Privacy policy | Filling the GAAP

Last updated: 30 October 2026

Who is responsible

Filling the GAAP ("we", "us") is the responsible party for personal information processed through this website and in the course of providing accounting, tax and software services. The Information Officer is Kyle Jones, who can be reached at kyle@ftgaap.co.za.

What we collect

Enquiry details you submit through the contact form or send by email, WhatsApp or phone: name, contact details, the nature of your enquiry and anything you choose to tell us.
Client information required to perform engagements: identity and registration numbers, tax reference numbers, financial records, payroll information and related documents. This is collected under a signed engagement letter, not through this website.
Technical information generated automatically when you visit the site, such as pages visited and approximate location derived from IP address. This website does not currently use analytics or advertising cookies. If that changes, this policy and a cookie notice will be updated first.

Why we process it

To respond to your enquiry and provide a quote.
To perform the services you engage us for, including submissions to SARS, CIPC and other authorities on your behalf.
To comply with legal obligations, including the Tax Administration Act, the Companies Act, the Financial Intelligence Centre Act and professional body rules on record retention.
To send you reminders about deadlines relevant to you. You can opt out of non-essential communication at any time.

Lawful basis

Processing is based on your consent (enquiries), the performance of a contract (client engagements), compliance with legal obligations, and our legitimate interest in operating the practice.

Sharing

We do not sell personal information. We share it only with: SARS, CIPC and other authorities as instructed or required; software and hosting providers that process data on our behalf under appropriate agreements (including Netlify, which hosts this site and receives contact form submissions, and the accounting and payroll platforms used in your engagement); and professional advisers or regulators where required by law.

Cross-border transfers

Some service providers store data outside South Africa. We only use providers that are subject to laws or binding agreements providing a level of protection substantially similar to POPIA.

Security

Personal information is protected through access controls, encryption in transit, multi-factor authentication on all systems, and secure document handling. Please do not send identity numbers, tax numbers or banking details through the public contact form; we will provide a secure channel.

Retention

Enquiry information is kept for up to 12 months if no engagement follows. Client records are retained for at least five years after the end of the relevant tax year or engagement, as required by law, and then securely destroyed.

Your rights

You may request access to, correction of, or deletion of your personal information, object to processing, or withdraw consent, by emailing kyle@ftgaap.co.za. You may also lodge a complaint with the Information Regulator at inforegulator.org.za.

Changes

We may update this policy from time to time. The date at the top shows the current version.