Privacy Policy

1. Introduction

Fahmay Advisory Group (“we”, “us”, “our”) respects your privacy and is committed to protecting personal information entrusted to us. This Privacy Policy explains how we collect, use, store, disclose and protect personal information when you visit our website, contact us, request a consultation, enquire about our services, become a client, or otherwise interact with us.

This Policy should be read together with our POPIA Privacy Notice, Terms & Conditions and, where applicable, our PAIA Manual.

2. Who We Are

For applicable data-protection purposes, we act as the responsible party in relation to personal information that we collect and process for our own business and service-delivery purposes. Where we process information on behalf of another party, our role will depend on the circumstances and applicable agreement.

3. Personal Information We May Collect

• Identification information: full name, identity/passport number, date of birth, nationality, signature and identification documents.
• Contact information: telephone/mobile number, email address, residential/business/postal address and WhatsApp contact information.
• Business information: business name, registration information, CIPC information, business address, directors/members information, employee information where necessary, and financial/accounting information.
• Financial and tax information: income, salary, tax information, SARS-related information, tax reference numbers, VAT/PAYE/UIF information, financial statements, accounting records, bank-related information, investment-related information and supporting documents.
• Website enquiry information: name, email, telephone number, business name, requested service, package of interest and enquiry details.
• Technical information: IP address, browser/device information, operating system, pages visited, approximate location, visit times, referring website and website interaction information, where collected by implemented technologies.

4. Special Personal Information

Depending on the services provided, we may encounter information that receives additional protection under POPIA. Such information will only be processed where a lawful basis exists and where processing is permitted by POPIA or another applicable law. Users should not submit unnecessary sensitive information through a general website contact form.

5. How We Collect Personal Information

• Directly from you through the website, email, telephone, WhatsApp, consultations and documents you provide.
• From authorised representatives, where appropriate.
• From your business or employer where appropriate and lawful.
• From public or official records.
• From regulatory or government authorities where legally permitted.
• From service providers assisting us with legitimate business functions.

6. Why We Use Personal Information

• To provide accounting, bookkeeping, tax, VAT, payroll, financial reporting, business advisory, company registration, audit-support, compilation and related services.
• To respond to enquiries, arrange consultations, provide quotations and communicate with clients.
• To comply with tax, company, accounting, professional, regulatory, legal and other applicable obligations.
• To maintain records, administer accounts, issue invoices, process payments and manage client relationships.
• To protect systems, prevent fraud, investigate security incidents and improve services.
• For other lawful purposes communicated to the data subject.

7. Lawful Basis for Processing

We will process personal information only where a lawful basis exists. Depending on the circumstances, this may include consent, performance of a contract, steps taken at your request before entering a contract, compliance with a legal obligation, protection of a legitimate interest, pursuit of a legitimate interest where permitted by law, or another lawful basis recognised by POPIA.

8. Consent

Where we rely on consent, consent will be obtained in a manner permitted by applicable law. You may withdraw consent where consent is the lawful basis for processing. Withdrawal does not affect processing lawfully undertaken before withdrawal and does not prevent continued processing where another lawful basis exists.

9. Sharing Personal Information

We may disclose personal information where reasonably necessary and lawful to employees and authorised representatives, professional advisers, auditors, legal advisers, SARS, CIPC, regulators, technology providers, hosting/cloud providers, email providers, payment processors, payroll providers, law-enforcement authorities, courts and other legally authorised bodies. We will not sell your personal information.

10. Third-Party Service Providers

The website and business may use third-party providers for hosting, email, analytics, maps, form processing, cloud storage, payment processing, security, communications and other business functions. The exact providers used should be confirmed and accurately reflected before publication.

11. International Transfers

Certain service providers may process or store information outside South Africa. Where personal information is transferred outside South Africa, we will take reasonable steps to ensure that the transfer complies with applicable POPIA requirements.

12. Retention

We will not retain personal information for longer than necessary for the purpose for which it was collected unless longer retention is required or permitted by law, professional or regulatory obligations, legal proceedings, contractual requirements or another lawful reason. Once information is no longer required, reasonable steps will be taken to securely delete, destroy or de-identify it.

13. Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, theft, destruction, alteration, disclosure, misuse and other unlawful processing. Measures may include access controls, authentication, secure storage, restricted access, backups, security updates, monitoring and confidentiality obligations.

No electronic system or transmission method can be guaranteed to be completely secure.

14. Security Breaches

If we become aware of a security compromise involving personal information, we will take reasonable steps to investigate, contain and remediate the incident and will notify the Information Regulator and affected data subjects where required by law.

15. Cookies and Website Technologies

The website may use cookies or similar technologies for functionality, security, preferences, analytics, performance and user-experience purposes. The final website implementation should be reviewed to ensure this section accurately reflects the technologies actually used. Where consent is legally required for non-essential technologies, appropriate consent mechanisms will be implemented.

16. Direct Marketing

We may send marketing communications where permitted by law. Where applicable, communications will provide an appropriate opt-out mechanism. Opting out of marketing does not affect necessary service-related communications.

17. Children

The website and services are primarily intended for adults and businesses. We do not knowingly collect personal information from children through the general website unless permitted by law and where the required lawful basis exists.

18. Your Rights

• Request access to personal information held about you, subject to legal limitations.
• Request correction or updating of inaccurate or incomplete information.
• Request deletion where legally permissible.
• Object to certain processing activities.
• Withdraw consent where consent is the applicable lawful basis.
• Object to direct marketing.
• Lodge a complaint concerning processing of your personal information.
• Exercise other rights available under POPIA and applicable law.

19. Access to Information

Requests for access to records held by us may also be made in accordance with the Promotion of Access to Information Act 2 of 2000 (PAIA). We will maintain and make available a PAIA Manual where required and will process requests in accordance with applicable law.

20. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will be published on the website with its effective or updated date.

21. Contact Us