Privacy Policy
This summary explains how DidiServ handles personal and business information under POPIA while operating the compliance tracker and practitioner fulfilment layer.
What we collect
DidiServ collects the profile, company, tax, compliance, payment, and uploaded document information needed to build your compliance calendar and support selected top-up services.
Why we process it
We process information to authenticate users, track statutory obligations, prepare requested compliance work, communicate task progress, issue invoices, and keep records required by South African law.
Who can access it
Only authorised DidiServ staff, approved practitioners assigned to your task, and regulated infrastructure providers may access the information needed for their role. Unassigned practitioners do not receive your full client pack.
Retention
Compliance, tax, accounting, billing, and consent records may be retained where SARS, Companies Act, POPIA, or accounting-record duties require it. Data not subject to retention duties can be corrected, anonymised, or deleted on request.
Your rights
You may request access, correction, withdrawal of consent, anonymisation, or deletion where legally permitted by emailing privacy@didiserv.co.za.