Privacy Policy

1. Who We Are

Responsible Party: Makayta Consulting Services (Pty) Ltd
Information Officer: Heather Mhike
Address: 1st Floor, 22 Magwa Crescent, Gateway West, Waterfall City, Midrand
Email: info@makaytaconsulting.com
Tel: +27 10 500 0398

2. What Personal Information We Collect

We collect personal information that you voluntarily provide to us and information necessary to provide our professional services. This includes:

Contact and Identity Information

• Full name, ID number or passport number
• Email address, phone number, physical and postal address
• Business name, registration number and VAT number

Financial and Tax Information

• Tax reference numbers, tax returns and SARS correspondence
• Financial statements, bank account details and payroll records
• Income, expenses, assets and liabilities
• PAYE, UIF, SDL and VAT records

Website Information

• Information submitted through our contact, booking and notification forms
• Technical data such as browser type and pages visited (if analytics are enabled)

3. Why We Collect Your Information

We collect and process your personal information for the following purposes:

• To provide accounting, tax and advisory services — the primary purpose for which you engage us
• To comply with legal obligations — including SARS submissions, CIPC filings, UIF, PAYE and VAT returns required by South African law
• To communicate with you — responding to enquiries, sending appointment confirmations and service updates
• To manage our business relationship — invoicing, contract management and record keeping
• To improve our services — understanding what our clients need

4. Our Legal Basis for Processing

We process your personal information on the following lawful grounds under POPIA:

• Contract: Processing is necessary to fulfil our service agreement with you
• Legal obligation: We are required by South African law (Income Tax Act, VAT Act, Companies Act, etc.) to collect and submit certain information
• Consent: Where you have explicitly agreed to us processing your information (e.g. newsletter sign-up, portal notifications)
• Legitimate interest: For internal record keeping and improving our services

5. How Long We Keep Your Information

• Tax and financial records: Minimum 5 years as required by SARS, or longer if required by law
• Company records: 7 years as required under the Companies Act
• Contact and enquiry records: 3 years after last contact
• Website form submissions: 12 months

After these periods, we securely delete or anonymise your information.

6. Who We Share Your Information With

We do not sell your personal information. We only share it where necessary:

• South African Revenue Service (SARS) — as legally required for tax submissions
• Companies and Intellectual Property Commission (CIPC) — for company registrations and filings
• Department of Employment and Labour — for UIF and SDL submissions
• Your bank or financial institution — only with your explicit consent
• Payroll and accounting software providers — such as Xero or QuickBooks, bound by their own privacy policies
• Our professional advisors — auditors or legal counsel, under confidentiality obligations

All third parties we work with are required to handle your information confidentially and in accordance with applicable law.

7. How We Protect Your Information

We take the security of your personal information seriously. Our safeguards include:

• SSL encryption on our website (HTTPS)
• Password-protected systems and secure file storage
• Access restricted to authorised staff only
• Secure disposal of physical documents
• Regular review of our security practices

In the event of a data breach that poses a risk to you, we will notify you and the Information Regulator as required by POPIA.

8. Cookies

Our website uses cookies — small text files stored on your device when you visit. We use:

• Essential cookies: Necessary for the website to function (e.g. remembering your cookie preference). These cannot be switched off.
• Analytics cookies: If enabled, these help us understand how visitors use the site. No personally identifiable information is collected through analytics.

You can control or delete cookies through your browser settings. Disabling essential cookies may affect how the website functions. By continuing to use our site after accepting, you consent to our use of cookies as described here.

9. Your Rights Under POPIA

As a data subject, you have the following rights:

• Right of access: Request a copy of the personal information we hold about you
• Right of correction: Ask us to correct inaccurate or incomplete information
• Right to deletion: Request that we delete your information (subject to our legal retention obligations)
• Right to object: Object to our processing of your information for specific purposes
• Right to complain: Lodge a complaint with the Information Regulator if you believe we have violated your rights

To exercise any of these rights, please contact our Information Officer at info@makaytaconsulting.com. We will respond within 30 days.

10. Children's Privacy

Our services are intended for adults and registered businesses. We do not knowingly collect personal information from children under the age of 18. If you believe we have inadvertently collected such information, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated policy on this page with a revised date. Continued use of our services after changes are posted constitutes your acceptance of the updated policy.