1. Who we are
This notice explains how Cashveld (Pty) Ltd ("Cashveld", "we", "us") handles personal information under the Protection of Personal Information Act, 2013 (POPIA). Cashveld is part of Mawlera Data Group (Pty) Ltd, Cape Town.
- Company registration number: [CIPC registration number]
- Contact: info@mawlera.co.za
2. Information Officer
Our Information Officer is responsible for making sure we comply with POPIA and for handling your requests.
- Information Officer: [Information Officer name]
- Email: [information officer email]
3. What we collect
Through this website
- What you type into our contact form: your name, business name, email address, phone number, turnover band, accounting software and message.
- This site sets no tracking or advertising cookies. Our web fonts are loaded from Google Fonts, which means Google receives your IP address when the page loads.
When you become a client
- Contact details for you and your staff.
- Your business's financial records: bank and card statements (including any personal accounts that business money went through), slips, invoices, supplier and customer details, and tax information.
- Payroll information: employee names, amounts paid and deductions.
4. Why we use it
- To reply to your enquiry and arrange your free cash-flow health check.
- To provide the services in our engagement letter: bookkeeping, management accounts, forecasts, debtor follow-up and VAT201 preparation.
- To meet our legal obligations, including keeping records.
- To send you news about our services, only if you have agreed to it. You can opt out at any time.
We process personal information only where POPIA allows it, such as with your consent, to perform a contract with you, to comply with the law or for our legitimate interests.
5. Who we share it with
We share personal information only when we need to:
- Accounting software providers. Your books are kept in Xero or Sage, under your own subscription.
- Mawlera Data Group, our parent company, which builds our dashboards.
- A partner tax practitioner, if you ask us to arrange submission of a return we have prepared.
- Authorities such as SARS, when the law requires it.
We never sell your personal information.
6. Information sent outside South Africa
Some of the software we use stores data outside South Africa. Xero hosts data on servers in the United States, and personal data may also be processed in Australia and New Zealand. Sage Accounting is hosted in the United States. We tell you about this in our data processing agreement before we access any of your data.
7. How long we keep it
We keep personal information only as long as we need it for the purpose we collected it for, or as long as the law requires us to keep financial records. Website enquiries that don't lead to an engagement are deleted after [retention period].
8. How we protect it
We use reasonable technical and organisational measures to protect personal information, including access limited to the people who need it, adviser-level access to your accounting software, and signed data processing agreements. If we believe your personal information has been accessed without authority, we will notify you and the Information Regulator as POPIA requires.
9. Your rights
Under POPIA you may:
- ask whether we hold personal information about you, and ask for a copy;
- ask us to correct or delete information that is inaccurate, out of date or unlawfully held;
- object to processing, including for direct marketing;
- withdraw your consent where we rely on it;
- complain to the Information Regulator at inforegulator.org.za.
To use any of these rights, contact our Information Officer.
10. Changes to this notice
We may update this notice. The date at the top shows when it last changed.