Privacy Policy & Data Protection Notice
Governx Technologies (Pty) Ltd trading as Zatax South Africa ("Zatax", "we", "us", or "our") is committed to protecting your personal information and ensuring compliance with the Protection of Personal Information Act No. 4 of 2013 (POPIA), the Promotion of Access to Information Act No. 2 of 2000 (PAIA), and the Tax Administration Act No. 28 of 2011.
1. Responsible Party & Information Officer
Governx Technologies (Pty) Ltd is the designated Responsible Party under POPIA. Our registered Information Officer oversees data protection, regulatory notifications, and data subject access requests:
Responsible Entity: Governx Technologies (Pty) Ltd (Reg. No. 2024/000000/07)
Physical & Postal Address: Johannesburg, Gauteng, Republic of South Africa, 2196
Designated Information Officer: Brandon Govender
POPIA Compliance Email: compliance@governx.co.za / privacy@zatax.co.za
2. South African Data Sovereignty & Hosting (POPIA Section 72)
We guarantee that all personal financial records, RSA ID numbers, SARS tax credentials, bank transactions, and GPS logbook records are strictly hosted and stored within the borders of the Republic of South Africa in the Microsoft Azure South Africa North (Johannesburg) hyperscaler region.
No sensitive financial or personal identity information is transferred outside the Republic without explicit statutory adequacy and data subject consent.
3. Information We Collect & Lawful Purpose
We process personal and corporate data solely for providing tax compliance and ERP services:
- Identity Data: Full legal names, South African 13-digit National ID numbers, CIPC registration numbers.
- Tax Authority Data: 10-digit SARS Income Tax reference numbers, VAT registration numbers, PAYE numbers.
- Financial & ERP Data: Section 20 VAT invoices, customer/vendor profiles, bank statement feeds, general ledger journal entries.
- Travel & GPS Data: Section 8(1)(b) vehicle odometer readings, business trip start/end locations, and deemed travel rate claims.
- Tax Certificates: IRP5/IT3(a) certificates, IT3(b)/IT3(c) investment certificates, medical aid tax certificates.
4. Statutory Retention under the Tax Administration Act
Under Section 29 of the South African Tax Administration Act (Act 28 of 2011), all financial records, tax invoices, VAT returns, and audit documentation must be preserved in verifiable digital format for a statutory minimum of 5 (five) years from the date of return submission.
5. Your Rights as a Data Subject
Under POPIA Sections 23, 24, and 25, you have the right to:
- Request access to your personal information held by Zatax.
- Request correction or updating of inaccurate personal records.
- Request destruction or deletion of personal data subject to statutory 5-year SARS tax retention rules.
- Lodge a complaint with the South African Information Regulator (inforeg@justice.gov.za / complaints.IR@justice.gov.za).