TaxTim Website Privacy Policy
Effective date: 18 June 2026
This Privacy Policy explains how TaxTim collects, uses, stores, shares and protects your personal information when you use the Website and the related TaxTim services. It forms part of TaxTim's website Terms and Conditions of Use (the "Terms") and should be read together with them. Words defined in the Terms have the same meaning in this Privacy Policy unless the context indicates otherwise.1. Definitions and Interpretation
1.1. "TaxTim" is the product of Human Robot (Pty) Ltd, trading as "TaxTim" ("Human Robot"). Human Robot is the responsible party for the processing of personal information through the Website and the TaxTim services. Human Robot's full contact details and Information Officer are set out in the "Your Rights, Queries and Contact Details" section below.
1.2. "Personal Information" means information relating to an identifiable, living, natural person and, where applicable, an identifiable, existing juristic person, including all information as defined in the Protection of Personal Information Act 4 of 2013 (POPIA).
1.3. "POPIA" means the Protection of Personal Information Act 4 of 2013, together with its regulations, as amended from time to time.
1.4. "Processing" means the creation, generation, communication, storage or destruction of personal information, as more fully defined in POPIA.
1.5. "TimAI" means TaxTim's artificial intelligence tax assistant, as described in the Terms and in this Privacy Policy.
1.6. "You" or the "user" means any person who accesses and browses this Website for any purpose.
1.7. "Website" means the website of TaxTim at the URL www.taxtim.com, or such other URL as may be chosen from time to time.
2. Status and Amendments
1.2. "Personal Information" means information relating to an identifiable, living, natural person and, where applicable, an identifiable, existing juristic person, including all information as defined in the Protection of Personal Information Act 4 of 2013 (POPIA).
1.3. "POPIA" means the Protection of Personal Information Act 4 of 2013, together with its regulations, as amended from time to time.
1.4. "Processing" means the creation, generation, communication, storage or destruction of personal information, as more fully defined in POPIA.
1.5. "TimAI" means TaxTim's artificial intelligence tax assistant, as described in the Terms and in this Privacy Policy.
1.6. "You" or the "user" means any person who accesses and browses this Website for any purpose.
1.7. "Website" means the website of TaxTim at the URL www.taxtim.com, or such other URL as may be chosen from time to time.
2.1. TaxTim respects your privacy. This Privacy Policy sets out TaxTim's information gathering and dissemination practices in respect of the Website.
2.2. This Privacy Policy governs the processing of personal information provided to TaxTim through your use of the Website, and forms part of the Terms.
2.3. Please note that, due to legal and other developments, TaxTim may amend this Privacy Policy from time to time. The version effective at any time is indicated by the effective date in the title of this Privacy Policy. It is your duty to remain apprised of the current version. The date indicated in the heading is the effective date that governs your use of the Website from that date until the next revision becomes effective.
2.4. TaxTim will post any updated Privacy Policy on the Website, and the updated version will apply from its effective date. Your use of the Website is subject to the Privacy Policy in effect at the time.
3. Processing of Personal Information
2.2. This Privacy Policy governs the processing of personal information provided to TaxTim through your use of the Website, and forms part of the Terms.
2.3. Please note that, due to legal and other developments, TaxTim may amend this Privacy Policy from time to time. The version effective at any time is indicated by the effective date in the title of this Privacy Policy. It is your duty to remain apprised of the current version. The date indicated in the heading is the effective date that governs your use of the Website from that date until the next revision becomes effective.
2.4. TaxTim will post any updated Privacy Policy on the Website, and the updated version will apply from its effective date. Your use of the Website is subject to the Privacy Policy in effect at the time.
3.1. TaxTim processes personal information only where POPIA permits this, including where the processing is necessary to provide the Services to you, to comply with a legal obligation, to pursue a legitimate interest, or where you have given your consent. Where you provide personal information to TaxTim, you confirm that you are authorised to do so and that the information is accurate.
3.2. Legal grounds for processing
TaxTim processes personal information only where a lawful ground for processing under section 11 of POPIA applies. These grounds include where the processing:
4. TimAI
3.2. Legal grounds for processing
TaxTim processes personal information only where a lawful ground for processing under section 11 of POPIA applies. These grounds include where the processing:
3.2.1. is necessary to conclude or perform a contract with you, including to provide the Website and the Services;
3.2.2. is carried out with your consent;
3.2.3. is necessary to comply with a legal obligation imposed on TaxTim, including under tax legislation;
3.2.4. protects a legitimate interest of TaxTim, you or a third party; or
3.2.5. is otherwise permitted under POPIA.
