Privacy Notice

Last updated: October 2026

1. Who we are

Finlume Business Solutions (Pty) Ltd ("Finlume", "we", "us") respects your privacy. This notice explains how we handle personal information in line with the Protection of Personal Information Act 4 of 2013 (POPIA). It applies to visitors to this website, people who contact us, and the clients for whom we provide services.

2. Information Officer

Our Information Officer is Rochelle Brandon, Founder & Director. Contact: info@finlume.co.za or +27 71 608 3460.

3. Information we collect

• Contact details you give us, such as your name, email address, phone number and company name.
• Information needed to deliver our services, such as identity and registration numbers, tax reference numbers, banking, financial records and payroll information.
• Basic technical information that our website host records automatically for security and performance.

This website does not use advertising or tracking cookies.

4. How we use it

• To respond to enquiries and prepare proposals.
• To provide bookkeeping, payroll, tax, financial statement, advisory and secretarial services.
• To submit returns and filings to authorities such as SARS and the CIPC on your instruction.
• To meet our legal, regulatory and professional obligations.

We only send marketing messages if you have agreed to receive them, and you can opt out at any time.

5. Sharing

We never sell personal information. We share it only where necessary: with authorities such as SARS and the CIPC when submitting on your behalf, with trusted professional partners such as independent reviewers when you ask us to, and with service providers that help us operate (for example cloud accounting software, email and website hosting). They must keep your information confidential and secure.

6. Cross-border storage

Some cloud services we use may store information on servers outside South Africa. When this happens we take reasonable steps to ensure it is protected to a standard comparable to POPIA.

7. Security and retention

We use appropriate technical and organisational measures, including access controls, encrypted connections and strict confidentiality. We keep information only as long as needed for its purpose or as required by law (for example, the Tax Administration Act and the Companies Act), then securely delete or destroy it.

8. Your rights

• Ask whether we hold your personal information and request a copy.
• Ask us to correct or delete information that is inaccurate, out of date or unlawfully held.
• Object to processing and withdraw consent where processing is based on consent.
• Lodge a complaint with the Information Regulator (South Africa) at www.inforegulator.org.za.

9. Changes

We may update this notice from time to time. The latest version will always be on this page.