Who we are and what this policy covers
TsAndCs provides website terms, privacy policy drafting and compliance support for businesses across South Africa, from Cape Town and the Western Cape to Gauteng, KZN and beyond. This policy applies when you visit our website, submit an enquiry through our contact form, request a compliance pack or otherwise interact with our services.
We act as the responsible party for the personal information we collect and use in the ordinary course of our business. In some cases we may process information on behalf of a client when providing a policy pack or related compliance support, in which event we handle that information according to the client’s instructions and the law.
Information we collect and how it reaches us
We collect personal information that you choose to give us, as well as technical information generated when you use the site. This may include details submitted through the enquiry form, business information needed for policy customisation, and usage data from your browser or device.
- Name, business name and contact details submitted through the enquiry form
- Company details, website details and information needed for compliance drafting
- Payment and invoicing records where a service is purchased
- Technical data such as IP address, browser type and page activity
- Any correspondence or supporting documents you send to us
We only ask for information that is relevant to the service you want. If you do not provide certain details, we may not be able to complete a policy review or prepare a suitable compliance pack.
Why we use personal information
We use personal information to respond to enquiries, prepare documents, provide support and manage our business properly. We also use it to meet legal obligations, keep records and improve the way we deliver our services.
- To assess your request and provide a quotation or service recommendation
- To draft, update or review website policies and related compliance documents
- To provide customer support and service updates
- To process payments, manage accounts and issue invoices
- To comply with tax, record-keeping and other legal duties
Where we send service updates or follow-up communication, we do so for a proper business reason. If we ever want to use your details for marketing purposes beyond the original request, we will only do so where the law allows it.
Sharing information with trusted service providers
We do not sell personal information. We may share it with trusted service providers who help us run our business, such as hosting services, payment processors, document systems and administrative support providers. These third parties may only use the information for the purpose of assisting us.
We may also disclose information where required by law, court order, regulator request or to protect our rights, our clients or the public. If a client asks us to assist with website terms or privacy notices, we may use the information supplied by that client strictly for that project. We take reasonable steps to make sure service providers treat personal information with care, especially where information is stored outside South Africa or accessed remotely during load-shedding or after hours support.
Your rights under POPIA
As a data subject, you have rights under POPIA in relation to your personal information. You may ask us what information we hold about you, request correction of inaccurate details or object to certain processing in lawful circumstances.
- Request access to personal information we hold about you
- Ask us to correct or update inaccurate or incomplete information
- Object to processing where POPIA permits an objection
- Withdraw consent where processing is based on consent
- Lodge a complaint if you believe your information has been handled improperly
You can make a request through our contact page enquiry form. We may need to verify your identity before acting on a request, especially where the request involves client files or confidential compliance material.
Retention, security and cross-border handling
We keep personal information only for as long as it is needed for the purpose for which it was collected or as required by law. This may include tax records, client communication, compliance notes and project files. When information is no longer required we take reasonable steps to delete or de-identify it.
We apply practical security measures to protect personal information from loss, unauthorised access, misuse or alteration. No online system is completely risk free, but we take care with access controls, secure storage and staff handling of records. Where information is processed or stored outside South Africa, we aim to ensure it is protected to a standard that is consistent with POPIA requirements.
Contacting us about privacy matters
If you have a question about this Privacy Policy, need help with a privacy request or want a review of your website compliance documents, please use the enquiry form on our contact page. Our team in Gardens, Cape Town supports businesses in Cape Town CBD, Sea Point, Claremont, Bellville, Stellenbosch, Paarl and nationwide.
We may update this policy from time to time to reflect legal changes, service changes or operational updates. The latest version will apply from the date it is published. Please review it periodically if you use our services on an ongoing basis.