TACCSPRO WEBSITE PRIVACY POLICY

 

Quick Website Version

TACCSPRO respects your privacy and is committed to protecting personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA).

We collect and use personal information to provide accounting, tax, payroll, company, advisory, audit review, Sage/cloud accounting and related business services; to respond to enquiries; to manage client relationships; to meet legal and regulatory obligations; and to operate and improve our website.

We do not sell personal information. We only share personal information where necessary and lawful, including with authorised service providers, professional advisers, regulators, SARS, CIPC and other public bodies where required or permitted by law.

You may contact us to ask whether we hold your personal information, request access to or correction of your information, object to certain processing, withdraw consent where applicable, or raise a privacy complaint.

Privacy contact: [Insert privacy email address / Information Officer contact details].

Full Privacy Policy

 

1. Introduction

This Privacy Policy explains how TACCSPRO collects, uses, stores, shares and protects personal information when you visit our website, contact us, request a quotation, become a client, use our services, interact with us, or provide information to us.

This policy is intended to help clients, prospective clients, website visitors, suppliers, employees, contractors and other data subjects understand what personal information we process, why we process it, how we protect it, and what rights may be available under POPIA and other applicable laws.

2. Responsible Party

For purposes of POPIA, TACCSPRO is generally the responsible party for personal information where it determines the purpose and means of processing. In some client engagements, TACCSPRO may also process information as an operator on behalf of a client.

Business name: TACCSPRO

Website: www.taccspro.co.za

Privacy contact: [Insert privacy email address]

Information Officer: [Insert name and contact details]

Physical/postal address: [Insert confirmed business address]

3. Scope of This Policy

This policy applies to personal information processed through the TACCSPRO website and website enquiry forms; email, telephone, WhatsApp, online meetings and in-person consultations; client onboarding, engagement letters, quotations, invoices and service delivery; accounting, payroll, tax, annual financial statement, advisory and business-support services; Sage Business Cloud Accounting and related accounting/payroll support services; supplier, contractor and professional-adviser interactions; and legal, regulatory, audit, tax and recordkeeping processes.

4. Personal Information We May Collect

Depending on your relationship with us, we may collect and process the following types of personal information:

  • Identity and contact details, such as names, surnames, identity numbers, passport numbers, tax numbers, addresses, email addresses and telephone numbers.
  • Business and company information, such as company names, registration numbers, CIPC information, VAT numbers, PAYE/UIF/SDL information, ownership details, directors, members, shareholders, representatives and authorised contacts.
  • Financial, accounting and tax information, such as bank details, invoices, statements, payroll records, payslips, tax returns, SARS correspondence, assessments, management accounts, annual financial statements and supporting records.
  • Employment and payroll information, such as employee details, remuneration information, statutory deductions, leave information, UIF and PAYE records and related payroll documentation.
  • Communication information, such as email correspondence, instructions, notes from consultations, quotations, service requests and complaints.
  • Website and technical information, such as IP addresses, browser information, device information, pages visited, referring websites, cookie identifiers and website usage data.
  • Special personal information, where lawful and necessary, such as information contained in payroll, statutory, tax, employment, legal or client records.

5. How We Collect Personal Information

We may collect personal information directly from you when you contact us, complete a website form, email documents, request services, sign an engagement letter or provide instructions.

We may also collect information from your company, employer, employees, directors, members, shareholders, representatives or authorised third parties.

Where relevant to the services, we may collect information from accounting, payroll, banking, tax, statutory, cloud-software or business systems that you authorise us to access or support.

We may collect information from public registers and official sources such as CIPC, SARS and other regulatory or statutory sources where lawful and relevant.

We may automatically collect limited technical information through website cookies, server logs and analytics tools when you use the website.

6. Why We Process Personal Information

We process personal information to respond to enquiries and provide quotations; onboard clients and verify instructions, representatives and authority; provide accounting, bookkeeping, payroll, tax advisory, annual financial statement, company secretarial, CIPC, Sage Business Cloud Accounting support and related services; prepare invoices, manage payments and administer client accounts; communicate with clients, employees, suppliers, regulators and service providers; comply with tax, accounting, labour, company, financial, anti-fraud, recordkeeping and other legal obligations; protect our rights, recover debts, resolve disputes and enforce agreements; maintain website security, troubleshoot technical issues and improve website functionality; and send service-related communications and, where legally permitted, marketing or business updates.

7. Legal Bases / Justification for Processing

We process personal information only where POPIA permits it. Depending on the circumstances, our processing may be based on one or more lawful grounds, including where you have consented to the processing; processing is necessary to conclude or perform a contract with you or the organisation you represent; processing is necessary to comply with a legal obligation; processing protects a legitimate interest of you, TACCSPRO or a third party; processing is necessary for the proper performance of a public law duty by a public body, where applicable; or processing is necessary to pursue or defend legal claims or protect business rights.

8. Website Enquiries and Contact Forms

When you submit an enquiry through the website or contact us by email, telephone, WhatsApp or other channels, we use the information you provide to respond to your enquiry, assess whether we can assist you, provide information about our services, and keep records of the communication.

