POPIA notice.

The Protection of Personal Information Act 4 of 2013 (POPIA) regulates the processing of personal information. This notice explains the rights and processing considerations relevant to enquiries received by Lenkoe Attorneys Incorporated Read it together with our privacy policy, which describes the website’s collection channels and purposes.

Publishing a notice is only one part of compliance. It does not certify that an Information Officer has been registered, that a PAIA manual has been adopted or that all operator agreements, security measures and transfer safeguards have been verified. Those matters require the firm’s operational implementation and review. This notice is not itself the firm’s section 51 PAIA manual.

Lenkoe Attorneys Incorporated determines the purposes of processing enquiries made to the firm. Contact the firm at info@lenkoeattorneys.co.za or 010 012 3361. Its Johannesburg contact office is 35 Fricker Road, Ethos Building, Illovo, Sandton, 2196. Use “POPIA / Information Officer request” in your email subject so that your request can be directed appropriately.

The firm’s registered Information Officer details have not been independently supplied for this website notice. The general contact channel is not represented as proof of registration or designation. You may request the current officer’s details and PAIA manual from the firm. A director’s biography alone must not be taken as confirmation of the registered officer for all purposes.

Personal information includes information relating to an identifiable living natural person and, where applicable, an identifiable existing juristic person. It can include contact details, identifiers, opinions, correspondence and information about employment, finances or legal circumstances. Information does not cease to be personal merely because it appears in a public record.

Processing includes collecting, receiving, recording, organising, storing, retrieving, consulting, using, transmitting, restricting, deleting or destroying information. Website forms, enquiry storage, administrator access and external AI processing can therefore all be processing activities. Each must be assessed against its purpose and applicable lawful ground.

POPIA’s conditions include accountability, processing limitation, purpose specification, further-processing limitation, information quality, openness, security safeguards and data-subject participation. The responsible party must ensure that the conditions and appropriate measures are complied with when determining processing purposes and means.

Information must be processed lawfully and reasonably without unjustifiably infringing privacy. It must be adequate, relevant and not excessive for its purpose. The firm’s website requests a broad description of your legal-support need; it does not require a full evidentiary file at first contact. Please avoid disclosing unnecessary information about yourself or others.

The lawful grounds in section 11 are not interchangeable with unrestricted consent. Where consent is used, it must meet the statutory standard and can be withdrawn for future processing. Where another ground applies, the firm should be able to explain it in relation to the specific purpose. An objection to processing must be evaluated in accordance with the Act.

Contact and consultation information is collected to assess and respond to enquiries, communicate with you and discuss possible arrangements. Appointment preferences and legal-support interests help identify what you are requesting. Required form fields are necessary to send that form; using the website is voluntary. Without adequate contact details, the firm may not be able to follow up.

Before or at collection, subject to section 18 and its exceptions, the responsible party must take reasonably practicable steps to make you aware of the information collected, its source where not collected from you, the responsible party’s identity and address, the purpose, whether supply is voluntary or mandatory, consequences of failing to supply it and any law authorising or requiring collection.

Relevant information about recipients, cross-border transfers, rights of access and rectification, objection and complaint channels must also be provided as appropriate. The privacy policy gives more detail on website providers and communication channels. Ask for clarification if a proposed use is not explained.

POPIA gives additional protection to special personal information, including information about religious or philosophical beliefs, race or ethnic origin, trade-union membership, political persuasion, health, sex life, biometric information and criminal behaviour in the circumstances described by the Act. Legal matters can involve such information, but a general enquiry is not a reason to collect it without assessment.

Processing special information or children’s information requires an applicable authorisation or exception under the relevant provisions. Do not use a public form or AI chat to submit a child’s identifying details or sensitive evidence. If those facts are relevant to an accepted matter, the firm should first establish an appropriate lawful basis, communication process and safeguards.

Submitting information on behalf of another person does not automatically establish their consent or your authority. Where a parent, guardian, representative or business employee acts, capacity and authority must be considered in context.

Operators processing on behalf of a responsible party must handle information only with appropriate authorisation and confidentiality and must be subject to the relevant written security obligations under sections 20 and 21. Operators must notify the responsible party where there are reasonable grounds to believe information has been accessed or acquired by an unauthorised person.

This website uses external hosting, Firebase enquiry and authentication services, and AI infrastructure. International processing may occur. Section 72 restricts transfers to third parties in foreign countries unless a specified ground applies, including adequate protection through applicable law, binding corporate rules or agreement, or another authorised basis. This notice does not claim unverified provider locations or guarantees.

Some processing may require prior authorisation under sections 57 and 58, including particular uses of unique identifiers, certain criminal-information processing on behalf of third parties and specified transfers of special or children’s information. Such requirements must be assessed before the relevant processing begins; a privacy notice cannot substitute for required authorisation.

The responsible party must identify reasonably foreseeable internal and external risks, establish and maintain appropriate safeguards, regularly verify their effectiveness and update them as risks change. Reasonable safeguards depend on the nature of information and processing; no claim of absolute security is made.

Under section 22, where there are reasonable grounds to believe personal information has been accessed or acquired by an unauthorised person, notification to the Information Regulator and affected people is required in accordance with the Act, subject to its exceptions. Notification should explain the possible consequences, measures taken or intended and recommended steps where required. An operator’s notification to the firm does not replace the firm’s own duties.

You may ask whether the firm holds personal information about you and request access, subject to identity verification, PAIA procedures where applicable and lawful grounds for refusal. You may seek correction or deletion of information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or unlawfully obtained, or destruction or deletion of records no longer authorised for retention.

Requests must not require the firm to disclose another person’s protected information or privileged material unlawfully. A refusal or partial disclosure should be assessed against the applicable legal grounds. Retention for a lawful obligation or legal claim may limit immediate deletion; it does not justify keeping every record indefinitely.

POPIA regulations prescribe forms for certain objections and correction or deletion requests. You may request the current forms or obtain them from the Information Regulator. A prescribed procedure should be followed where applicable; this notice does not create an invented response deadline or additional fee.

Section 11 permits objections to specified processing on reasonable grounds relating to your particular situation, subject to the Act. You may also object to processing for direct marketing. A lawful objection must be considered and acted on in accordance with the applicable provision.

Unsolicited electronic direct marketing is subject to section 69. Consent requirements and the limited existing-customer exception must be applied correctly. Where the existing-customer exception is relied on, statutory conditions include the relevant collection context, marketing of the responsible party’s own similar products or services, and opportunities to object. An enquiry is not an automatic marketing subscription.

The firm should distinguish necessary service communications from optional promotional messages and honour applicable opt-out requests. No compulsory marketing consent is created by these website notices.

The Promotion of Access to Information Act 2 of 2000 (PAIA) provides procedures to request records. Access to private-body records is subject to its requirements, including that the record is required for the exercise or protection of a right, and applicable refusal grounds. A section 51 manual explains the body’s record-request process; this POPIA notice does not replace it.

You may raise concerns with the firm and may lodge a complaint with the Information Regulator without first waiving any rights. Official regulator information, current complaint procedures, PAIA guidance and contact channels are available at https://inforegulator.org.za. Use the current official channels rather than relying on an unverified contact address copied elsewhere.

Relevant primary legislation is available through the South African Government’s documents portal at https://www.gov.za/documents. This notice is dated 8 October 2026 and should be read against the legislation and regulations currently in force. For a specific access request or dispute, obtain advice about the procedure that applies.