Quote Direct (Pty) Ltd — POPIA Compliant
Quote Direct (Pty) Ltd ("we", "us", "our") is committed to protecting your personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA) and other applicable South African privacy legislation.
We collect information you provide when registering, including your name, email address, company name, and contact details. We also collect usage data and information about your customers that you enter into the platform.
If you use the accountant portal, we collect your name, email address and phone number; your practice's name, contact details, professional body and membership number; the bank details your practice gives us to receive commission; when you accepted our terms; sign-in records; and the questions and messages you exchange with businesses.
We use your information to provide and improve the QuoteDirect service, process payments, send service-related communications, and comply with legal obligations. We do not sell your personal information to third parties.
Service-related communications include sign-in and verification codes, invitations, notices about your account and, for accounting practices, a weekly summary email that the practice can switch off.
As a responsible party under POPIA, we process personal information lawfully and transparently. You have the right to access, correct, or request deletion of your personal information by contacting us at info@quotedirect.co.za.
When you store your customers' personal information in QuoteDirect, you act as the responsible party for that data. We process it as an operator on your behalf and will not use it for any purpose other than providing the service to you.
If your business gives an accounting practice access through Settings → Accountant Access (or when signing up from a practice's invitation), you are instructing us to make your accounting records available to that practice. These include invoices, credit notes, payments, expenses and receipts, documents you upload for your accountants (such as bank statements, which contain your account details and transactions), and the personal information of your customers and suppliers that appears in them. We do this only for practices you have chosen, and only while access is in place.
Documents your accountant shares with you, and records of VAT201 returns your accountant marks as filed, are stored with your business's records and stay with you after access is withdrawn. You can delete documents from Settings → Accountant Access → Documents at any time.
You can see which practices have access and withdraw it at any time. Withdrawal stops the practice's access immediately. The practice is responsible, under POPIA and its professional obligations, for how it handles information it has already downloaded.
Questions your accountant asks, your replies and any files you attach are stored with your business's records. They remain visible to you after access is withdrawn.
We use the information of practice members to provide the accountant portal: to sign them in, to show businesses who has access to their books, to record in each business's activity log what the practice did, and to send portal emails. We use a practice's bank details only to pay its commission.
To work out commission, we record which practice a business signed up through and the amount of each subscription payment it makes. The practice sees the business's name, whether it is earning commission, and the commission amounts — not the business's other billing details.
Notes and checklists a practice keeps about a business are stored for that practice only and are never shown to the business or to other practices. The practice decides what to write in them and is responsible for it under POPIA.
When a practice invites a business to QuoteDirect, we use the email address, business name and contact name the practice gives us only to send that invitation and to fill in the sign-up form. Invitations expire after 30 days. We tell the practice when the business signs up and whether it chose to give the practice access.
A practice that receives a business's information is itself responsible, under POPIA, for how it uses, stores and deletes that information.
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. All data is transmitted over encrypted connections (HTTPS). Accountant portal logins can only reach the books of businesses that have given that practice access, and access is checked on every request. Documents exchanged with an accountant are never available through a public link: they can only be downloaded by someone signed in to the business's account or to a practice with access, and each download by a practice is recorded.
We retain your personal information for as long as your account is active or as needed to provide the service. Upon account termination, data is retained for a reasonable period before deletion, unless you request earlier deletion.
Accountant portal accounts are retained while the practice uses the portal. A practice can ask us to close its account at any time.
We use third-party services including PayFast for payment processing. These services have their own privacy policies and we encourage you to review them. We only share data with third parties as necessary to provide the service, and with accounting practices that you have chosen to give access.
QuoteDirect uses essential cookies and browser storage for authentication and session management. We do not use tracking or advertising cookies.
You have the right to be notified of the collection of your information, access your personal information, correct inaccurate information, and object to the processing of your information in certain circumstances.
For privacy-related queries or to exercise your POPIA rights, contact our Information Officer at info@quotedirect.co.za.
We may update this Privacy Policy from time to time. We will notify you of significant changes via email. The updated policy will be effective immediately upon posting.
Last updated: 13 October 2026