3.3. Where you submit Personal Information (such as name, address, telephone number and email address) via the Website (for example, through completing any online form), the following principles are observed in the processing of that information:
3.2.2. is carried out with your consent;
3.2.3. is necessary to comply with a legal obligation imposed on TaxTim, including under tax legislation;
3.2.4. protects a legitimate interest of TaxTim, you or a third party; or
3.2.5. is otherwise permitted under POPIA.
3.3.1. TaxTim will only collect personal information for a purpose consistent with the purpose for which it is required. The specific purpose for which information is collected will be apparent from the context in which it is requested.
3.3.2. TaxTim will only process personal information in a manner that is adequate, relevant and not excessive in the context of the purpose for which it is processed.
3.3.3. Personal information will only be processed for a purpose compatible with that for which it was collected, unless you have agreed to an alternative purpose in writing or TaxTim is permitted to do so under national legislation dealing primarily with the protection of personal information.
3.3.4. TaxTim will retain tax returns, supporting documents and related tax records for the periods required or permitted under the Tax Administration Act, 2011, other applicable tax legislation, contractual obligations or legitimate evidentiary requirements. As a general rule, records relevant to a Tax Return must be retained for at least five years from the date the return is submitted, and longer where an audit, objection, dispute or investigation is ongoing. Different categories of information may be subject to different retention periods. TimAI conversations, system logs, helpdesk correspondence and account information will be retained only for as long as reasonably required for the purpose for which they were collected, as required by law, or as needed for an unresolved tax, legal or security matter.
3.3.5. TaxTim may disclose personal information to service providers that process information on TaxTim's behalf, where this is necessary to provide, host, secure or support the TaxTim service. TaxTim may also disclose information where required by law, with your consent, or where otherwise permitted under POPIA. TaxTim requires service providers processing personal information on its behalf to maintain appropriate confidentiality and security safeguards.
3.3.6. Where you use TaxTim to file a Tax Return (including via the T-filing service described in the Terms), you authorise TaxTim to submit the relevant tax information to the South African Revenue Service (SARS) for that purpose.
3.3.7. If personal information is released with your consent, TaxTim will retain a record of the information released, the third party to which it was released, the reason for the release and the date of release, for a period of 1 (one) year from the date on which it was last used.
3.3.8. TaxTim will destroy or delete any personal information that is no longer needed for the purpose for which it was initially collected, or subsequently processed, unless TaxTim is required or permitted to retain it by law or for an unresolved matter.
3.3.9. TaxTim uses your information, including any personal information, to fulfil the purposes for which you provide it, any purpose described to you at the time it is collected, any purpose for which your consent is given, or to improve or enhance the user's website experience and TaxTim's operations and obligations.
3.3.10. The appropriate method(s) for accessing your information, if any, will depend on which of TaxTim's websites and services you have visited or used. Depending on the website and service, you may be able to view or edit some of your information online by logging into the Website and visiting your account profile page. If you remove information from your user profile, it may remain in backups on TaxTim's servers for a period before being completely removed. Once deleted, your account cannot be restored.
3.3.11. Content generated by the public, such as helpdesk questions and Q&A posts, will not necessarily be deleted. Such posted content may instead be attributed to an "Anonymous" user.
3.4. As permitted by the Electronic Communications and Transactions Act 25 of 2002, TaxTim may use personal information collected to compile profiles for statistical purposes. No information contained in the profiles or statistics will be able to be linked to any specific user.
3.3.2. TaxTim will only process personal information in a manner that is adequate, relevant and not excessive in the context of the purpose for which it is processed.
3.3.3. Personal information will only be processed for a purpose compatible with that for which it was collected, unless you have agreed to an alternative purpose in writing or TaxTim is permitted to do so under national legislation dealing primarily with the protection of personal information.
3.3.4. TaxTim will retain tax returns, supporting documents and related tax records for the periods required or permitted under the Tax Administration Act, 2011, other applicable tax legislation, contractual obligations or legitimate evidentiary requirements. As a general rule, records relevant to a Tax Return must be retained for at least five years from the date the return is submitted, and longer where an audit, objection, dispute or investigation is ongoing. Different categories of information may be subject to different retention periods. TimAI conversations, system logs, helpdesk correspondence and account information will be retained only for as long as reasonably required for the purpose for which they were collected, as required by law, or as needed for an unresolved tax, legal or security matter.
3.3.5. TaxTim may disclose personal information to service providers that process information on TaxTim's behalf, where this is necessary to provide, host, secure or support the TaxTim service. TaxTim may also disclose information where required by law, with your consent, or where otherwise permitted under POPIA. TaxTim requires service providers processing personal information on its behalf to maintain appropriate confidentiality and security safeguards.
