Privacy Policy

Introduction

LEDGA (Pty) Ltd ("LEDGA", "we", "us", or "our") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our accounting software and services.

This policy complies with the Protection of Personal Information Act 4 of 2013 (POPIA) and other applicable South African data protection legislation.

Information We Collect

Personal Information

When you create an account or use our Service, we may collect:

• Full name and contact details (email, phone number)
• Business name and registration information
• South African ID number (for VAT registration purposes only)
• Banking details for payment processing
• VAT registration number
• Physical and postal addresses

Financial Information

To provide our accounting services, we process:

• Invoice and expense data
• Bank transaction records (when you connect your bank)
• Payment and billing information
• Tax-related financial data

Technical Information

We automatically collect:

• IP address and device information
• Browser type and version
• Usage data and analytics
• Cookies and similar tracking technologies

How We Use Your Information

We use your information to:

• Provide, maintain, and improve our accounting services
• Process transactions and send invoices
• Generate VAT and tax reports for SARS compliance
• Communicate with you about your account and updates
• Provide customer support
• Detect and prevent fraud or security issues
• Comply with legal obligations
• Analyse usage patterns to improve our Service

Legal Basis for Processing

Under POPIA, we process your personal information based on:

• Contract: Processing necessary to fulfil our service agreement with you
• Legal obligation: Processing required by South African law (e.g., tax records)
• Legitimate interest: Processing for fraud prevention and service improvement
• Consent: Where you have given explicit consent for specific processing

Data Sharing and Disclosure

We may share your information with:

• Service providers: Third parties who assist in providing our Service (hosting, payment processing, email delivery)
• Banking partners: When you connect your bank account for transaction syncing
• Professional advisors: Accountants, lawyers, and auditors as necessary
• Legal authorities: When required by law or to protect our rights

We do not sell your personal information to third parties.

Data Security

We implement industry-standard security measures including:

• 256-bit SSL/TLS encryption for all data in transit
• AES-256 encryption for data at rest
• Regular security audits and penetration testing
• Multi-factor authentication options
• Role-based access controls
• Regular data backups with encryption

Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. Financial records are retained for a minimum of 5 years as required by South African tax law. After account closure, we retain data for 90 days before permanent deletion, unless a longer retention period is required by law.

Your Rights

Under POPIA, you have the right to:

• Access: Request a copy of your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your information (subject to legal retention requirements)
• Object: Object to certain processing of your information
• Data portability: Export your data in a machine-readable format
• Withdraw consent: Withdraw consent where processing is based on consent

To exercise these rights, contact us at privacy@ledga.co.za.

Cookies

We use cookies and similar technologies to:

• Keep you signed in
• Remember your preferences
• Analyse how our Service is used
• Improve performance and user experience

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of the Service.

International Transfers

Your data is primarily stored in secure data centres in South Africa. Where we use international service providers, we ensure appropriate safeguards are in place as required by POPIA, including standard contractual clauses and adequacy assessments.

Children's Privacy

Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service at least 14 days before they take effect. Your continued use of the Service after changes constitutes acceptance of the updated policy.

Contact Us

For privacy-related queries or to exercise your rights:

You also have the right to lodge a complaint with the Information Regulator of South Africa at inforeg.org.za.