service providers

We may share personal information where appropriate with:

• Vercel: our website hosting and web analytics provider, which processes technical, usage, and hosting data;
• Resend: our enquiry email delivery provider, which processes contact-form submissions to deliver them to us;
• other providers supporting communications, IT, security, document storage, administration, and the delivery of client services;
• SARS, CIPC, banks, auditors, professional advisers, or other parties where authorised by you or reasonably necessary for an agreed service;
• regulators, courts, law-enforcement bodies, or other authorities where required or permitted by law; and
• a successor or purchaser in connection with a lawful business reorganisation or sale.

We do not sell personal information. We require service providers acting for us to handle information for the relevant service and apply appropriate safeguards.

5. Processing outside South Africa

Vercel, Resend, and other technology providers may process or store information in countries outside South Africa. Where POPIA applies to an international transfer, we take reasonable steps to use a recipient, agreement, binding rule, consent, or other transfer basis that meets POPIA's requirements for protection of the information.

6. Retention

We keep personal information only for as long as reasonably needed for the purpose for which it was collected, to provide services, comply with applicable tax, accounting, employment, and other record-keeping duties, resolve disputes, or enforce agreements. Retention periods vary by record type and legal requirement. When information is no longer required, we delete, destroy, or de-identify it where reasonably practicable.

7. Security

We use reasonable technical and organisational safeguards appropriate to the nature of the information and the risks involved. These measures are intended to reduce unauthorised access, loss, misuse, alteration, or disclosure. No electronic system is completely secure. If a security compromise occurs, we will investigate and take the notification and remedial steps required by applicable law.

8. Your privacy rights

Subject to POPIA and any lawful limitations, you may:

• ask whether we hold personal information about you and request access to it;
• ask us to correct or update inaccurate or incomplete information;
• request deletion or destruction where the legal requirements are met;
• object to certain processing on grounds relating to your circumstances;
• withdraw consent where processing depends on consent, without affecting earlier lawful processing;
• object to direct marketing and opt out of it; and
• complain to the Information Regulator or seek another remedy available by law.

To make a request, use the email address or telephone number below. We may ask for information reasonably necessary to confirm your identity and locate the relevant records. We will consider and respond to requests as required by applicable law.

9. Cookies and analytics

This website uses Vercel Web Analytics to understand website use and performance. This may include page views, referring pages, approximate location, browser, operating system, device type, and performance information. We use these insights to maintain and improve the website.

We do not currently use advertising or behavioural-marketing cookies. The website or its providers may use limited technical storage where necessary to operate, secure, or measure the service. If our use of cookies or similar technologies changes materially, we will update this policy and provide any notice or choice required by law.

10. Direct marketing

We send electronic direct marketing only where permitted by law. You may ask us to stop at any time by using an unsubscribe option in the communication, where provided, or by contacting us. Operational messages needed for an enquiry or client relationship are not direct marketing.

11. Third-party services and children

Our website may link to third-party services, including WhatsApp. Those services operate under their own privacy terms, which you should review before providing information to them.

This website is intended for business and adult users and is not directed at children. We do not knowingly collect a child's personal information through the website without the authorisation required by law. Please contact us if you believe a child has submitted information improperly.

12. Changes to this policy

We may update this policy when our practices, services, or legal obligations change. The current version will be published on this page with its revision date. Where required, we will provide additional notice of a material change.