3.3.6. Where you use TaxTim to file a Tax Return (including via the T-filing service described in the Terms), you authorise TaxTim to submit the relevant tax information to the South African Revenue Service (SARS) for that purpose.
3.3.7. If personal information is released with your consent, TaxTim will retain a record of the information released, the third party to which it was released, the reason for the release and the date of release, for a period of 1 (one) year from the date on which it was last used.
3.3.8. TaxTim will destroy or delete any personal information that is no longer needed for the purpose for which it was initially collected, or subsequently processed, unless TaxTim is required or permitted to retain it by law or for an unresolved matter.
3.3.9. TaxTim uses your information, including any personal information, to fulfil the purposes for which you provide it, any purpose described to you at the time it is collected, any purpose for which your consent is given, or to improve or enhance the user's website experience and TaxTim's operations and obligations.
3.3.10. The appropriate method(s) for accessing your information, if any, will depend on which of TaxTim's websites and services you have visited or used. Depending on the website and service, you may be able to view or edit some of your information online by logging into the Website and visiting your account profile page. If you remove information from your user profile, it may remain in backups on TaxTim's servers for a period before being completely removed. Once deleted, your account cannot be restored.
3.3.11. Content generated by the public, such as helpdesk questions and Q&A posts, will not necessarily be deleted. Such posted content may instead be attributed to an "Anonymous" user.
4.1. TaxTim provides an artificial intelligence assistant known as TimAI.
4.2. TimAI may process information contained in your TaxTim profile, current Tax Return, prior Tax Returns and your conversation with TimAI in order to answer tax-related questions and assist you while using TaxTim.
4.3. TimAI may explain tax rules, perform calculations, identify information or supporting documents that may be required, and flag matters that may need further attention.
4.4. TimAI is an artificial intelligence system and may make mistakes. Its responses depend on the information available to it and the information you provide.
4.5. TimAI does not independently submit your Tax Return, make binding decisions on your behalf or replace a registered tax practitioner where professional review is required.
4.6. You should avoid entering personal information into TimAI that is not relevant to your tax question.
4.7. TaxTim may retain TimAI conversations for the purposes of providing support, maintaining security, investigating errors and improving the TaxTim service, subject to TaxTim's retention procedures.
4.8. TaxTim does not use identifiable tax return information or identifiable TimAI conversations to train third-party AI foundation models unless you have expressly agreed to this. TaxTim may use de-identified, aggregated or internal operational information to monitor, secure, troubleshoot and improve the TaxTim service, provided that this is done in accordance with POPIA.
5. Service providers and operators
4.2. TimAI may process information contained in your TaxTim profile, current Tax Return, prior Tax Returns and your conversation with TimAI in order to answer tax-related questions and assist you while using TaxTim.
4.3. TimAI may explain tax rules, perform calculations, identify information or supporting documents that may be required, and flag matters that may need further attention.
4.4. TimAI is an artificial intelligence system and may make mistakes. Its responses depend on the information available to it and the information you provide.
4.5. TimAI does not independently submit your Tax Return, make binding decisions on your behalf or replace a registered tax practitioner where professional review is required.
4.6. You should avoid entering personal information into TimAI that is not relevant to your tax question.
4.7. TaxTim may retain TimAI conversations for the purposes of providing support, maintaining security, investigating errors and improving the TaxTim service, subject to TaxTim's retention procedures.
4.8. TaxTim does not use identifiable tax return information or identifiable TimAI conversations to train third-party AI foundation models unless you have expressly agreed to this. TaxTim may use de-identified, aggregated or internal operational information to monitor, secure, troubleshoot and improve the TaxTim service, provided that this is done in accordance with POPIA.
5.1. TaxTim uses third-party service providers (operators) to host, operate, secure and support the TaxTim service.
5.2. These providers may include cloud-hosting providers, software developers, payment providers, communication platforms, analytics providers, security providers, tax practitioners and artificial intelligence service providers.
5.3. Where a service provider processes personal information on behalf of TaxTim, TaxTim requires that provider to process the information only under TaxTim's authority and to maintain appropriate confidentiality and security safeguards, in accordance with POPIA.
5.4. TaxTim does not sell users' personal information.
6. Cross-border processing
5.2. These providers may include cloud-hosting providers, software developers, payment providers, communication platforms, analytics providers, security providers, tax practitioners and artificial intelligence service providers.
