Your information, handled with care

1. Who we are

Retroflux is a standalone South African company, owned by Pholoso Mmutle (Managing Director, CBAP(SA)). It is not part of, and is not operated by, any other consultancy or group. For any privacy question or request, email us at admin@retroflux.co.za.

2. Information we collect

• Enquiry details: your name, business name, email address, phone number, and the answers you give in our short booking questions (estimated revenue, number of employees, and what you need help with). We collect this when you fill in the booking form.
• Client records: once you become a client, we process the financial and payroll information you share with us so we can do the work — this is governed by your signed service agreement.
• Technical data: usage information from your visit and, where permitted, advertising measurement data described below. We do not sell your data.

3. Why we use your information

• To schedule and prepare for your intro call.
• To prepare a custom proposal for your business.
• To deliver the services you appoint us for (bookkeeping, SARS & CIPC compliance, payroll, management accounts and annual financial statements).
• To communicate with you about your account and our services.
• To meet our legal and regulatory obligations as an accounting services provider.

4. The law we follow

We process personal information in line with South Africa's Protection of Personal Information Act (POPIA). You have the right to access the personal information we hold about you, to ask us to correct or delete it, and to object to certain processing. To exercise any of these rights, email admin@retroflux.co.za.

5. Who we share it with

We only share information where the work requires it — for example with the accounting and payroll platforms we use (such as Xero), with SARS and CIPC when filing on your behalf, or with professional service providers who help us run our business under confidentiality obligations. We never sell your information.

Advertising measurement: we use Google Tag Manager, provided by Google, to manage website advertising tags, including our TikTok Pixel when configured in that container. Loading Tag Manager shares technical request information such as your IP address and browser details with Google. The TikTok Pixel sends TikTok pages viewed, browser and device details, IP address and cookies to measure and improve our adverts. We do not enable customer matching or share your booking answers through these tags. If you are in a region that requires prior consent — or we cannot determine your region — no advertising tags load until you accept on the cookie banner we show you. Your choice is saved on this browser with the date and the notice version you saw, and an anonymous copy (choice, region and notice version only) is kept on our systems so we can honour and evidence it. You can change your mind anytime via "Cookie settings" in the footer or the buttons below; rejecting or withdrawing stops the tags immediately and applies to other open tabs. Global Privacy Control and Do Not Track are honored. For privacy requests, email admin@retroflux.co.za.

6. How long we keep it

Enquiry details are kept only as long as needed to respond to you and follow up on your request. Client financial records are kept for the period required by South African law for accounting and tax purposes, then securely destroyed.

7. Security

Your information is stored on encrypted, cloud-based systems with access limited to the Retroflux team members who need it to do the work. While no system is perfectly secure, we treat the security of your financial data as seriously as our own.

8. Changes to this policy

If we update this policy, the latest version will always live on this page. Material changes will be highlighted so you are never caught off guard.