Privacy Policy & POPIA Compliance

Bluline Chartered Business Accountants (Pty) Ltd ("Bluline," "we," "us," or "our") is committed to protecting your personal information and respecting your privacy rights. This Privacy Statement explains how we collect, use, store, and protect your personal data in accordance with the Protection of Personal Information Act, 2013 (POPIA) and other applicable South African laws.

This statement applies to all personal information we process, whether collected through our website, during client onboarding, via email or telephone, or through third-party service providers.

Who We Are

Information Officer

Charles Westermeyer
Email: charles@blulineaccounting.co.za
Telephone: 068 058 5910

Deputy Information Officer

Chanté Bouwer
Email: chante@blulineaccounting.co.za
Telephone: 060 966 2514

What Personal Information Do We Collect?

As an accounting and financial services firm, we collect and process various categories of personal information to deliver our services:

Client & Business Information

• Full names and identification numbers (ID numbers, passport numbers)
• Business registration details (company registration numbers, tax numbers)
• Contact information (postal addresses, street addresses, email addresses, telephone numbers)
• Financial information (bank account details, income information, tax returns)
• Business records (financial statements, invoices, contracts, correspondence)

Employee Information

• Names and identification numbers
• Contact details
• Employment history
• Salary and benefits information
• Tax and financial information

Website Information (Cookies & Analytics)

• IP addresses and device identifiers
• Website usage data (pages visited, time spent, clicks)
• Browser and operating system information
• Cookies (only with your consent)

Information from Third Parties

• Information provided by SARS, banks, or government institutions
• Information shared by other accountants, tax consultants, or advisors (with your consent)

Legal Basis for Processing Personal Data

We process your personal information on the following lawful grounds:

Contractual Necessity

To provide accounting, tax, and financial services you have requested, including preparing financial statements, tax returns, and compliance documentation.

Legal Obligation

To comply with South African tax laws (Income Tax Act, VAT Act), SARS reporting requirements, anti-money laundering (AML) and Know Your Customer (KYC) regulations, and to maintain financial records as required by law.

Legitimate Interests

To prevent fraud and financial crime, improve our services, communicate important information, and manage business operations.

Consent

To send marketing communications (only when you have explicitly opted in) and to process sensitive personal information where additional consent is required.

How We Use Your Personal Information

We use personal information for the following purposes:

• Service Delivery: Providing accounting, tax planning, compliance, and financial advisory services
• Tax Compliance: Preparing and submitting tax returns and financial statements to SARS and other authorities
• Financial Management: Managing invoicing, payments, and client billing
• Legal Compliance: Meeting regulatory and statutory obligations
• Communication: Responding to enquiries, providing account updates, sending important notices
• Record Keeping: Maintaining accurate client records as required by law
• Audit & Internal Review: Ensuring quality of service and compliance with professional standards
• Marketing (with consent only): Sending newsletters, service updates, or promotional materials
• Fraud Prevention: Detecting and preventing financial crimes and identity theft

Who Do We Share Your Information With?

We may share your personal information with the following parties (only where necessary and lawful):

Government & Regulatory Bodies

• South African Revenue Service (SARS)
• Department of Labour
• Information Regulator
• Other government agencies as required by law

Financial Institutions

• Banks and financial institutions (for payments, account reconciliation)
• Credit providers (where you have authorised credit checks)

Professional Service Providers

• External auditors (if your organisation is audited)
• Legal advisors or tax specialists
• Payroll service providers
• Insurance providers

Third-Party Service Providers

• Cloud storage and email providers
• Website hosting providers
• Accounting software providers

Important: These providers are contractually bound to protect your data and only process it on our instructions. We do not share your personal information publicly unless required by law or with your explicit written consent.

Data Storage & Security

Where Do We Store Your Data?

• Primary Location: South Africa (on-site servers and secure cloud storage)
• Backup Location: Secure cloud backup systems (compliant with POPIA requirements)

How Long Do We Keep Your Data?

After the retention period expires, we securely destroy or anonymise the data (unless legally required to retain it longer).

Security Measures

We implement comprehensive security measures to protect your personal information:

• Encryption: All sensitive data is encrypted in transit (SSL/TLS) and at rest
• Access Controls: Only authorised employees can access personal information (based on need-to-know)
• Physical Security: Offices are secured with controlled access
• Digital Security: Firewalls, anti-malware, and regular security audits
• Staff Training: All employees are trained on data protection and privacy
• Incident Response: We have procedures in place to report data breaches within 30 days of discovery

Your Rights Under POPIA

You have the following rights regarding your personal information:

Right to Access

You can request access to your personal information held by Bluline. Submit your request to charles@blulineaccounting.co.za. We will respond within 30 days (extendable to 60 days if complex).

Right to Correction/Rectification

You can request that we correct inaccurate or incomplete information. We will update records within 10 business days.

Right to Deletion ("Right to Be Forgotten")

You can request deletion of your personal information (subject to legal requirements). Note: We may be unable to delete records if required by law (e.g., tax records must be kept for 7 years).

Right to Object to Processing

You can object to certain types of processing (e.g., marketing communications, profiling). You can opt out of marketing at any time.

Right to Lodge a Complaint

If you believe your privacy rights have been violated, you can lodge a complaint with the Information Regulator.

PAIA & Information Requests

Under the Promotion of Access to Information Act, 2000 (PAIA), you have the right to request access to records held by Bluline. For detailed information about the PAIA process, fees, and procedures, please refer to our PAIA Manual.

How to Request Information Under PAIA

1. Obtain Form 2 from the Information Regulator (https://www.inforegulator.org.za/)
2. Complete the form with your name, contact details, and record description
3. Submit to charles@blulineaccounting.co.za
4. We will acknowledge your request within 7 working days
5. We will respond within 30 calendar days (may extend to 60 days if complex)

Records Available Without Formal PAIA Request

For general information about our services, contact us directly at 087 378 0897 or info@blulineaccounting.co.za — no formal request needed.

Cookies & Website Tracking

Our website uses cookies to enhance user experience. By using our website, you consent to our use of cookies.

Types of Cookies We Use

• Essential Cookies: Required for website functionality
• Analytics Cookies: Help us understand how visitors use our site (Google Analytics)
• Preference Cookies: Remember your preferences

Cookie Settings

You can manage cookie preferences in your browser settings. Disabling cookies may affect website functionality.

Contact Us

Acknowledgement & Consent

By engaging with Bluline Chartered Business Accountants, you acknowledge that:

• You have read and understood this Privacy Statement
• You consent to the processing of your personal information as described herein
• You understand your rights under POPIA and PAIA

Consent is not required to provide accounting services — we process your data because it is necessary to deliver your service. However, consent IS required for marketing communications or optional processing.