5.3. Where a service provider processes personal information on behalf of TaxTim, TaxTim requires that provider to process the information only under TaxTim's authority and to maintain appropriate confidentiality and security safeguards, in accordance with POPIA.
5.4. TaxTim does not sell users' personal information.
6.1. Some of TaxTim's service providers, or their infrastructure, may process personal information outside South Africa.
6.2. Where personal information is transferred or processed outside South Africa, TaxTim will take reasonable steps to ensure that the transfer complies with section 72 of POPIA.
6.3. Tax records that are subject to the Tax Administration Act, 2011 will be retained in accordance with that Act, including any requirement that such records be stored in South Africa unless SARS has authorised otherwise.
6.4. TaxTim will not represent that TimAI information remains entirely within South Africa unless both the storage location and the location in which the information is processed have been confirmed.
7. Automated decision-making
6.2. Where personal information is transferred or processed outside South Africa, TaxTim will take reasonable steps to ensure that the transfer complies with section 72 of POPIA.
6.3. Tax records that are subject to the Tax Administration Act, 2011 will be retained in accordance with that Act, including any requirement that such records be stored in South Africa unless SARS has authorised otherwise.
6.4. TaxTim will not represent that TimAI information remains entirely within South Africa unless both the storage location and the location in which the information is processed have been confirmed.
7.1. TimAI is intended to provide guidance, explanations and calculations.
7.2. TimAI does not independently make or implement a decision that has legal consequences for a user, as contemplated in section 71 of POPIA.
7.3. You remain responsible for checking the information entered into a Tax Return and deciding whether the return should be submitted.
8. Cookies and Usage Information
7.2. TimAI does not independently make or implement a decision that has legal consequences for a user, as contemplated in section 71 of POPIA.
7.3. You remain responsible for checking the information entered into a Tax Return and deciding whether the return should be submitted.
8.1. When you use the Website, TaxTim collects certain information about your use of it. Some of this information, including IP addresses, cookie identifiers and advertising or remarketing identifiers, may constitute personal information and is treated in accordance with this Privacy Policy.
8.2. TaxTim uses cookies and similar technologies. A cookie is a small file placed on your device in order to keep a record of your interaction with the Website and to facilitate user convenience. The cookies and similar technologies used fall into the following categories:
8.5. This Website uses the Google Ads remarketing service to advertise on third-party websites (including Google) to previous visitors to the Website. Third-party vendors, including Google, use cookies to serve ads based on a user's past visits to the Website. Any data collected will be used in accordance with this Privacy Policy and Google's privacy policy. You can set your advertising preferences using the Google Ad Settings page, and you can opt out of interest-based advertising through your cookie settings or by using a browser plugin.
9. Direct marketing
8.2. TaxTim uses cookies and similar technologies. A cookie is a small file placed on your device in order to keep a record of your interaction with the Website and to facilitate user convenience. The cookies and similar technologies used fall into the following categories:
8.2.1. necessary cookies, which are required for the Website to function and, for example, to recognise you after you have logged in;
8.2.2. analytics cookies, which help TaxTim understand how the Website is used and compile de-identified statistics on its performance; and
8.2.3. advertising and remarketing cookies, which TaxTim and third-party vendors (including Google) use to display relevant advertising to you on third-party websites based on your past visits to the Website.
8.3. The classes of usage information that may be collected include:
8.2.2. analytics cookies, which help TaxTim understand how the Website is used and compile de-identified statistics on its performance; and
8.2.3. advertising and remarketing cookies, which TaxTim and third-party vendors (including Google) use to display relevant advertising to you on third-party websites based on your past visits to the Website.
8.3.1. the browser software used;
8.3.2. IP address;
8.3.3. the date and time of activities while visiting the Website;
8.3.4. the URLs of internal pages visited; and
8.3.5. referrers.
8.4. You can change the way your browser handles cookies and, where available, disable non-essential cookies and opt out of remarketing. Please note that, if you do so, certain services on the Website may not be available.
8.3.2. IP address;
8.3.3. the date and time of activities while visiting the Website;
8.3.4. the URLs of internal pages visited; and
8.3.5. referrers.
8.5. This Website uses the Google Ads remarketing service to advertise on third-party websites (including Google) to previous visitors to the Website. Third-party vendors, including Google, use cookies to serve ads based on a user's past visits to the Website. Any data collected will be used in accordance with this Privacy Policy and Google's privacy policy. You can set your advertising preferences using the Google Ad Settings page, and you can opt out of interest-based advertising through your cookie settings or by using a browser plugin.
