Privacy policy.

This policy concerns personal information processed in connection with the Lenkoe Attorneys Incorporated website, consultation requests, general enquiries and related communications. Lenkoe Attorneys Incorporated is the responsible party for the processing purposes it determines. Our Johannesburg contact address is 35 Fricker Road, Ethos Building, Illovo, Sandton, 2196. Privacy enquiries may be sent to info@lenkoeattorneys.co.za or raised by calling 010 012 3361.

This notice is not a client mandate, a PAIA manual or a statement that every statutory registration or operational safeguard has been independently verified. Information about a specific legal matter may also be governed by a separate engagement letter, professional confidentiality obligations and applicable legislation. Where another person determines processing independently, their own notice applies to that processing.

Our enquiry forms request your name, email address, phone number and a description of the assistance required. Consultation requests additionally include your selected practice area, preferred date, preferred time and consultation format.

You choose whether to contact us. Fields marked as required are needed to submit that particular form; they are not a statutory obligation to use our website. If you do not provide sufficient contact information, we may be unable to respond, assess the request or arrange a consultation. You may instead telephone the firm to discuss an appropriate communication method.

Please supply accurate information and only information relevant to your enquiry. Do not enter identity documents, bank details, passwords, medical records, children’s information or detailed criminal allegations in a general website form or AI conversation. If sensitive documents are required for a matter, ask the firm to agree a suitable channel first.

Hosting and communications infrastructure may process internet protocol addresses, device and browser information, request times, security events and technical error information to deliver and protect the website. The precise information available depends on the service and its configuration. Technical information can identify or be associated with a person and is therefore not automatically treated as anonymous.

The AI conversation interface saves separate conversation histories in the browser used to access it. Browser storage is not the same as a confidential client file. Other people using the same device or browser profile may be able to see that history. Deleting a conversation removes its saved local history but does not necessarily erase information already transmitted to a service provider, retained in technical logs or separately provided to the firm.

Administrator sign-in uses authentication services that may maintain login state in browser storage. The site does not represent that all third-party storage is absent. If additional advertising, tracking or analytics technologies are introduced, the corresponding processing must be assessed and this notice updated; consent must be obtained where required.

Enquiry information is used to respond to you, understand the broad category of assistance requested, consider potential conflicts of interest, arrange a consultation and communicate about the request. A booking form sends a request, not a confirmed appointment. Information may also be needed to secure systems, maintain relevant business records, investigate misuse or establish, exercise or defend legal rights.

POPIA permits processing on specified grounds, which may include your consent, steps to conclude or perform an agreement with you, compliance with a legal obligation, protection of your legitimate interests or pursuit of legitimate interests of the firm or a third party. The appropriate ground depends on the purpose and circumstances. This policy does not treat visiting the website or accepting its terms as blanket consent to every use of personal information.

Information supplied for a legal enquiry must not automatically be used for unrelated marketing. Electronic direct marketing must meet the requirements of section 69 of POPIA, including the applicable consent or existing-customer conditions and a means to object. You may contact us to object to promotional communications. Necessary communications about an active request or legal matter are distinct from optional marketing.

Relevant enquiries may be accessible to authorised firm personnel and appropriately authorised service providers assisting with hosting, enquiry storage, authentication, communications, technical support or security. The current website uses Google Firebase for enquiry storage and administrator authentication and Lovable infrastructure for website delivery and AI service access. AI requests are transmitted for model processing through the configured AI service pathway; they are not kept solely on your device.

Where needed for an accepted legal matter, additional recipients can include counsel, correspondent attorneys, experts, courts, regulators or other parties involved in that mandate, subject to authority, necessity and applicable duties. Information may also need to be disclosed under a valid legal obligation or lawful process. Disclosure is not justified merely because a third party asks for it.

Operators processing on the firm’s behalf require appropriate contractual and security arrangements. A linked website or WhatsApp acts under its own service terms and privacy arrangements for processing it determines. Opening a link does not grant that provider unrestricted access to all information held by the firm.

The AI assistant supplies automated general information and is not an attorney. To generate a response, conversation content is sent to external processing infrastructure. Do not use it to submit confidential instructions, privileged material or special personal information. A local conversation history does not mean that messages remain private to your device. Contact the firm directly for advice about an actual matter.

The floating WhatsApp button opens a conversation with the firm’s confirmed WhatsApp number, 067 916 6090. Using WhatsApp is optional. That service may process account details, metadata and messages under its own privacy notice. You can use the firm’s landline or email instead. Do not assume that an initial WhatsApp message establishes privilege, acceptance of a mandate or a confirmed booking.

Cloud hosting, authentication, communications and AI infrastructure may involve processing or access outside South Africa. Specific locations depend on the provider, deployment and service settings. This notice does not assert a country of storage, a local-only configuration or a particular contractual guarantee that has not been verified.

Before a transfer covered by section 72 of POPIA, the responsible party must establish an applicable lawful basis. This can include a recipient subject to a law, binding corporate rules or binding agreement providing adequate protection with substantially similar principles and restrictions on onward transfers, or another applicable statutory ground. Consent is not assumed solely from use of the website. Ask the firm for information about safeguards applicable to your particular processing request.

Information should be retained only for as long as necessary for its purpose, unless retention is required or permitted by law, reasonably needed for a lawful function, required by an agreement or authorised by valid consent. Enquiry records, accepted client files, accounting records and security logs may have different retention requirements. No single fixed retention period for all information is represented here.

When retention is no longer justified, appropriate deletion, destruction or de-identification should prevent reconstruction in an intelligible form, subject to lawful backup cycles and exceptions. Requests to delete information must be assessed against legal duties, record-preservation requirements and the rights of other people. Deletion from your browser alone does not delete a separately submitted enquiry.

POPIA requires appropriate, reasonable technical and organisational measures to safeguard integrity and confidentiality, taking account of foreseeable risks and generally accepted security practices. Administrator access controls are part of the website’s design, but no website, email system or third-party communication service can promise absolute security.

Where there are reasonable grounds to believe personal information has been accessed or acquired by an unauthorised person, section 22 of POPIA governs notification to the Information Regulator and affected data subjects, subject to its requirements and lawful exceptions. Notification must occur as soon as reasonably possible after discovery, taking account of permitted considerations. Contact the firm promptly if you suspect misuse of information supplied to it.

Subject to POPIA and applicable exceptions, you may request confirmation of whether we hold personal information about you, request access and information about recipients, seek correction or deletion of inaccurate, irrelevant, excessive, out-of-date, incomplete, misleading or unlawfully obtained information, and request destruction or deletion where retention is no longer authorised. You may object to certain processing and withdraw consent for future consent-based processing.

We may need proportionate evidence of identity and enough information to locate the record. Verification protects your information from disclosure to another person. Access may be subject to PAIA procedures, prescribed fees where applicable and lawful refusal grounds, including protection of other people and privileged material. Withdrawal of consent does not retrospectively invalidate lawful processing or remove another independently applicable lawful ground.

Send requests to info@lenkoeattorneys.co.za with the subject “Privacy request”. Do not send an unrequested copy of your identity document through a public form. The firm should advise an appropriate verification process. If a concern is unresolved, you may complain to the Information Regulator through the official channels described in our POPIA notice.

This policy is dated 8 October 2026. It should be reviewed when collection purposes, forms, service providers or legal requirements materially change. The date identifies the notice version, not a certification of operational compliance. Previous information must not be repurposed inconsistently with applicable law simply because a revised policy has been published.

Read this policy with our POPIA notice, website terms and disclaimer. For information about access to records under PAIA, ask the firm for its current section 51 manual and applicable process. This website notice does not replace that manual.