Privacy Policy

1. Who We Are

Fintec Group (Pty) Ltd (“Fintec Group”, “we”, “us”) is a registered accounting and tax practice operating from 250 Blaauwberg Road, Table View, Cape Town, 7441. We are the Responsible Party for the personal information we process.

Our Information Officer is Reghardt Venter, reachable at rventer@fintecgroup.co.za or +27 64 584 3869.

2. What Personal Information We Collect

We collect personal information necessary to deliver our accounting, tax, and payroll services. This may include:

2.1 Identity and contact information

• Full name, identity number or passport number
• Date of birth and marital status
• Residential and postal address
• Email address and telephone number

2.2 Financial and tax information

• Income, expense, and asset information
• SARS tax reference number and tax history
• Bank account details where required for submissions
• Payroll records including salary, deductions and benefits

2.3 Business information

• Company registration details and CIPC records
• Director and shareholder information
• VAT registration numbers

2.4 Website and communication data

• Enquiry form submissions and email correspondence
• Basic usage data collected via cookies (see Section 9)

3. Why We Collect Your Information (Purpose)

We collect and process personal information for the following purposes:

• Providing accounting, bookkeeping, and financial reporting services
• Preparing and submitting tax returns and statutory filings to SARS
• Processing payroll and related PAYE, UIF and SDL submissions
• Conducting tax residency assessments and expat compliance services
• Complying with legal obligations under the Tax Administration Act, Income Tax Act, VAT Act, and other applicable legislation
• Communicating with you about your account and our services
• Responding to enquiries submitted through our website

4. Legal Basis for Processing

We process your personal information on one or more of the following lawful grounds:

• Contractual necessity — processing is required to perform our engagement with you
• Legal obligation — processing is required to comply with tax and financial legislation
• Legitimate interest — for business administration and service delivery
• Consent — where you have specifically agreed to a particular use

5. How We Share Your Information

We do not sell, rent, or trade your personal information. We may share information in the following limited circumstances:

• SARS and government bodies — as required by law for tax and statutory submissions
• CIPC — for statutory company filings
• Service providers — such as accounting software providers (e.g. Xero, Sage) and secure cloud storage, subject to data processing agreements
• Payment processors — Paystack, for processing assessment fees. Paystack’s own privacy policy applies to payment data
• Professional advisors — attorneys or other professionals when required in the course of our mandate

All third parties are required to handle your information with appropriate confidentiality and in compliance with POPIA.

6. International Transfers

Where your information is processed outside South Africa (for example, through cloud-based software), we take reasonable steps to ensure the receiving country or organisation provides an adequate level of protection equivalent to POPIA.

7. How Long We Keep Your Information

After the applicable retention period, we securely delete or anonymise your information.

8. Your Rights Under POPIA

You have the following rights regarding your personal information:

• Access — request a copy of the personal information we hold about you
• Correction — request that inaccurate or incomplete information be corrected
• Deletion — request deletion of information we no longer have a legal basis to hold
• Objection — object to processing based on legitimate interest
• Withdrawal of consent — where processing is based on consent, you may withdraw it at any time
• Complaint — lodge a complaint with the Information Regulator of South Africa

To exercise any of these rights, contact us at the details in Section 12. We will respond within a reasonable time and no later than 30 days.

9. Cookies

Our websites use basic cookies to ensure functionality. We do not use advertising or tracking cookies. By using our website, you consent to the use of essential cookies. You may disable cookies in your browser settings, though this may affect certain website functions.

10. Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, or disclosure. These include password-protected systems, encrypted file storage, and restricted access controls. However, no electronic transmission over the internet is completely secure, and we cannot guarantee absolute security.

11. Updates to This Policy

We may update this Privacy Policy from time to time. The most current version will always be available on our website. Material changes will be communicated to existing clients by email.

12. Contact Us

You may also contact the Information Regulator of South Africa at www.justice.gov.za/inforeg if you believe your rights have been infringed.