Privacy Policy
Last updated: August 2026
At Figured Out, we take the privacy and protection of personal information seriously.
This Privacy Policy explains how we collect, use, store and protect personal information when you visit our website, contact us, enquire about our services, participate in one of our programmes or workshops, or otherwise interact with Figured Out.
We process personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA) and other applicable South African laws.
1. Who we are
Figured Out (Pty) Ltd is a South African bookkeeping, accounting & advisory practice.
For purposes of POPIA, Figured Out (Pty) Ltd is the responsible party in respect of personal information that we determine how and why to process.
Business name: Figured Out (Pty) Ltd
Information Officer: Rouchelle (Shelly) Berger
Email: Shelly@figuredout.co.za
Business address: 1 Oosterland Avenue, Bloubosrand, Randburg, 2188, Gauteng, South Africa
2. What personal information we may collect
The personal information we collect depends on how you interact with us and may include:
• your name and surname
• email address
• telephone number
• business or trading name
• job title or role
• business information
• information submitted through website forms
• information you provide when enquiring about our services, programmes or workshops
• billing, payment and transaction information
• information required to provide bookkeeping, accounting, tax, advisory or related professional services
• correspondence and communications with us
• information provided through questionnaires, onboarding forms, assessments or programme participation
• technical information relating to your use of our website, such as your IP address, browser, device and website activity
• any other information you choose to provide to us
Where we provide professional services to you or your business, we may need to process additional personal, business and financial information in order to perform those services and meet our professional and legal obligations.
We aim to collect only information that is relevant and reasonably necessary for the purpose for which it is required.
3. How we collect personal information
We may collect personal information:
• directly from you when you contact us or complete a form
• when you become a client
• when you register for or participate in a workshop, programme or other Figured Out experience
• through email, telephone, WhatsApp or other communications with us
• when you interact with our website
• through service providers or platforms we use to operate our business
• from third parties where this is necessary for the services we provide and we are lawfully permitted to do so
• from publicly available sources where appropriate
Where personal information is not collected directly from you, we will handle that information in accordance with applicable law.
4. Why we use personal information
We may process personal information for purposes including:
• responding to enquiries
• assessing whether our services are suitable for you or your business
• preparing proposals, quotations or engagement documentation
• onboarding clients and programme participants
• providing bookkeeping, accounting, tax, advisory, educational or related services
• communicating with you about services you have requested or purchased
• administering workshops, programmes and events
• processing payments and maintaining financial records
• meeting tax, accounting, regulatory, professional and other legal obligations
• maintaining our client and business records
• improving our services, programmes and website
• managing our business operations
• preventing fraud, misuse or security incidents
• protecting our legitimate business interests
• sending marketing communications where permitted
• complying with lawful requests or legal requirements
We will not use personal information for purposes that are incompatible with the purpose for which it was collected unless we are permitted to do so by law.
5. Our basis for processing your information
Depending on the circumstances, we may process personal information because:
• you have consented to the processing
• it is necessary to enter into or perform a contract with you
• we are required to process the information by law
• processing protects a legitimate interest of yours
• processing is necessary for our legitimate interests or those of a third party, provided this is lawful and appropriate
Where we rely on consent, you may withdraw that consent, subject to any legal or contractual consequences that may apply.
6. Marketing communications
Where permitted by law, we may send you information about Figured Out services, programmes, events, resources or other content that we believe may be relevant to you.
Where your consent is required for electronic direct marketing, we will request it.
You may unsubscribe from marketing communications at any time by using the unsubscribe option provided in the communication or contacting us directly.
Opting out of marketing communications does not prevent us from sending communications that are necessary in connection with services you have requested or an existing client relationship.
7. Cookies and website information
Our website may use cookies and similar technologies to help the website function, understand how visitors use it, improve the visitor experience and, where applicable, support analytics or marketing activities.
Some cookies may be placed by third-party service providers whose services are used on our website.
More information about the cookies we use and the choices available to you can be found in our Cookie Policy.
8. Sharing personal information
We do not sell personal information.
We may share personal information where reasonably necessary with:
• employees, contractors or team members who require the information to perform their responsibilities
• professional advisers
• technology and cloud service providers
• accounting, bookkeeping, tax and financial software providers
• website, email, communication and marketing platforms
• payment processors and event or booking platforms
• regulatory bodies, government authorities or professional bodies where required
• other third parties where necessary to provide a service you have requested
• a third party where you have authorised us to share the information
• any person or organisation where disclosure is required or permitted by law
Where a service provider processes personal information on our behalf, we expect appropriate safeguards to be in place to protect that information.
9. Information processed outside South Africa
Some of the technology platforms and service providers we use may store or process information outside South Africa.
Where personal information is transferred outside South Africa, we will take reasonable steps to ensure that the transfer is permitted under applicable data protection law and that the information receives an appropriate level of protection.
10. How we protect personal information
We take reasonable and appropriate technical and organisational measures to protect personal information against:
• loss
• damage
• unauthorised destruction
• unlawful access
• unauthorised processing
• misuse or disclosure
No electronic system can be guaranteed to be completely secure. We therefore continually consider the nature of the information we process and the safeguards reasonably appropriate to protect it.
If we become aware of a security compromise involving personal information, we will respond to it in accordance with our legal obligations.
11. How long we keep personal information
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, or for as long as we are required or permitted to retain it by law, contract, professional requirements or legitimate business needs.
Retention periods may therefore differ depending on the nature of the information and the relationship involved.
When personal information is no longer required and we are no longer authorised to retain it, we will take appropriate steps to delete, destroy or de-identify it.
12. Your rights
Subject to POPIA and other applicable laws, you may have the right to:
• ask whether we hold personal information about you
• request access to personal information we hold about you
• request correction of inaccurate or incomplete information
• request deletion or destruction of personal information where appropriate
• object to certain processing of your personal information
• withdraw consent where processing is based on consent
• object to direct marketing
• lodge a complaint with the Information Regulator
Certain rights may be subject to legal limitations. For example, we may be required to retain information even where you request its deletion.
Requests relating to access to records may also be dealt with in accordance with the Promotion of Access to Information Act 2 of 2000 (PAIA) and our PAIA Manual.
13. Providing information to us
In some situations, providing personal information is voluntary.
In others, we may require particular information in order to:
• respond meaningfully to your request
• enter into an engagement with you
• provide the services you have requested
• meet legal, regulatory or professional obligations
If required information is not provided, we may be unable to provide the relevant service, complete an instruction or enter into a business relationship.
14. Third-party websites and services
Our website may contain links to websites, platforms or services operated by third parties.
We are not responsible for the privacy practices, security or content of third-party websites or platforms. We recommend reviewing their privacy information before providing personal information to them.
15. Children’s personal information
Our website and services are primarily intended for business owners and adults.
We do not intentionally collect personal information from children through our website unless there is a legitimate reason and the processing is permitted by law.
16. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our business, website, technology, service providers or legal obligations.
The latest version will be published on this website and the date at the top of the policy will be updated accordingly.
17. Contacting us about your information
If you have questions about this Privacy Policy or would like to exercise any of your rights relating to your personal information, please contact our Information Officer:
Information Officer: Rouchelle (Shelly) Berger
Email: Shelly@figuredout.co.za
Business address: 1 Oosterland Avenue, Bloubosrand, Randburg, 2188, Gauteng, South Africa
18. Complaints
If you believe that your personal information has not been handled appropriately, we encourage you to contact us first so that we have an opportunity to address your concern.
You also have the right to lodge a complaint with the Information Regulator of South Africa.
Information about complaints and the exercise of rights under POPIA and PAIA is available from the Information Regulator.