9.1. TaxTim may send you newsletters and information about its Services. Where required by section 69 of POPIA, TaxTim will only send electronic direct marketing with your consent or as otherwise permitted by law.
9.2. Every electronic marketing communication will include a means to unsubscribe, and you may opt out at any time through the unsubscribe link provided or by contacting TaxTim.
10. Security
9.2. Every electronic marketing communication will include a means to unsubscribe, and you may opt out at any time through the unsubscribe link provided or by contacting TaxTim.
10.1. TaxTim takes reasonable technical and organisational measures to secure the integrity and confidentiality of personal information submitted to or collected by this Website, and to prevent unauthorised access to, or loss, damage or unauthorised destruction of, that information. However, TaxTim cannot, save to the extent required by law, be held liable for any loss or other damage sustained by you as a result of unlawful access to, or dissemination of, any personal information by a third party.
10.2. Given the sensitive nature of tax and financial information, TaxTim treats it as confidential and applies appropriate care. Some tax information you provide may include special personal information, such as health or disability information, or the personal information of children or dependants. TaxTim processes such information only where POPIA permits it, including where necessary to provide the tax service requested by you, to comply with tax legislation, to establish or exercise rights or obligations in law, or where appropriate consent has been obtained.
10.3. In the event of a security compromise affecting your personal information, TaxTim will notify the Information Regulator and the affected users as soon as reasonably possible after becoming aware of it, in accordance with section 22 of POPIA.
11. Links to other websites
10.2. Given the sensitive nature of tax and financial information, TaxTim treats it as confidential and applies appropriate care. Some tax information you provide may include special personal information, such as health or disability information, or the personal information of children or dependants. TaxTim processes such information only where POPIA permits it, including where necessary to provide the tax service requested by you, to comply with tax legislation, to establish or exercise rights or obligations in law, or where appropriate consent has been obtained.
10.3. In the event of a security compromise affecting your personal information, TaxTim will notify the Information Regulator and the affected users as soon as reasonably possible after becoming aware of it, in accordance with section 22 of POPIA.
11.1. TaxTim has no control over, and accepts no responsibility for, the privacy practices of any third-party websites to which hyperlinks may have been provided. TaxTim strongly recommends that you review the privacy policy of any website you visit before using it further.
12. Your Rights, Queries and Contact Details
12.1. Responsible party: TaxTim is operated by Human Robot (Pty) Ltd, trading as "TaxTim" (registration number 2010/018772/07), with its principal place of business at Workshop17, 32 Kloof St, Gardens, Cape Town, 8001, South Africa. Human Robot is the responsible party for personal information processed through the Website and the TaxTim services.
12.2. Information Officer: TaxTim's Information Officer can be contacted at , +27 21 461 5007.
12.3. If you have any query about this Privacy Policy, or wish to exercise any of your rights, please contact TaxTim by emailing ops@taxtim.com.
12.4. In accordance with POPIA, you may:
12.6. You also have the right to lodge a complaint with the Information Regulator of South Africa if you believe your personal information has been processed unlawfully. POPIA complaints may be sent to POPIAComplaints@inforegulator.org.za. The Regulator's general contact details include +27 (0)10 023 5200 and enquiries@inforegulator.org.za.
12.2. Information Officer: TaxTim's Information Officer can be contacted at , +27 21 461 5007.
12.3. If you have any query about this Privacy Policy, or wish to exercise any of your rights, please contact TaxTim by emailing ops@taxtim.com.
12.4. In accordance with POPIA, you may:
12.4.1. request access to the personal information TaxTim holds about you (section 23 of POPIA);
12.4.2. request correction or deletion of personal information that is inaccurate, irrelevant, excessive, out of date or unlawfully obtained (section 24 of POPIA);
12.4.3. object, on reasonable grounds, to the processing of your personal information; and
12.4.4. where processing is based on your consent, withdraw that consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.
12.5. Some information cannot be deleted immediately where TaxTim is required to retain it under tax legislation, another law, an unresolved dispute or a legitimate evidentiary requirement.
12.4.2. request correction or deletion of personal information that is inaccurate, irrelevant, excessive, out of date or unlawfully obtained (section 24 of POPIA);
12.4.3. object, on reasonable grounds, to the processing of your personal information; and
12.4.4. where processing is based on your consent, withdraw that consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.
12.6. You also have the right to lodge a complaint with the Information Regulator of South Africa if you believe your personal information has been processed unlawfully. POPIA complaints may be sent to POPIAComplaints@inforegulator.org.za. The Regulator's general contact details include +27 (0)10 023 5200 and enquiries@inforegulator.org.za.