Privacy Policy
This explains what personal information Ledger Room collects, why, who else handles it, and what you can ask me to do about it. It covers both visitors to this website and clients whose books I keep.
1. Who is responsible
Annelli Deyzel, trading as Ledger Room, of Saint Helena Bay, South Africa, is the responsible party for the information described here, and is the person to contact about it. Details are in clause 11.
2. Visiting this website
There is no analytics on this site. No Google Analytics, no advertising pixels, no tracking of what you read or how long you stay. Nobody is building a profile of you here.
The site sets no cookies of its own. The one exception is the anti-spam check described in clause 4, which may store a short-lived token in your browser as part of confirming that a form submission came from a person.
Like any website, the server records ordinary request logs — the page requested, the time, the browser's user agent and the IP address it came from. These are a by-product of serving the site.
3. The enquiry form
If you complete the form on the contact section, I receive whatever you enter in it:
- Your name, and your company name if you give one
- Your email address, and your phone number if you give one
- What your books are currently kept in
- Whatever you write in the message field
I use it for one thing: to reply to your enquiry and, if we go ahead, to set up the work. It is not added to a mailing list, and it is not sold, shared or passed to anyone for marketing.
Sending the form also triggers an automatic confirmation email back to the address you gave, so you know the enquiry arrived.
4. Keeping the form free of spam
Two things guard the form. A hidden field that only automated submissions tend to fill in, and Cloudflare Turnstile, a privacy-focused alternative to a CAPTCHA. Turnstile receives your IP address and some technical signals about your browser in order to judge whether the request is automated. It is not used to identify you or to track you across sites.
The server also counts recent submissions per IP address to blunt floods. That count is held in memory only, is not written to disk, and disappears on its own.
5. Who else handles your information
I use a small number of service providers to run the site and get email delivered. Each processes data on my instructions and for no other purpose:
- Vercel
- Hosts the website and runs the code behind the enquiry form. Handles request logs.
- Resend
- Delivers the enquiry email to me and the confirmation email to you.
- Cloudflare
- Provides the Turnstile anti-spam check described above.
- Google Fonts
- Serves the typeface this site is set in. Loading a page therefore makes a request to Google's servers, which discloses your IP address to Google.
These providers operate servers outside South Africa, so serving this site and delivering its email involves transferring information across borders. I have chosen established providers that undertake to protect the information they process for their customers.
6. If you become a client
Doing the work means handling considerably more: bank and card statements, supplier and customer invoices, and — where I run your payroll — personal information about your employees, including identity and tax reference numbers and what they are paid.
I process that only to deliver the services you have engaged me for, and to meet obligations that fall on me by law. Where your books live in your own accounting or payroll platform, the information stays there and I work inside it. Where I hold copies, I keep them to what the work needs.
For employee information in particular, you are the responsible party and I am acting on your instruction as an operator.
7. How long it is kept
Enquiries that do not become work are kept while the conversation is live and for a reasonable period afterwards, then deleted. Client records are kept for as long as the work requires and for as long as South African law requires records of that kind to be retained, which is generally several years after the tax year they relate to.
8. Security
I ask for read-only access to bank feeds and accounting files, never access that would let me move money. Access is limited to what a piece of work actually needs, and is revoked when an engagement ends.
No system is perfectly secure, and I would rather say that plainly than imply otherwise. If something goes wrong that affects your information, I will tell you, and I will notify the Information Regulator where the law requires it.
9. Your rights
Under the Protection of Personal Information Act you may ask me to:
- Tell you what personal information I hold about you
- Correct anything that is wrong or out of date
- Delete information I no longer have grounds to keep
- Stop processing it for a particular purpose
Ask by email and I will respond. Some records I am obliged to keep for a period even if asked to delete them; where that applies I will say so and explain why.
If you are not satisfied with how I have handled a request, you may complain to the Information Regulator of South Africa. You can also ask for records under the Promotion of Access to Information Act — the PAIA manual sets out how.
10. Changes
If this policy changes, the date at the top changes with it. Material changes affecting existing clients will be communicated directly rather than left to be noticed.
11. Getting hold of me
- annelli [at] ledgerroom [dot] pro
- Office
- oh-two-one double-oh-seven oh-four-two-eight
- Based in
- Saint Helena Bay, South Africa — serving clients remotely