01
Who is responsible for the information
Nicholas Bacon, trading as Anchor Tax Resolution, is the responsible party for the personal information described in this notice.
Business correspondence address97 Sameja Drive1 Salt Rock Road
Ballito
South Africa
4391
Privacy enquiries and requests may be sent to contact@anchortaxresolution.co.za.
02
Scope
This notice applies to website visitors; prospective clients, businesses and referring advisers who use the enquiry form or contact Anchor about a possible engagement; and clients who submit a review. It also covers correspondence that follows an initial enquiry or review submission.
A website enquiry is an initial assessment request. It does not by itself create a professional engagement. If an engagement is accepted, the engagement terms and the legal and professional requirements applying to the client record will also govern the handling of relevant information.
03
Information processed
Depending on what you choose to provide and how you use the website, Anchor may process:
- your name, email address and optional telephone number;
- your enquiry or client type and optional company name;
- optional tax-matter category, SARS stage, tax period and matter description;
- deadline, contact and contact-before-details preferences;
- for a review submission, your full name and email address for private verification, your public display choice and any entered initials, optional general location and broad service category, review text, and publication-consent and genuine-experience confirmations;
- subsequent correspondence and information supplied when discussing the enquiry;
- basic technical and security information generated when the website or contact function is accessed, such as request time, request path, IP address, browser or device information and function-response information; and
- anonymised website analytics, such as page or route viewed, referrer, approximate location, browser, device type and operating system.
04
Purpose and lawful basis
Personal information is processed only where there is an appropriate purpose and legal justification. Depending on the circumstances, that includes processing necessary to:
- assess and respond to an enquiry and take steps you request before a possible engagement;
- communicate with you about the enquiry;
- verify and moderate a review submission, record the publication authority and, only with your consent and Anchor's approval, publish the selected public name, general location and review text;
- operate, secure, diagnose and improve the website, enquiry channel and review-submission channel;
- comply with applicable legal and professional obligations; or
- establish, exercise or defend legal rights where reasonably necessary.
Under South African law, the justification may include actions connected with concluding or performing an agreement, compliance with a legal obligation, or the protection of a legitimate interest. Where the GDPR applies, the basis may include steps requested before entering a contract, performance of a contract, compliance with a legal obligation or legitimate interests such as responding to enquiries and protecting the website.
Consent is used where the particular processing genuinely requires it. It is not treated as the only basis for handling an enquiry, and the enquiry form does not require marketing consent. A review is considered for publication only after the reviewer gives specific publication consent; that consent may later be withdrawn.
05
Website enquiry architecture
No website enquiry database is maintained. Form information is transmitted through the Vercel-hosted contact function and, following a successful submission, delivered by authenticated SMTP to the authorised Anchor mailbox. Enquiry emails remain stored in that mailbox until they are deleted under the retention approach below.
The application does not intentionally log form payloads. Hosting infrastructure may generate limited technical and security logs about requests and function operation.
The website does not accept client documents. Do not send tax returns, identity documents, tax numbers, passwords, banking credentials or other sensitive records through the public enquiry form. If documents are needed, Anchor will request them separately after considering the enquiry.
06
Review submissions and publication
A review submission is transmitted through a dedicated Vercel-hosted function and delivered by authenticated SMTP to the authorised Anchor mailbox hosted by Xneelo. The website does not maintain a review-submission database, and the application does not intentionally log the review payload. Hosting infrastructure may generate limited technical and security logs about the request and function operation.
Full names and email addresses are collected privately to verify the submission and deal with correction or withdrawal requests. They are never published. A submission is reviewed manually and is never added to the website automatically. If Anchor approves the review, only the selected public name, general location and review text are added manually to the controlled static website content.
Do not include tax numbers, identity numbers, financial details, SARS case numbers, confidential case histories or other sensitive information in a review. The review form does not accept documents or uploads.
