Privacy Policy & Data Protection Notice
XDew Books (xdew.co.za) is a proprietary software product engineered, owned, and operated by Governx (Pty) Ltd (Governx Technologies (Pty) Ltd, Reg. No. 2026/475655/07). We are committed to protecting your personal information and ensuring full compliance with the Protection of Personal Information Act No. 4 of 2013 (POPIA), the Promotion of Access to Information Act No. 2 of 2000 (PAIA), and the Tax Administration Act No. 28 of 2011.
1. Responsible Party & Information Officer
Governx (Pty) Ltd is the designated Responsible Party under POPIA for all data processed across the XDew Books platform (xdew.co.za). Our registered Information Officer oversees data protection, regulatory notifications, and data subject access requests:
Product: XDew Books (https://xdew.co.za)
Owning & Operating Entity: Governx (Pty) Ltd / Governx Technologies (Pty) Ltd (Reg. No. 2026/475655/07)
Physical & Postal Address: Sandton, Johannesburg, Gauteng, Republic of South Africa, 2196
Designated Information Officer: Brandon Govender
Official Support & Privacy Email: support@governx.co.za
Compliance Desk: compliance@governx.co.za
2. South African Data Sovereignty & Hosting (POPIA Section 72)
We guarantee that all personal financial records, RSA ID numbers, SARS tax credentials, bank transactions, and GPS logbook records are strictly hosted and stored within the borders of the Republic of South Africa in the Microsoft Azure South Africa North (Johannesburg) hyperscaler region.
No sensitive financial or personal identity information is transferred outside the Republic without explicit statutory adequacy and data subject consent.
3. Information We Collect & Lawful Purpose
XDew Books processes personal and corporate data solely for providing tax compliance, Section 20 VAT invoicing, and cloud ERP services:
- Identity Data: Full legal names, South African 13-digit National ID numbers, CIPC registration numbers.
- Tax Authority Data: 10-digit SARS Income Tax reference numbers, VAT registration numbers, PAYE numbers.
- Financial & ERP Data: Section 20 VAT invoices, customer/vendor profiles, bank statement feeds, general ledger journal entries.
- Travel & GPS Data: Section 8(1)(b) vehicle odometer readings, business trip start/end locations, and deemed travel rate claims.
- Tax Certificates: IRP5/IT3(a) certificates, IT3(b)/IT3(c) investment certificates, medical aid tax certificates.
4. Statutory Retention under the Tax Administration Act
Under Section 29 of the South African Tax Administration Act (Act 28 of 2011), all financial records, tax invoices, VAT returns, and audit documentation must be preserved in verifiable digital format for a statutory minimum of 5 (five) years from the date of return submission.
5. Your Rights as a Data Subject
Under POPIA Sections 23, 24, and 25, you have the right to:
- Request access to your personal information held by XDew Books / Governx (Pty) Ltd.
- Request correction or updating of inaccurate personal records.
- Request destruction or deletion of personal data subject to statutory 5-year SARS tax retention rules.
- Submit data access requests directly to our support desk: support@governx.co.za.
- Lodge a complaint with the South African Information Regulator (inforeg@justice.gov.za / complaints.IR@justice.gov.za).