Privacy notice (POPIA)
The short version: this website collects nothing about you unless you choose to send an enquiry. When you do, we collect the minimum needed to respond, protect it, use it for nothing else, and you keep rights over it throughout.
Who is responsible
Leshilo Attorneys Incorporated, 11 Rabe Street, Corner President Paul Kruger Street, Polokwane Central, Polokwane, 0700, Limpopo, is the responsible party under the Protection of Personal Information Act 4 of 2013 (POPIA).
Information Officer: The Director, Lesiba Kabelo Leshilo — reception@leshiloattorneys.com, 015 280 0070.
What this website processes, and why
- Browsing: no analytics trackers, advertising pixels, social embeds or third-party cookies load on this site. Standard technical logs (IP address, requested page, time) are processed by our hosting provider to deliver pages and defend against abuse — lawful basis: legitimate interest in running a secure website.
- Secure enquiries and callback requests: the details you type — name, contact details, what your enquiry is about, and any message — are processed to respond to you, to run conflict-of-interest checks, and to keep a record of the contact. Lawful basis: steps at your request prior to possible engagement, and the firm's legitimate interests in conflict screening and record-keeping.
- Preferences: low-data mode and motion preferences are stored only in your own browser and never sent to us (see cookies & storage).
We deliberately ask you not to send identity numbers, medical records or detailed evidence through public forms. Where a matter proceeds, sensitive information is collected through secure, agreed channels with its own safeguards.
Who receives it
Enquiry information goes to the firm's own protected intake system and is visible only to authorised staff. Operators (service providers processing on our instructions, under written agreements with confidentiality and security obligations) include:
- our website and application hosting provider (cloud infrastructure);
- our email delivery provider, for notification messages that deliberately exclude the content of your enquiry;
- our encrypted off-site backup storage provider.
We do not sell personal information, share it with marketers, or use it to train advertising systems. Disclosure beyond operators happens only where the law requires it or you ask for it.
Cross-border processing
Our hosting and backup infrastructure may store data in data centres outside South Africa. Where that happens, POPIA's conditions for cross-border transfers are relied on — the providers are bound by written agreements imposing protection substantially similar to POPIA. The firm's matter files themselves are managed within the firm's own systems and processes.
How long we keep it
Enquiries that do not become matters are kept for as long as needed for conflict-checking integrity and legal defence, then deleted in scheduled reviews. Where an enquiry becomes a matter, the information moves into the client file, which is retained as required by law and the rules applicable to attorneys' records. Backup copies expire on the backup rotation schedule.
How it is protected
Encryption in transit, access controls with role-based permissions and audit logging, and offsite encrypted backups. A plain-language description is in the security & trust centre.
Your rights
- Ask what personal information we hold about you, and request access to it (see also PAIA).
- Ask for correction or deletion of information that is inaccurate, irrelevant, excessive or unlawfully retained.
- Object to processing based on legitimate interests.
- Complain to the Information Regulator (South Africa) — enquiries@inforegulator.org.za — if you believe we have processed your information unlawfully. We would appreciate the chance to resolve it first, via the Information Officer.
To exercise any right, contact the Information Officer at reception@leshiloattorneys.com. We verify identity proportionately before acting on requests, and respond within the periods POPIA requires.
Marketing
We do not send marketing based on website enquiries, and no marketing consent is bundled into any form on this site. If the firm ever introduces optional updates, they will be separate, opt-in, and as easy to leave as to join.
Version 1.0 · Effective and last reviewed: 15 July 2026 · Owner: The Director, Lesiba Kabelo Leshilo · Review cadence: at least annually and whenever law, policy or processing changes. Earlier versions are retained by the firm and available on request.