Legal

Privacy Policy

Last updated: 4 June 2026

Draft — pending legal review. This policy is a working template provided for completeness and is not yet final or legally binding. The wording will be confirmed by Virta before being relied upon.

1. Who we are

Virta ("Virta", "we", "us") is a practice-management platform for South African accounting professionals, operated from Bloemfontein and Pretoria, South Africa. This policy explains how we collect, use, share and protect personal information in accordance with the Protection of Personal Information Act, 2013 (POPIA).

2. Information Officer

Our Information Officer is responsible for ensuring compliance with POPIA. Queries about this policy or your personal information can be sent to info@virta.co.za.

3. Personal information we collect

We may collect:

  • Contact and identity details you provide (name, firm, email, phone).
  • Account and billing information when you subscribe.
  • Information you and your clients upload while using the platform.
  • Technical data (device, browser, IP address, usage logs).

4. How and why we use it

We process personal information to provide and improve the service, respond to enquiries, administer accounts and billing, communicate with you, and meet our legal obligations. We process it only where POPIA permits — with your consent, to perform a contract, to comply with the law, or where we have a legitimate interest that does not override your rights.

5. Sharing and operators

We do not sell personal information. We share it only with trusted operators (sub-processors) who help us run the service — for example hosting, email delivery and payment processing — under appropriate contractual safeguards, and where required by law.

6. Security

We take reasonable, appropriate technical and organisational measures to protect personal information against loss, unauthorised access and misuse, as required by section 19 of POPIA.

7. Retention

We keep personal information only for as long as necessary for the purposes described here, or as required by law, after which it is deleted or de-identified.

8. Your rights

Under POPIA you may request access to the personal information we hold about you, ask us to correct or delete it, and object to certain processing. To exercise these rights, contact our Information Officer.

9. Cross-border transfers

Where personal information is processed outside South Africa, we ensure a comparable level of protection as required by section 72 of POPIA.

10. Cookies

Our website uses essential cookies needed for it to function and may use limited analytics to understand usage. You can control cookies through your browser settings.

11. Changes

We may update this policy from time to time. The "last updated" date above reflects the latest version.

12. Contact and complaints

Contact us at info@virta.co.za. You also have the right to lodge a complaint with the Information Regulator (South Africa).