How enquiry information is handled.
This policy is a publication-ready draft and should be reviewed by the firm and its legal adviser before launch.
Ledger & Co collects information submitted through the website to review enquiries, understand the requested accounting services and contact the person who submitted the enquiry.
Information collected
The scope-review form may collect contact details, business details, industry, approximate transaction volume, employee count, current platforms, VAT registration status, services required, current bookkeeping status and a short description of current challenges.
Sensitive information
Passwords, banking credentials, identity documents, full payroll data, bank login details and highly sensitive financial records should not be submitted through the general website form. If such information is needed, Ledger & Co should request it later through an approved secure process.
Purpose of processing
Information is used to assess the enquiry, prepare for a scope discussion, respond to contact requests and keep records of prospective-client communication.
Sharing information
Information may be shared with approved service providers who support website hosting, form delivery, security, email or CRM workflows. Service providers should be reviewed for appropriate confidentiality, access control and data-processing obligations.
Retention
Enquiry information should be retained only for as long as needed for enquiry handling, legal compliance, record keeping and legitimate business administration. Final retention periods must be approved before publication.
Security
Ledger & Co should use HTTPS, restricted access to form submissions, strong authentication for administrative accounts and approved secure channels for sensitive documents. No website can make absolute security guarantees.
Analytics and cookies
Non-essential tracking should not be enabled until cookie controls and privacy wording are approved. Sensitive form fields should not be recorded in analytics or session-replay tools.
Your rights
Subject to applicable law, individuals may request access to personal information, correction of inaccurate information or deletion where retention is no longer required.
Contact
Privacy enquiries should be sent to [General email address].
This page should be reviewed for POPIA and any firm-specific processing arrangements before publication.