Search for insights, services and people on this website. Press Enter to open search overlay.

Privacy Policy

Effective Date: 8 November 2025

KXX (“we”, “us”, “our”) is committed to protecting your privacy and ensuring that your personal information is collected and used properly, lawfully, and transparently.

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit https://kxx.co.za/ (the “Website”), engage our services, or communicate with us.

This policy complies with the Protection of Personal Information Act 4 of 2013 (POPIA) and incorporates relevant principles of the General Data Protection Regulation (GDPR) where applicable.

1. Responsible Party

KXX is the responsible party for processing personal information under this Privacy Policy.

Contact Details:
Email: info@kxx.co.za
Telephone: +27 011 462 6269
Physical Address: [Insert registered business address]

2. What Personal Information We Collect

We may collect and process the following categories of personal information:

2.1 Information You Provide Directly

  • Full name

  • Email address

  • Phone number

  • Company name

  • Job title

  • Information submitted through contact forms

  • Information provided during client onboarding

  • Professional or financial information required for audit, advisory, or assurance services

2.2 Information Collected Automatically

When you visit our Website, we may collect:

  • IP address

  • Browser type and version

  • Device information

  • Pages visited

  • Date and time of access

  • Referring website

  • Cookies and usage data

3. How We Use Personal Information

We process personal information to:

  • Respond to enquiries

  • Provide audit, assurance, advisory, and related services

  • Perform client onboarding and compliance checks

  • Comply with regulatory and statutory obligations

  • Improve website performance and user experience

  • Maintain internal records

  • Protect against fraud, risk, and unlawful activity

We will only process personal information where we have a lawful basis to do so under POPIA and applicable law.

4. Legal Basis for Processing

We rely on one or more of the following legal bases:

  • Performance of a contract

  • Compliance with legal obligations

  • Legitimate business interests

  • Consent (where required)

Where consent is required, you may withdraw it at any time.

5. Cookies and Website Analytics

Our Website may use cookies and similar technologies to:

  • Enable core website functionality

  • Analyse traffic and usage trends

  • Improve performance

You may disable cookies through your browser settings. However, some functionality may be affected.

If analytics tools (e.g., Google Analytics) are used, data may be processed in accordance with their respective privacy policies.

6. Disclosure of Personal Information

We do not sell personal information.

We may share personal information with:

  • Regulatory bodies and oversight authorities (where legally required)

  • Professional advisors (legal, tax, compliance)

  • IT and hosting service providers

  • Third-party service providers assisting with website functionality

All third parties are required to implement appropriate security safeguards.

7. International Transfers

If personal information is transferred outside South Africa, we will ensure appropriate safeguards are in place in accordance with POPIA and, where applicable, GDPR standards.

8. Data Security

We implement reasonable technical and organisational measures to protect personal information against:

  • Unauthorised access

  • Loss

  • Misuse

  • Alteration

  • Disclosure

Despite these measures, no method of transmission over the internet is completely secure.

9. Retention of Information

We retain personal information only for as long as necessary to:

  • Fulfil the purpose for which it was collected

  • Comply with statutory retention obligations

  • Meet professional regulatory requirements

  • Resolve disputes

Client records may be retained in accordance with applicable audit and financial legislation.

10. Your Rights

Under POPIA (and GDPR where applicable), you have the right to:

  • Request access to your personal information

  • Request correction of inaccurate or incomplete information

  • Request deletion of personal information (subject to legal obligations)

  • Object to processing

  • Withdraw consent where processing is based on consent

  • Lodge a complaint with the Information Regulator (South Africa)

Information Regulator (South Africa):
Website: https://www.justice.gov.za/inforeg/

11. Third-Party Websites

Our Website may contain links to external websites. We are not responsible for their privacy practices or content.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised Effective Date.

Continued use of the Website constitutes acceptance of the updated policy.