Privacy Policy
How we handle your information.
This policy explains how KiloByte Accounting collects, uses, stores and shares personal information, in line with the Protection of Personal Information Act, 2013 (POPIA).
Last updated: 14 May 2026
1. Who we are
KiloByte Accounting ("KiloByte", "we", "us") is a South African accounting and tax practice. We are the responsible party in terms of POPIA for the personal information described in this policy.
Contact: info@kbacc.co.za · +27 82 463 8126.
2. Information we collect
Depending on how you engage with us, we may collect:
- Identification details (full name, ID number, passport number where applicable).
- Contact details (email address, phone number, physical and postal addresses).
- Business and tax information (company registration numbers, SARS reference numbers, VAT numbers, banking details, financial records).
- Employee information you provide for payroll administration.
- Correspondence with us (emails, WhatsApp messages, contact-form submissions).
- Limited technical data when you visit the website (e.g. IP address, browser type, referring page) - used only to operate and secure the site.
3. How we use it
We use personal information to:
- Provide accounting, payroll and taxation services to you.
- Submit returns and statutory filings to SARS, CIPC, the Department of Labour and the Compensation Fund on your behalf.
- Communicate with you about your engagement, deadlines and queries.
- Issue invoices and collect payment.
- Comply with our legal, regulatory and professional-body obligations (e.g. SAIT, CIBA, FICA where applicable).
- Respond to enquiries received through the website or other channels.
4. Legal basis
We process personal information on one or more of the following bases under POPIA:
- Performance of a contract with you (the engagement letter).
- Compliance with a legal obligation imposed on us.
- Our legitimate interests, balanced against your rights.
- Your consent, where it has been given (and which may be withdrawn at any time).
6. Storage & security
Records are kept on reputable cloud platforms with industry-standard security controls including encryption in transit, encryption at rest, access controls and audit logging. Access to client data is limited to the practitioner and any authorised support personnel who need it to deliver the service.
We require our service providers to maintain appropriate technical and organisational safeguards consistent with POPIA.
7. Retention
We retain personal information only for as long as is necessary for the purposes set out above, or as required by law. In South Africa, accounting and tax records are generally retained for at least five years from the date of the last filed return (and longer where audits, disputes or litigation are reasonably possible).
8. Your rights under POPIA
You have the right to:
- Confirm whether we hold personal information about you, and request access to it.
- Request correction, deletion or destruction of inaccurate, irrelevant, excessive or out-of-date information.
- Object to the processing of your personal information on reasonable grounds.
- Withdraw consent previously given, subject to legal or contractual restrictions.
- Complain to the Information Regulator if you believe we have not complied with POPIA. inforegulator.org.za.
To exercise any of these rights, email info@kbacc.co.za.
10. Changes to this policy
We may update this policy from time to time. The current version is always available at kbacc.co.za/privacy. Material changes will be reflected in the "Last updated" date above.
11. Contact us
For any privacy-related question - access requests, corrections, complaints, or general queries - please reach out: