Privacy Policy
This Privacy Policy explains how we collect, use, disclose and safeguard personal information in line with the Protection of Personal Information Act, 2013 ("POPIA").
Last updated: 2025-11-09
1) Who we are
Ledger & Co (Pty) Ltd ("we", "us") provides accounting, tax and payroll services to clients across South Africa. For POPIA, we act as the Responsible Party for personal information we collect, and may appoint vetted Operators to process information on our behalf.
2) Information we collect
- Contact details (name, email, phone), company/trading information.
- Accounting/tax records you provide (e.g., bank statements, invoices, payroll data, AFS).
- Usage data from our website (device, pages, referrers) and cookies/analytics if enabled.
- Communications and support inquiries.
3) How we use your information (lawful bases)
- To provide proposals, onboarding and monthly services (performance of a contract).
- To comply with legal/regulated obligations (e.g., SARS, CIPC, payroll) (legal obligation).
- To improve our services, security and site experience (legitimate interests).
- With your consent, to send service or marketing communications (consent, revocable at any time).
5) International transfers
Some Operators may process or store data outside South Africa. We take reasonable steps to ensure appropriate protections are in place (e.g., contractual safeguards) consistent with POPIA.
6) Retention
We retain information for as long as necessary to provide services and meet legal obligations. Client accounting/tax records are typically kept for at least five (5) years to comply with statutory requirements, unless a longer period is required or allowed by law.
7) Your rights under POPIA
- Access and request a copy of your personal information.
- Request correction, deletion, or object to processing where applicable.
- Withdraw consent at any time where processing relies on consent.
- Lodge a complaint with the Information Regulator (South Africa).
We will respond to verified requests in a reasonable time as required by law.
9) Security
We implement reasonable technical and organisational measures, including encryption in transit, access controls and least-privilege practices. No method of transmission or storage is completely secure.
10) Children
Our services are directed to businesses and are not intended for children under 18.
11) Changes to this policy
We may update this policy from time to time. The "Last updated" date will reflect the latest version.
12) Contact us
If you have questions or requests about this policy, contact:
- Email: hello@ledgerco.co.za
- Hours: Mon–Fri, 08:30–17:00 (SAST)