Privacy policy

We sell POPIA compliance, so our own privacy policy had better be exemplary. Here it is, in plain English.

The short version

Who we are

ProperSA (propersa.co.za) provides free financial calculators and fixed price compliance packs and business services for South African small businesses. For this website, ProperSA is the responsible party for the personal information it decides why and how to process. Our information officer can be reached at [email protected].

What we collect, and when

Using the free tools: nothing. Every calculator runs in your browser using JavaScript served from this site. The figures you enter are never transmitted, logged or stored by us.

Visiting the site: our web host keeps standard server logs (such as IP address, pages requested and time) for security and service operation, retained briefly. We do not currently run a separate visitor analytics script on the public pages.

Using the client portal: if you create an account, we store your email address, a securely hashed password, your order details and questionnaire answers, and the documents we prepare for you. This runs on Supabase (our database and login provider, acting as an operator under POPIA) with row-level security so each client can only ever access their own records. Delete your account by emailing [email protected] and we remove it with everything in it.

Ordering a pack or service: we receive your email address, name and the answers you give in the order form or questionnaire. Some services need more: certified ID copies for CIPC filings, payroll figures for registrations, or work-authorisation documents for a foreign-worker onboarding request. We collect only what the specific service requires. Do not send us someone else’s identity or immigration documents unless you have their authority to do so.

WhatsApp: if you choose to contact us on WhatsApp, WhatsApp's own privacy policy also applies to that conversation.

What we do with it

We use your information to deliver the pack or service you ordered, including submitting filings to CIPC, SARS, the Department of Employment and Labour or the Compensation Fund on your instruction; to invoice you; and to answer your questions. We also keep a record of your acceptance of our terms when you place an order. We do not use your information for marketing unless you have explicitly asked to hear from us, and we never sell it.

Who sees it

Our email and document storage providers process data on our behalf as operators under POPIA, bound by their agreements with us. Government bodies see what a filing requires, because that is the service. Nobody else, unless the law compels us.

The Boet chat guide: questions typed into the corner chat are saved, without any account or name attached, so we can see what visitors look for and improve the site. If you leave a support ticket, your email address is saved with your question so a person can answer you. Chat logs live in the same Supabase environment as the portal and follow the same rules on this page.

One thing worth knowing that most filing services never mention: some CIPC filings put information on the public record - director names and addresses are searchable by anyone once a company is registered. Before we submit anything, we tell you exactly what will become public, so nothing about you is on a public register that you did not knowingly put there.

How long we keep it

Order records and delivered documents are kept for five years, in line with tax record keeping requirements, then deleted. Certified ID copies collected for a filing are deleted within 90 days of the filing completing. Questionnaire emails you sent but never converted into an order are deleted within 12 months.

Your rights

Under POPIA you may ask what we hold about you, ask us to correct or delete it, object to processing, and complain to the Information Regulator (South Africa) at [email protected]. Email [email protected] and we respond within a reasonable time, normally well inside the Act's timelines. Our PAIA manual is available on request from the same address.

Security and changes

The site is served over HTTPS. Order information lives in access controlled mailboxes and storage, not on the public site; the optional client portal login and database are described above. We use reasonable safeguards, but no online service can promise perfect security. If we change this policy we will change the date below, and material changes will be noted on this page.

Last updated: 22 August 2026.