Privacy Policy

Last updated: March 2026

Who we are

This website is operated by Yotta Information Systems (Pty) Ltd, a Pretoria-based accounting and software development practice registered in South Africa.

For questions about this policy or your personal data, contact us at info@yotta.co.za.

What personal data we collect

We collect personal data only when you voluntarily submit an enquiry form. What we collect depends on which form you use:

  • All enquiry forms: Your full name and email address.
  • Accounting consultation form: Your business name and a brief description of your accounting need. Optionally, how you heard about us.
  • Software enquiry form: An optional message describing what you would like to discuss.
  • General contact form: The service you are enquiring about and a message.

We also automatically collect technical information when you submit a form: your IP address and browser user-agent string. These are immediately converted to one-way SHA-256 hashes before storage — the original values are never recorded. Hashed values cannot be reversed to recover your IP address or browser details.

If you accept cookie consent, we load Google Analytics 4 (GA4) to collect anonymised usage data (pages visited, session duration, form submission events). GA4 is not loaded if you decline or have not yet responded to the consent banner.

How we store your data

Enquiry data is stored in a MySQL database on our production server, hosted in South Africa. Each enquiry record contains your name, email address, the service you enquired about, your optional message, a timestamp, and the SHA-256 hash values of your IP address and user-agent string.

Raw IP addresses and user-agent strings are never stored. We retain only the hashed values.

We retain enquiry records for as long as they are needed to respond to and follow up on your enquiry. We do not sell, share, or disclose your personal data to third parties for marketing or commercial purposes.

How we use your data

We use the personal data you submit for one purpose: to respond to your enquiry and follow up with you about the service you have asked about.

When you submit an enquiry form, a notification email containing your contact details and message is sent to us so that we can respond promptly. No automated marketing emails are sent from this site.

If you have accepted cookie consent, we use GA4 analytics data to understand which services are generating interest and how visitors navigate the site. GA4 data is processed by Google in accordance with their privacy policy.

This site operates in South Africa and processes personal information in accordance with the Protection of Personal Information Act, 2013 (POPIA).

The legal basis for each type of processing is:

  • Enquiry form submissions: Your voluntary submission of a form constitutes consent to process your personal information for the purpose of responding to your enquiry (POPIA Section 11(1)(a)).
  • Technical data (IP hash, user-agent hash): Collected to protect the integrity of our enquiry system — specifically to prevent spam and automated abuse via rate limiting. Only hashed, non-identifiable values are retained. This processing is necessary for our legitimate interest in maintaining a secure and functional website (POPIA Section 11(1)(f)).
  • Analytics cookies (GA4): Processed only with your explicit consent, given via the cookie consent banner on your first visit (POPIA Section 11(1)(a)).

Under POPIA, you have the right to request access to your personal information held by us, to request correction of inaccurate data, and to request deletion of your data where we have no lawful basis for continued retention. To exercise any of these rights, contact us at info@yotta.co.za.

Cookies

This site uses the following cookies:

  • popia_consent — Records your cookie consent decision (accepted or declined). Set when you interact with the consent banner on your first visit. Expires after 365 days.
  • PHPSESSID — A short-lived PHP session cookie used to protect enquiry form submissions against cross-site request forgery (CSRF). Expires when you close your browser.
  • Google Analytics (_ga, _ga_*): Set only if you accept cookie consent. Used to measure anonymised site usage statistics. Managed by Google.

You can change your consent decision at any time by clearing your browser cookies for this site. The consent banner will reappear on your next visit.