Please do not submit unnecessary sensitive information through a website form. Where detailed financial, payroll, tax or identity documents are required, we may request that these be provided through a more appropriate channel.

9. Cookies and Website Analytics

The website may use cookies and similar technologies to make the website work, improve performance, understand website traffic and protect the site against misuse. Cookies are small files placed on your device or browser when you visit a website.

You can usually control cookies through your browser settings. If cookies are disabled, some website functions may not work properly. If the website uses a cookie banner or consent-management tool, the choices you make through that tool will also apply as described in the Cookie Policy.

For more information, please read the TACCSPRO Cookie Policy published on the website.

10. Direct Marketing

We may send existing clients service updates, accounting and tax reminders, business updates or information about related services where permitted by law.

For unsolicited electronic direct marketing, we will request consent where required. You may unsubscribe from marketing communications or object to direct marketing at any time. Service-related and transactional communications may still be sent where necessary for the client relationship or to comply with legal obligations.

11. Sharing Personal Information

We do not sell personal information. We may share personal information where necessary and lawful, including with SARS, CIPC, UIF, the Department of Employment and Labour, banks, auditors, regulators, courts or other public bodies where required; accounting, payroll, tax, document-management, cloud-hosting, email, website, IT-support and cybersecurity service providers; Sage Business Cloud Accounting and other software providers used to deliver or support client services; professional advisers such as auditors, attorneys, consultants and insurers; payment processors, banks and debt-collection or legal-service providers where needed; authorised representatives, employees, directors, members, shareholders or contacts of a client where relevant to the engagement; and other parties where you consent, instruct us, or where the law permits or requires disclosure.

12. Operators and Service Providers

Where we use operators or service providers to process personal information on our behalf, we require them to process information only for authorised purposes, keep it confidential, apply appropriate safeguards, and assist with compliance where required.

13. International Transfers

Some software, cloud, email, hosting, backup, analytics or support providers may store or access personal information outside South Africa. Where personal information is transferred outside South Africa, we take reasonable steps to ensure that the transfer is lawful and that appropriate safeguards are in place, including contractual protections where appropriate.

14. Security Safeguards

We use reasonable technical and organisational safeguards to protect personal information against loss, unauthorised access, misuse, disclosure, alteration or destruction. Safeguards may include access controls, passwords, secure cloud systems, backup procedures, confidentiality controls, staff awareness and appropriate service-provider arrangements.

No website, email system or cloud platform is completely risk-free. You should avoid sending unnecessary sensitive information through unsecured channels. Where highly sensitive records are exchanged, we may request use of a more secure method.

15. Security Compromises / Data Breaches

If we become aware of a security compromise involving personal information, we will investigate, take containment and remedial steps, and notify affected data subjects and/or the Information Regulator where required by POPIA.

16. Retention of Records

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, unless a longer retention period is required or permitted by law, contract, tax/accounting rules, audit requirements, dispute-resolution needs or legitimate business purposes.

When information is no longer required, we will take reasonable steps to delete, destroy, de-identify or securely archive it, where appropriate.

17. Your Rights

Subject to POPIA and other applicable laws, you may have the right to ask whether we hold personal information about you; request access to your personal information; request correction, deletion or destruction of inaccurate, irrelevant, excessive, out-of-date, incomplete, misleading or unlawfully obtained information; object to processing in certain circumstances; withdraw consent where processing is based on consent; object to direct marketing; complain to the Information Regulator; and institute civil proceedings where POPIA permits.

To exercise your rights, contact us using the privacy contact details in this policy. We may need to verify your identity before responding. Some rights are limited by law, including where we must keep records for tax, accounting, regulatory, legal or contractual reasons.

18. Children and Minors

Our website and services are not directed at children. We do not knowingly collect personal information of children through the website without appropriate authority. In limited cases, we may process information relating to children where necessary for lawful payroll, tax, accounting, employment, statutory, legal or authorised client-service purposes.

19. Special Personal Information

We only process special personal information where necessary and permitted by POPIA or another applicable law. This may occur, for example, in payroll, employment-tax, statutory, audit, accounting, legal or authorised client-service contexts.

20. Client Responsibility When Sending Information to TACCSPRO

Clients and their representatives must ensure that they are authorised to provide personal information to TACCSPRO, that information provided is accurate and complete, and that unnecessary personal information is not included in documents sent to us.

Where a client provides personal information about employees, directors, members, shareholders, customers, suppliers or other third parties, the client is responsible for ensuring that such disclosure is lawful and, where required, that the relevant individuals have been informed.

21. Links to Third-Party Websites

The website may include links to third-party websites or platforms. TACCSPRO is not responsible for the privacy practices, content or security of third-party websites. You should review the privacy policy of any third-party website before providing personal information to that website.

22. Complaints and the Information Regulator

Please contact us first if you have a privacy concern so that we can try to resolve it. You also have the right to complain to the Information Regulator of South Africa.

Information Regulator website: https://inforegulator.org.za

Complaints email: complaints.IR@justice.gov.za

General enquiries email: enquiries@inforegulator.org.za

23. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be published on the website with an updated effective date. Material changes may also be communicated through suitable channels where appropriate.

Effective date: 10 June 2026, 12:18

Last updated:  10 June 2026, 12:18