1. Introduction
This Privacy Policy explains how Ronmat Advisory (“the Company”, “we”, “us”) collects, uses, stores, and protects personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA), the Promotion of Access to Information Act 2 of 2000 (PAIA), the Electronic Communications and Transactions Act 25 of 2002 (ECTA), the Consumer Protection Act 68 of 2008 (CPA), and all other applicable South African laws.
By engaging our services or interacting with our website, you agree to the processing of your personal information as described in this Privacy Policy.
“Personal Information” has the meaning given in POPIA and includes any information that can identify a natural or juristic person.
The consent you provide is voluntary and may be withdrawn at any time by notifying us in writing.
2. Categories of Personal Information We Collect
We collect personal information directly from you, from authorised third parties, or from publicly available sources where lawful. This includes:
2.1 Identity and Contact Information
- Names
- Identity numbers or passport numbers
- Residential or business addresses
- Email addresses and contact numbers
2.2 Financial and Tax Information
Collected to deliver professional services and comply with statutory obligations:
- Tax numbers
- Financial statements
- Bank details
- Income, assets, deductions and disclosures required under the Tax Administration Act 28 of 2011
2.3 Due Diligence and Compliance Information
Required under the Financial Intelligence Centre Act 38 of 2001 (FICA):
- Proof of address
- Source of funds
- Client risk assessments
- Beneficial ownership information
2.4 Corporate Information
- Company registration details
- Director and shareholder information
- CIPC records and resolutions
2.5 Website and Technical Information
Collected under ECTA:
- IP address
- Cookie information
- Browser and device information
3. Purpose of Processing Personal Information
We only process personal information for lawful purposes, including:
- Providing professional services such as tax, accounting, advisory, payroll and compliance services
- Performing contractual obligations
- Conducting due diligence, including conflict checks and risk assessments
- Complying with legal obligations under FICA, TAA, Companies Act, CPA and others
- Billing, invoicing, and account administration
- Communication and reporting
- Maintaining secure client records and audit trails
- Marketing services similar to those previously provided, with the option to unsubscribe
Processing is based on one or more of the lawful grounds under POPIA, including consent, legal obligation, legitimate interest, or contractual necessity.
4. Sharing of Personal Information
We only share personal information when lawful and necessary. This may include:
- South African Revenue Service (SARS)
- Companies and Intellectual Property Commission (CIPC)
- Financial Intelligence Centre (FIC)
- Our auditors, bankers, attorneys or insurers
- Cloud-hosting providers and technology vendors who meet POPIA’s security requirements
- Subcontractors who assist with service delivery under confidentiality obligations
We do not sell personal information.
5. Cross-Border Transfers
If we transfer personal information outside South Africa:
- We comply with section 72 of POPIA
- We ensure the receiving country has adequate protections, or
- We use contractual safeguards (e.g., EU Standard Contractual Clauses), or
- We obtain your express consent
Transfers typically relate to secure cloud storage and encrypted backup services.
6. Security Safeguards
In line with section 19 of POPIA, we implement appropriate organisational and technical measures, including:
- Encrypted cloud storage
- Access controls and Multi-Factor Authentication
- Anti-malware and data-loss prevention systems
- Confidentiality agreements with all staff and subcontractors
- Role-based access to sensitive information
7. Your POPIA Rights
You have the right to:
- Request access to your personal information (PAIA-compliant)
- Ask for correction or deletion where appropriate
- Object to processing based on legitimate interests
- Withdraw consent
- Opt out of direct marketing
- Lodge a complaint with the Information Regulator
Email: complaints.IR@justice.gov.za
Forms for access, correction, or objection can be made available on request.
8. Data Retention
We retain personal information only as required by:
- FICA: 5 years
- TAA: 5 years
- Companies Act: prescribed periods
- Professional standards applicable to tax practitioners and accountants
- Dispute resolution or contractual requirements
After retention periods expire, records are securely deleted or destroyed.
9. Contact Information
For privacy-related enquiries or exercising your POPIA rights, contact:
Telephone: 060 698 3819