This POPIA Compliance Notice explains how Grassroots Finance ("we", "us", "our") processes personal information in terms of the Protection of Personal Information Act, 2013 ("POPIA").
Responsible party
Grassroots Finance is the responsible party for personal information collected through our website and services.
Information we collect
- Contact details (name, email, phone number, company name).
- Business information you provide for quotes or services.
- Financial records and supporting documents shared for services.
- Technical data (device, browser, IP address, usage data).
- Communications you send to us.
Purpose of processing
- To provide accounting, bookkeeping, and payroll services.
- To respond to inquiries and prepare quotes.
- To meet legal, regulatory, and contractual obligations.
- To improve our services and client experience.
Lawful basis for processing
We process personal information with your consent, to perform a contract, to comply with legal obligations, and for legitimate business interests where applicable.
Information sharing
We do not sell your personal information. We may share information with trusted service providers who support our operations (for example, cloud storage and accounting software) under confidentiality and security obligations. We may also disclose information if required by law.
Cookies and advertising measurement
We advertise on Google, and our website uses the Google tag (a script provided by Google) to measure whether those ads lead to enquiries. When you open a page, your browser connects to Google, which receives technical information such as your IP address, browser type and the page you are viewing. Google may also set cookies or similar technologies that record whether you arrived by clicking one of our Google ads.
If you then submit the quote form, or tap our WhatsApp, phone or email links, our website tells Google that an enquiry happened. We do not send Google the contents of the quote form: your name, email address, phone number and message stay with us. We also keep a short-lived note in your browser, cleared when you close the tab, so that one visit is not counted twice.
The purpose of this processing is to measure how many enquiries our advertising produces and to manage what we spend on it, which is a legitimate business interest. Google processes this information under its own privacy policy, and may do so outside South Africa. You can read how Google uses information from sites that use its services.
You may object to this processing at any time. You can manage ad settings in Google's My Ad Center, block or clear cookies in your browser, or contact us using the details below. Doing so will not stop you from using this website or contacting us.
Cross-border transfers
If we transfer information outside South Africa, we ensure that appropriate safeguards are in place, including contractual and security protections.
Data security
We take reasonable technical and organizational measures to protect personal information against loss, misuse, unauthorized access, or disclosure.
Data retention
We retain personal information only for as long as necessary to fulfil the purposes described in this notice, unless a longer period is required by law.
Your rights under POPIA
- Request access to your personal information.
- Request correction or deletion of your information.
- Object to processing in certain circumstances.
- Withdraw consent where processing is based on consent.
Contact and complaints
To exercise your rights or raise concerns, contact us at info@grassrootsfinance.co.za, +27 81 790 8420, or WhatsApp +27 60 705 1670.
You may also lodge a complaint with the Information Regulator (South Africa) if you believe your rights have been infringed.
Updates to this notice
We may update this POPIA notice from time to time. The updated version will be posted on this page with a new effective date.