Privacy Policy

Ipfani Makhuvha Attorneys Inc. (“we”, “us”, “our”) is committed to protecting your personal information in accordance with the Protection of Personal Information Act, 4 of 2013 (POPIA). This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website or engage our legal services.

1. Information We Collect

We collect the following categories of personal information:

• Identifying information (name, surname, ID number where applicable)
• Contact information (email address, phone number, physical address)
• Information you submit through our forms (booking requests, enquiries, descriptions of legal matters)
• Technical information (IP address, browser type, device information) collected automatically through our privacy-friendly analytics

2. How We Use Your Information

We use your personal information to:

• Respond to your enquiries and consultation requests
• Provide legal services you have engaged us to perform
• Communicate with you about your matter or our services
• Schedule and manage consultations
• Comply with our legal and regulatory obligations
• Improve our website and services

3. Lawful Basis for Processing

We process your personal information based on your explicit consent, the performance of a contract for legal services, and our legitimate interests in operating our practice. Where required by law, we will obtain your specific consent before processing.

4. How We Store Your Information

Your personal information is stored securely using industry-standard encryption. Database records are hosted on Supabase (PostgreSQL infrastructure) with row-level security policies. We retain your information only for as long as is necessary for the purposes for which it was collected, or as required by South African law (typically a minimum of five years for legal records, in accordance with the Legal Practice Council’s rules).

5. Third Parties

We share limited personal information with the following service providers, who are bound by appropriate data protection obligations:

• Supabase — database hosting
• Resend — transactional email delivery
• Google — calendar scheduling for confirmed consultations
• Vercel — website hosting

We do not sell, rent, or trade your personal information. We will only disclose your information to third parties where required by law or with your express consent.

6. Your Rights Under POPIA

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your information (subject to legal retention obligations)
• Object to the processing of your information
• Withdraw your consent at any time
• Lodge a complaint with the Information Regulator

To exercise any of these rights, please contact our Information Officer using the details below.

7. Information Officer

8. Lodging a Complaint

If you are not satisfied with how we handle your personal information, you may lodge a complaint with the South African Information Regulator:

9. Cookies & Analytics

Our website uses privacy-friendly analytics that do not require cookie consent (e.g. Plausible or Umami). We do not use third-party advertising cookies or tracking pixels.

10. Updates to this Policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page, and the “Last updated” date will reflect any material changes.