Privacy notice.

Last updated: 4 August 2026

Alexis Business Advisory (Pty) Ltd takes the protection of personal information seriously. This notice explains what we collect through this website and in the course of our work, why we collect it, and what you can ask us to do about it.

1. Who we are

Alexis Business Advisory (Pty) Ltd, registration number 2024/845370/07, is the responsible party for the personal information described in this notice.

2. What we collect

Through this website. If you complete our enquiry form, we collect the information you choose to give us: your name, company name, email address, telephone number, the service you are enquiring about, and the content of your message.

We do not use advertising or tracking cookies on this website, and we do not run analytics that profile you. The site loads fonts from Google Fonts, which means Google receives your IP address as part of that request — a standard consequence of how web fonts are delivered.

In the course of our work. If you become a client, we will necessarily process a wider set of information in order to deliver accounting, tax, audit and advisory services. That may include identity and contact details, tax and financial records, banking information, payroll data and company records. Where we act for a business, this can include information about its directors, employees and counterparties.

3. Why we process it, and on what basis

We process personal information for the following purposes, each with a lawful basis under section 11 of POPIA:

• Responding to your enquiry — on the basis of your consent, given when you submit the form.
• Providing our professional services — because it is necessary to perform our engagement with you.
• Meeting our legal obligations — including submissions to SARS and CIPC, and our obligations under the Financial Intelligence Centre Act (FICA) and the Companies Act.
• Protecting our legitimate interests — such as maintaining records of our work, managing risk, and establishing or defending legal claims.

We do not sell your personal information, and we do not use it for automated decision-making or profiling.

4. Who we share it with

We share personal information only where it is necessary, and only with:

• Regulators and authorities — SARS, CIPC and others, where we are required or authorised to submit information on your behalf.
• Service providers who process data for us — including our email, accounting software and website form providers, each of whom is bound to process information only on our instructions.
• Professional advisers — such as auditors or attorneys, where a matter requires it.

We do not disclose your information to anyone else without your consent, unless the law requires it.

5. Information sent outside South Africa

Enquiries submitted through the form on this website are processed by Formspree, a form-handling service whose servers are located in the United States. This means the information in your enquiry is transferred outside South Africa.

This transfer is made under section 72 of POPIA on the basis of your consent, given when you tick the consent box and submit the form. Formspree processes the information solely in order to deliver your message to us. If you would prefer not to have your information processed outside South Africa, please email or telephone us directly using the details above — no website form is involved in that case.

Some of the software we use to deliver our services may likewise store information outside South Africa. Where that is so, we satisfy ourselves that the recipient is subject to a law, binding agreement or corporate rules providing an adequate level of protection.

6. How long we keep it

Enquiries that do not become engagements are retained for up to 24 months, then deleted. Client records are retained for at least five years after the end of our engagement, as required by the Companies Act, the Tax Administration Act and FICA — and longer where a specific legal or professional obligation applies.

7. How we protect it

We apply appropriate, reasonable technical and organisational measures to safeguard personal information, including access controls, encrypted transmission of data to and from this website, and confidentiality obligations binding on everyone at the firm. Should a security compromise affect your personal information, we will notify you and the Information Regulator as section 22 of POPIA requires.

8. Your rights

Under POPIA you have the right to:

• Ask what personal information we hold about you, and request a copy of it
• Ask us to correct or delete information that is inaccurate, irrelevant, excessive, out of date or unlawfully obtained
• Object to our processing of your information on reasonable grounds
• Withdraw consent you have previously given, at any time — which will not affect processing already carried out
• Lodge a complaint with the Information Regulator

To exercise any of these rights, email us at info@alexisbusinessadvisory.co.za. We will respond within a reasonable period. We may need to verify your identity before acting on a request.

9. The Information Regulator

If you are not satisfied with how we have handled your personal information, you may complain to the Information Regulator of South Africa.

10. Changes to this notice

We may update this notice from time to time. The date at the top shows when it was last revised, and the current version is always available on this page.