Effective date: 1 March 2026 · Last updated: 28 May 2026
TCS Accounting ("we", "us", "our") is committed to protecting your personal information in accordance with the Protection of Personal Information Act, 4 of 2013 ("POPIA"). This Privacy Policy explains what we collect, why we collect it, how we keep it safe, and what your rights are.
1. Who we are
TCS Accounting is a tax practitioner and accounting practice operating from 47 Redwood Place, Moreleta Park, Pretoria, 0044. We are the responsible party for the personal information described in this policy.
Our Information Officer (as defined in POPIA s.55) can be reached at info@tcsaccounting.co.za or 012 997 0577.
2. Information we collect
- Name, email address, phone number, postal and physical address
- South African ID number and SARS tax reference number
- Banking details where you provide them for tax-refund purposes
- Documents you upload to your client portal (tax certificates, financial statements, ID copies, proof of residence)
- Communications with our firm (messages, scheduled appointments)
- Usage data — login timestamps, device fingerprint, IP address — kept for security
3. Why we process your information
- To provide the accounting, tax and advisory services you engaged us for
- To meet our statutory obligations under the Tax Administration Act, the FIC Act, and the Companies Act
- To communicate with you about your matters
- To maintain audit logs of activity for compliance (POPIA s.17)
4. Who we share it with
Your information is shared only with:
- SARS, CIPC and other regulators when we file returns on your behalf
- Our hosting provider (Supabase, eu-west-1) under a Data Processing Agreement
- Our email service provider (Resend) for transactional communications
- Where compelled by law
We do not sell your data, share it for marketing, or use it for any purpose other than those listed above.
5. Where your data is stored
Database and documents are hosted by Supabase, Inc. in their eu-west-1 region (Ireland). TCS Accounting has signed a Data Processing Agreement with Supabase covering POPIA s.72 cross-border transfer requirements (Standard Contractual Clauses).
6. How long we keep it
We retain client records for a minimum of five years from the end of the tax year to which they relate, as required by section 29 of the Tax Administration Act. After that period we securely delete or anonymise data we no longer need.
7. Your rights under POPIA
You may, at any time:
- Request access to the personal information we hold about you
- Request correction of inaccurate or incomplete information
- Object to the processing of your information
- Request deletion of your information (subject to our statutory retention obligations)
- Withdraw consent for any non-mandatory processing
- Lodge a complaint with the Information Regulator at inforegulator.org.za
To exercise any of these rights, email info@tcsaccounting.co.za with the subject line "POPIA request".
8. Security
All data is encrypted in transit (TLS 1.2+) and at rest. Access is controlled by role-based permissions and multi-factor authentication. Passwords are hashed with bcrypt. We maintain audit logs of all access to client data.
9. Cookies
Our website uses only strictly necessary cookies (session management and CSRF protection). We do not use third-party tracking or advertising cookies.
10. Changes to this policy
We may update this policy from time to time. Material changes will be communicated to active clients by email. The "Last updated" date at the top of this page reflects the latest revision.
11. Contact us
Questions about this policy or how we handle your information? Email info@tcsaccounting.co.za or call 012 997 0577.