POPIA Privacy Notice

This POPIA Privacy Notice supplements our Privacy Policy and explains how KHUKHOS, as the responsible party, processes personal information in compliance with the Protection of Personal Information Act, 2013 (POPIA). It describes the categories of personal information we process, the purposes, and the rights available to you as a data subject.

KHUKHO'S Financial Services is the responsible party for the personal information processed through our platform. Our Information Officer is responsible for ensuring compliance with POPIA and can be contacted at admin@khukhos.co.za for any requests relating to your personal information.

We process the following categories of personal information: contact details (name, email, mobile), company and business profile information, tax and company registration references, employee and payroll information, financial documents, and usage data collected when you access the platform.

Personal information is processed to deliver financial management services, manage bookkeeping and payroll, prepare and submit tax and statutory returns, operate the secure client workspace, communicate with you, and meet our legal and regulatory obligations.

We rely on the following lawful grounds: your consent; the necessity of processing to perform a contract; compliance with a legal obligation imposed on us; and our legitimate interests in operating a secure, compliant and efficient practice, balanced against your rights.

We may share personal information with SARS and other regulators where legally required, with operators and service providers acting on our behalf under written agreements (such as cloud storage and software providers), and with professional advisors. Operators process information only on our instructions and must uphold equivalent security standards.

Some service providers we use may store or process data outside South Africa. Where this occurs, we ensure the transfer is subject to adequate safeguards and that the recipient upholds a level of protection consistent with POPIA.

We maintain reasonable technical and organisational measures to secure personal information, including access control, encryption of documents in transit and at rest, secure authentication, and staff awareness of POPIA obligations. We review these safeguards regularly.

We retain personal information only for as long as required to fulfil the purposes for which it was collected and to meet legal retention requirements under South African tax, company and labour law. Records are then securely destroyed or de-identified.

You have the right to be notified of processing, to access and request correction or deletion of your personal information, to object to processing for direct marketing, and to withdraw consent previously given. You may also lodge a complaint with the Information Regulator if you believe your rights have been infringed.

If you are not satisfied with our handling of your personal information, you may lodge a complaint with the Information Regulator (South Africa) at inforeg@inforegulator.org.za or via www.inforegulator.org.za. We encourage you to contact us first so we can attempt to resolve your concern.

Information Officer KHUKHO'S Financial Services Alberton, Johannesburg, South Africa Email: admin@khukhos.co.za Phone: 074 192 2650