Last updated 25 October 2026

POPIA and PAIA

How we meet the Protection of Personal Information Act (POPIA) and the Promotion of Access to Information Act (PAIA), and how you can exercise your rights.

Our Information Officer

Nathan Mabasa
hello@nathanmabasa.com

How LedgerMate follows the eight POPIA conditions

1. Accountability: we have an Information Officer and keep a record of how personal information is processed.
2. Processing limitation: we collect only what LedgerMate needs. Bank statement files are read on your device and never uploaded.
3. Purpose specification: each use is listed in our privacy policy, with how long we keep the information.
4. Further processing limitation: we do not use your information for unrelated purposes. Optional sharing is off unless you switch it on.
5. Information quality: you can correct your details and records in the app at any time.
6. Openness: this page and our privacy policy explain what we do, in plain language.
7. Security safeguards: encryption in transit, database-enforced separation between businesses, append-only ledgers and limited staff access. See security.
8. Data subject participation: you can download your data, ask for corrections or deletion, and object, as set out below.

Making a POPIA request

Email hello@nathanmabasa.com from the address linked to your account, saying what you would like: a copy of your information, a correction, deletion, or to object to or restrict processing. We may ask you to confirm your identity. We will respond within a reasonable time and, where the law sets a period, within it. Most requests are free.

If you are a customer of a business that uses LedgerMate, please contact that business first: it decides how your information is used, and we will help it respond.

You can lodge a complaint with the Information Regulator at inforegulator.org.za or POPIAComplaints@inforegulator.org.za.

Security incidents

If personal information is accessed or acquired by an unauthorised person, we will notify the Information Regulator and the people affected as soon as reasonably possible, as section 22 of POPIA requires.

PAIA manual

This section serves as our manual under section 51 of PAIA.

• Private body: Nathan Mabasa, trading as LedgerMate, hello@nathanmabasa.com.
• Information Officer: Nathan Mabasa.
• Guide: the Information Regulator publishes a guide on how to use PAIA, available from inforegulator.org.za.
• Records we hold: company and statutory records, financial and tax records, contracts with operators, user account records and support correspondence.
• Records available without a request: this page, our privacy policy and terms of service.
• How to request access: complete the prescribed PAIA request form (Form 2, available from the Information Regulator) and send it to hello@nathanmabasa.com. A request fee and access fees may apply as set out in the PAIA regulations. We will respond within 30 days, or tell you if we need to extend this as PAIA allows.
• Processing of personal information: the purposes, categories of data subjects and information, recipients, cross-border transfers and security measures are described in our privacy policy.