07
Recipients and service providers
Information may be accessed or processed only as reasonably necessary by:
- Nicholas Bacon and authorised Anchor personnel;
- Vercel, which provides website hosting, serverless request handling and Web Analytics;
- Xneelo, which provides authenticated email delivery and mailbox hosting;
- professional or legal advisers where access is necessary and lawful; and
- regulators, courts or other authorities where disclosure is legally required or permitted.
Anchor does not sell enquiry or review information or provide it to others for unrelated advertising or direct marketing.
08
International processing
The website is available internationally, and infrastructure, service-provider operations or authorised access arrangements may involve processing outside the country where a visitor is located. Vercel operates global infrastructure, and service-provider or support arrangements may involve South Africa, the United States or other countries.
Where a cross-border transfer requires protection under applicable law, the relevant legal requirements and available safeguards must be considered. These may include contractual protections or another transfer mechanism recognised by applicable law. This notice does not represent that every item of information remains exclusively in South Africa or the European Economic Area.
09
Retention
An enquiry that does not become a client matter must be deleted no later than six months after the last substantive correspondence, unless continued retention is reasonably necessary for a legal obligation, security matter, complaint or the establishment, exercise or defence of legal rights.
Where an engagement is accepted, relevant information may be transferred into the professional client record and retained according to the engagement terms and applicable legal and professional requirements.
An unpublished review submission must be deleted within six months, unless it is reasonably required to resolve a complaint or question about consent. A published review and the associated consent record are retained while the review remains published and for a reasonable period necessary to demonstrate the authority for publication.
After a verified withdrawal request, Anchor will remove the public review within a reasonable period, subject to any legitimate record-retention requirement. A limited consent or withdrawal record may therefore need to be retained after public removal where reasonably necessary to demonstrate the instruction and Anchor's response.
Provider security, operational and backup records are subject to the relevant provider’s documented retention and deletion processes.
10
Security
Reasonable organisational and technical safeguards are used in light of the nature of the information and the current website architecture. These include TLS-protected transmission, authenticated SMTP delivery, server-side validation, bounded request and field sizes, and restricted access to the authorised mailbox.
No internet transmission or storage system can be guaranteed to be completely secure. The public forms are deliberately limited to a high-level enquiry or non-confidential review and must not be used to send sensitive documentation or case details.
11
Analytics and cookies
The website uses Vercel Web Analytics for anonymised, aggregated traffic measurement. It is cookieless and does not use analytics cookies. The current integration records page views using route paths and does not send form contents through Analytics.
No Google Analytics, Google Ads tag, Meta Pixel or other advertising tracker is installed at the effective date. The website therefore does not currently display a cookie banner.
This Privacy Notice and the site’s consent approach must be reviewed before Google Ads conversion tracking, Google Analytics, non-essential cookies or another advertising technology is introduced.
12
Your rights
Subject to applicable law, you may ask whether Anchor holds personal information about you, request access to it, ask for inaccurate information to be corrected, or request deletion or restriction where the legal requirements are met. You may also object to certain processing and withdraw consent where processing actually relies on consent.
A reviewer may request correction or removal of a published review, or withdraw publication consent, by contacting Anchor at the address below. Anchor may request reasonable information to verify that the request comes from the reviewer before changing or removing the public review.
These rights are not absolute. Information may sometimes need to be retained or processed to comply with law, protect another person’s rights, address a complaint or establish, exercise or defend legal rights. Reasonable information may be requested to verify your identity before a request is actioned.
Send a request to contact@anchortaxresolution.co.za. You may also complain to the Information Regulator (South Africa), including through its published POPIA complaint process.
Where the GDPR applies, additional rights may include data portability and the right to complain to the supervisory authority in the relevant European country.
13
Children
Anchor’s services and this website are not directed at children. The enquiry form does not knowingly request personal information about children. A parent, guardian or other competent person should contact Anchor directly before providing information relating to a child.
14
Changes to this notice
This notice may be updated when the website, enquiry process, service providers or applicable requirements change. Material changes will be reflected on this page by updating the effective or last-reviewed date.
Effective date: 14 August 2026
Last reviewed: 14 August 2026
