This notice is provided by Sure Care Consulting (Pty) Ltd (“SureCare”) as a responsible party under section 18 of the Protection of Personal Information Act 4 of 2013 (“POPIA”). Please read it with our Privacy Policy.
1. Responsible party
Sure Care Consulting (Pty) Ltd, registration number 2016/005870/07, 39 Polo Crescent, Leeuwenhof Estate, Silver Lakes, Pretoria, 0054. Email: danie@surecare.co.za. Phone: 060 758 0000.
2. Information Officer
Our Information Officer is Danie van den Berg, who can be contacted at danie@surecare.co.za or 060 758 0000. The Information Officer is responsible for our compliance with POPIA and for dealing with requests made under POPIA and the Promotion of Access to Information Act 2 of 2000 (“PAIA”).
3. Information we collect and its source
We collect the information you give us through our contact form, by email or by phone: your name, email address, optional phone number, province, the service you need and your message. If you become a client, we collect the information needed for your tax affairs, such as identity and tax reference numbers, income and financial information, and banking details. Most of this comes from you. Some comes from third parties on your behalf, such as SARS, your employer, financial institutions or your other advisers. Technical information, such as your IP address and browser details, is collected automatically when you use the website. Details are in our Privacy Policy.
4. Purpose of processing
- Responding to enquiries and providing quotes.
- Providing tax services, including preparing and submitting returns and dealing with SARS on your behalf.
- Keeping records of our work and correspondence.
- Keeping the website secure and protecting our forms from spam, fraud and automated abuse.
- Understanding how visitors use the website, only with consent.
- Complying with legal and professional obligations, including under the Tax Administration Act 28 of 2011.
- Direct marketing, only as section 69 of POPIA permits, with the right to opt out at any time.
5. Lawful basis
We process personal information with your consent, where necessary to take steps towards or perform a contract with you, to comply with a legal obligation, or to pursue our or a third party’s legitimate interests, as permitted by section 11 of POPIA. Special personal information, such as health information needed for medical deductions, is processed only as section 27 of POPIA allows. Information about children is processed only with the consent of a parent or guardian, as section 35 of POPIA allows.
6. Voluntary or mandatory
Providing your information through this website is voluntary. If you do not provide your name, a way to contact you and a description of what you need, we cannot respond to your enquiry. Choosing not to allow optional analytics has no effect on your use of the website. Tax legislation requires certain information to be included in returns submitted to SARS. If you become a client and do not provide it, we cannot complete your tax affairs, and you may face penalties from SARS.
7. Recipients and cross-border transfers
We share information with SARS and other authorities as your matter requires, with your other advisers on your instruction, with our recognised controlling body where required, and with our service providers: Cloudflare, Inc. (website hosting, security, form processing and, with consent, visitor statistics), Resend (email delivery), xneelo (email hosting) and the IT and software providers that help us run our practice. Cloudflare and Resend may process information outside South Africa, including in the United States and the European Union. We make these transfers as permitted by section 72 of POPIA, subject to each provider’s data processing terms, and with your consent when you submit our form.
8. Your rights as a data subject
- To be told that your personal information is being collected.
- To ask whether we hold your personal information, and to request access to it.
- To request correction or deletion of information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or unlawfully obtained.
- To object to processing on reasonable grounds, and to object to direct marketing.
- To withdraw consent at any time, without affecting earlier lawful processing.
- Not to be subject to a decision based solely on automated processing that has legal or similarly significant effects, as provided in section 71 of POPIA.
- To lodge a complaint with the Information Regulator.
9. How to exercise your rights
Send your request to our Information Officer at danie@surecare.co.za. The POPIA Regulations prescribe Form 1 for objections and Form 2 for correction or deletion, and we can send you these forms. Requests for access to records can also be made under PAIA. We may need to verify your identity before acting on a request, and will respond within a reasonable time and in line with POPIA and PAIA. To withdraw consent to analytics, use the Cookie settings link at the bottom of any page. Some records must be kept by law, for example under the Tax Administration Act, even if you ask us to delete them. If this applies, we will explain why.
10. Security safeguards
As required by section 19 of POPIA, we maintain appropriate, reasonable technical and organisational measures to secure the integrity and confidentiality of personal information, including encrypted (HTTPS) connections, restricted access to our systems and mailboxes, bot protection and limits on repeated form submissions.
11. Security compromises
If we have reasonable grounds to believe that personal information has been accessed or acquired by an unauthorised person, we will notify the Information Regulator and affected data subjects as required by section 22 of POPIA.
12. Information Regulator
If you are not satisfied with how we handle your personal information, please contact our Information Officer first so that we can try to resolve it. You may also complain to the Information Regulator (South Africa). Website: inforegulator.org.za. Complaints: POPIAComplaints@inforegulator.org.za.