Privacy Policy
Fintec Group (Pty) Ltd (“Fintec Group”, “we”, “us”) is committed to protecting your personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA). This policy explains what personal information we collect, why we collect it, how we use and protect it, and what rights you have in relation to it.
1. Responsible party & Information Officer
Fintec Group (Pty) Ltd is the responsible party for personal information processed through this website and our accounting, tax, and payroll services.
Information Officer: Reghardt Venter
Registered address: 250 Blaauwberg Road, Table View, Cape Town, 7441, South Africa
Email: rventer@fintecgroup.co.za
Telephone: +27 64 584 3869
2. Information we collect
Depending on how you interact with us, we may collect:
- Contact details — name, email address, telephone number, physical or postal address.
- Identity information — ID number, passport number, date of birth, tax reference number, where required for SARS, CIPC, or FICA-related engagements.
- Financial information — banking details, income, expenses, invoices, payroll records, and other information necessary to provide accounting, tax, and payroll services.
- Employment information — for payroll clients, employee salary, tax, and statutory deduction information.
- Website and communication data — messages submitted through our contact form, email correspondence, and basic website usage data.
3. How we collect information
We collect personal information directly from you — through our contact form, email, telephone, WhatsApp, in-person meetings, or documents you provide for the purpose of our engagement. We may also receive information from SARS, CIPC, or other regulatory bodies in the course of representing you, and from third-party accounting or payroll software you authorise us to access.
4. Why we process your information
We process personal information to:
- Provide accounting, tax compliance, and payroll administration services;
- Prepare and submit statutory filings to SARS, CIPC, and other regulators on your behalf;
- Communicate with you about your engagement, invoices, and enquiries;
- Comply with our own legal, regulatory, and professional obligations (including record-keeping requirements under tax and companies legislation);
- Respond to enquiries submitted through this website.
5. Legal basis for processing
We process your personal information on one or more of the following grounds recognised under POPIA: performance of a contract or engagement with you, compliance with a legal obligation (such as tax and companies legislation), your consent, or our legitimate interests in operating and marketing our practice, provided these do not override your rights.
6. Who we share information with
We do not sell personal information. We may share it, only to the extent necessary, with:
- SARS and CIPC — for statutory submissions and filings made on your behalf;
- Software service providers — accounting, payroll, and practice management platforms we use to deliver our services;
- Professional advisors — auditors, attorneys, or other professionals, where necessary for your engagement;
- Regulators or courts — where required by law or a valid legal process.
7. Cross-border transfers
Some of the software and cloud storage providers we use to deliver our services may store data on servers located outside South Africa. Where this occurs, we take reasonable steps to ensure the receiving party is subject to a level of data protection substantially similar to POPIA.
8. How long we keep information
We retain personal information for as long as necessary to fulfil the purposes described in this policy, and thereafter in accordance with statutory record-keeping requirements — including the five-year retention period generally required under the Tax Administration Act and Companies Act for financial and tax records. After this period, information is securely deleted or anonymised.
9. Security measures
We take reasonable technical and organisational measures to protect personal information against loss, unauthorised access, alteration, or disclosure — including access controls, secure software platforms, and limiting access to personal information to what is necessary to perform our services.
10. Your rights under POPIA
Subject to POPIA, you have the right to:
- Request confirmation of whether we hold personal information about you, and access to that information;
- Request correction or deletion of personal information that is inaccurate, irrelevant, excessive, out of date, or unlawfully obtained;
- Object to the processing of your personal information on reasonable grounds;
- Withdraw consent, where processing is based on consent, without affecting the lawfulness of processing before withdrawal;
- Lodge a complaint with the Information Regulator of South Africa if you believe your information has been processed unlawfully.
To exercise any of these rights, contact our Information Officer using the details in section 14.
Information Regulator (South Africa):
Email: complaints.IR@justice.gov.za
Website: inforegulator.org.za
11. Cookies & website analytics
Our website may use basic, privacy-respecting analytics to understand how visitors use the site, and functional cookies necessary for the site to operate correctly. We do not use these technologies to build advertising profiles or sell data to third parties.
12. Children’s information
Our services are directed at adults and businesses. We do not knowingly collect personal information relating to children, except where necessary in the context of a family's tax or financial affairs and with the consent of a parent or guardian.
13. Changes to this policy
We may update this policy from time to time to reflect changes in our practices or legal requirements. The “Last updated” date at the top of this page reflects the most recent revision.
14. Contact us
Questions about this policy or how your personal information is handled can be directed to our Information Officer: rventer@fintecgroup.co.za.