Vencorp Accounting (Pty) Ltd - POPIA Compliance and Privacy Policy

This document sets out the policy of Vencorp Accounting (Pty) Ltd ("Vencorp," "we," "us," or "our") regarding the processing of personal information in compliance with the Protection of Personal Information Act 4 of 2013 ("POPIA"). This policy applies to all personal information collected and processed through our website, as well as in the course of our business operations.

1. Introduction and Purpose

1.1. Our Commitment: Vencorp is committed to protecting the privacy and personal information of our clients, website visitors, employees, and all other data subjects. We acknowledge that the right to privacy is a fundamental human right enshrined in the Constitution of the Republic of South Africa.

1.2. Purpose of this Policy: This policy outlines our commitment to the lawful and responsible processing of personal information in line with the eight conditions of lawful processing set out in POPIA. The purpose is to inform data subjects about how we collect, use, store, and protect their personal information.

1.3. Information Officer: We have appointed an Information Officer who is responsible for ensuring compliance with this policy and POPIA.

Name: Cir Pieterse

Email: [email protected]

Contact Number: +27 87 150 5417

2. Definitions

2.1. Data Subject: The person to whom personal information relates. This includes clients, employees, contractors, and website visitors.

2.2. Personal Information: Information relating to an identifiable, living, natural person, and where it is applicable, an identifiable, existing juristic person (e.g., a company). This includes, but is not limited to:

Names and surnames

Contact details (email, phone number, physical address)

Identity number or passport number

Financial information

Employment and educational history

Any other information that can be used to identify a person.

2.3. Processing: Any operation or activity concerning personal information, including the collection, receipt, recording, storage, updating, modification, retrieval, alteration, use, distribution, or destruction of such information.

2.4. Responsible Party: Vencorp Accounting (Pty) Ltd, which determines the purpose of and means for processing personal information.

3. The Eight Conditions of Lawful Processing

We commit to adhering to the following conditions when processing personal information:

3.1. Condition 1: Accountability: We will ensure that the provisions of POPIA are complied with at all times. We have taken reasonable steps to ensure that all our employees and agents are aware of and comply with this policy.

3.2. Condition 2: Processing Limitation: We will only collect and process personal information that is necessary for a specific, explicitly defined, and lawful purpose. We will not process personal information without the data subject's consent, unless processing is necessary for a contract, a legal obligation, to protect a legitimate interest, or for a public law duty.

3.3. Condition 3: Purpose Specification: We will only collect personal information for the following specific and lawful purposes:

To provide accounting, tax, and advisory services to our clients.

To manage our business operations, including invoicing, administration, and client relationship management.

To communicate with you and respond to your inquiries.

To send you marketing communications about our services, provided you have consented to receive them.

To comply with our legal and regulatory obligations, such as those imposed by SARS, the Companies Act, and the Financial Intelligence Centre Act (FICA).

3.4. Condition 4: Further Processing Limitation: We will not process personal information for any purpose other than that for which it was originally collected, unless the further processing is compatible with the original purpose or where specific exceptions apply under POPIA.

3.5. Condition 5: Information Quality: We will take reasonable steps to ensure that the personal information we collect is complete, accurate, not misleading, and updated where necessary. We rely on data subjects to provide us with accurate information and to inform us of any changes.

3.6. Condition 6: Openness: We will be transparent about our personal information processing practices. This policy and our Promotion of Access to Information Act (PAIA) manual, which details the types of records we hold, are publicly available on our website.

3.7. Condition 7: Security Safeguards: We have implemented reasonable physical, technical, and organisational measures to protect personal information against loss, damage, unauthorised destruction, and unlawful access or processing. This includes:

Technical Measures: Access control, data encryption, firewalls, and secure networks.

Organisational Measures: Employee training, confidentiality agreements, and documented security procedures.

Security Breach Notification: In the event of a security compromise, we will notify the Information Regulator and affected data subjects as soon as reasonably possible, in accordance with Section 22 of POPIA.

3.8. Condition 8: Data Subject Participation: We respect the rights of data subjects. You have the right to:

Access Your Information: Request a copy of the personal information we hold about you.

Correction or Deletion: Request the correction, destruction, or deletion of your personal information that is inaccurate, irrelevant, excessive, or has been unlawfully obtained.

Objection: Object, on reasonable grounds, to the processing of your personal information.

Complaints: Lodge a complaint with the Information Regulator if you believe we have interfered with the protection of your personal information.

4. Direct Marketing

4.1. Consent: We will only use your personal information for direct marketing purposes via electronic communications (e.g., email or SMS) if you have provided your prior consent.

4.2. Opt-Out: You have the right to object to receiving direct marketing communications from us at any time. All our marketing communications will contain an "unsubscribe" or "opt-out" link.

5. Data Retention and Disposal

5.1. Retention: We will not retain personal information for longer than is necessary for the fulfillment of the purpose for which it was collected, unless we are required to retain it by law (e.g., the Companies Act or tax legislation) or for a lawful purpose related to our functions or activities.

5.2. Disposal: When personal information is no longer required, we will securely destroy or delete it in a manner that prevents its reconstruction.

6. Third-Party Operators

6.1. Agreements: Where we use third-party operators (e.g., cloud service providers, IT support) to process personal information on our behalf, we will ensure that a written agreement is in place.

6.2. POPIA Obligations: This agreement will impose security and confidentiality obligations on the operator to ensure they comply with the requirements of POPIA. We will remain accountable for the protection of personal information.

7. Transfer of Information Outside South Africa

We will not transfer personal information to a third country unless that country has laws that provide an adequate level of protection, or where other legal exceptions under POPIA apply, such as obtaining the data subject's explicit consent.

8. Your Rights and How to Contact Us

To exercise any of your rights as a data subject, or if you have any questions about this policy or our data processing practices, please contact our Information Officer at the details provided in Section 1.3 above.