LN Xokiyana Attorneys ("we", "us", "the firm") is committed to protecting your personal information. This policy explains what we collect, why we collect it, how we use it, and the rights you have under the Protection of Personal Information Act, 2013 ("POPIA").
1. Information we collect
We collect personal information you provide directly to us, including when you complete our contact form, call our offices, email us, or engage us to represent you. This may include:
- Your name, email address, and telephone number
- The nature of your legal matter, as described by you
- Any documents or correspondence you send to us
- Billing and payment information, where applicable
When you visit our website, we may also automatically collect limited technical information such as your IP address, browser type, device type, and pages visited. This information is aggregated and used to keep the website secure and functioning correctly.
2. How we use your information
We use your personal information to:
- Respond to your enquiries and provide legal advice
- Represent you in legal proceedings and negotiations
- Comply with our legal, regulatory, and professional obligations
- Maintain accurate client records and billing
- Improve the quality and security of our services
We do not sell, rent, or trade your personal information. We do not use your information for marketing purposes unless you have specifically consented to receive communications from us.
3. Legal basis for processing
Under POPIA, we process your personal information on one or more of the following bases:
- Contract — to perform our engagement with you
- Legal obligation — to comply with applicable law and professional rules
- Legitimate interest — to operate and protect our practice
- Consent — where you have expressly given it, for example for marketing
5. How long we keep it
We retain client files for the period required by the Legal Practice Council and applicable professional rules — generally at least five years after the conclusion of a matter, and longer where required by law or where a claim may still arise. Once the retention period ends, we securely destroy or de-identify the information.
6. How we protect it
We take reasonable technical and organisational measures to protect your personal information against loss, unauthorised access, and misuse. These include access controls on our systems, encrypted communication, secure storage of physical files, and confidentiality obligations on our staff and service providers. No system is completely secure, and we cannot guarantee absolute security, but we act promptly on any incident that may affect your information.
7. Your rights
Under POPIA, you have the right to:
- Request access to the personal information we hold about you
- Request correction or deletion of information that is inaccurate, irrelevant, or no longer needed
- Object to processing in certain circumstances
- Withdraw consent where processing is based on consent
- Lodge a complaint with the Information Regulator of South Africa
To exercise any of these rights, contact our Information Officer using the details at the end of this policy.
9. Children
Our services are directed to adults. We do not knowingly collect personal information from children under 18, except where a child is a party to a matter on which we are instructed and a parent or legal guardian has provided consent.
10. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be communicated to active clients directly.
11. Contact us
For any question about this policy, or to exercise your rights, please contact our Information Officer:
Information Officer
Office 30
Chess international building,
20 Devereux Avenue,
Vincent, East London
You also have the right to lodge a complaint with the Information Regulator of South Africa.