Privacy Manual

  • 1.Introduction
    1. 1.1.Burnell Attorneys (“we”, “us”, or “our”) is committed to protecting the privacy and personal information of our clients, website users and business contacts. This Privacy Policy explains how we collect, use, store, disclose and protect personal information in accordance with applicable data protection laws in South Africa, including the Protection of Personal Information Act, 2013 (“POPIA”).
    2. 1.2.By accessing our website or engaging our services, you acknowledge that you have read and understood this Privacy Policy.

  • 2.Responsible Party
    1. 2.1.Burnell Attorneys is the responsible party for the processing of your personal information. We determine the purpose and means of processing such information.

  • 3.Personal Information We Collect
    1. 3.1.We may collect and process the following categories of personal information:
      1. 3.1.1.Identification information (e.g. name, identity number, passport number)
      2. 3.1.2.Contact details (e.g. email address, telephone number, physical address)
      3. 3.1.3.Professional information (e.g. company name, position)
      4. 3.1.4.Financial information (where required for transactions or billing)
      5. 3.1.5.Correspondence and communications with us
      6. 3.1.6.Information required for legal matters, due diligence or regulatory compliance
      7. 3.1.7.Website usage data (e.g. IP address, browser type, cookies)
    2. 3.2.We only collect personal information that is necessary for our business activities or where required by law.

  • 4.How We Collect Personal Information
    1. 4.1.We collect personal information:
      1. 4.1.1.Directly from you when you contact us or engage our services
      2. 4.1.2.From third parties where legally permitted (e.g. regulators, counterparties, public records)
      3. 4.1.3.Automatically when you use our website (e.g. via cookies or analytics tools)

  • 5.Purpose of Processing
    1. 5.1.We process personal information for the following purposes:
      1. 5.1.1.To provide legal services and advice
      2. 5.1.2.To comply with legal and regulatory obligations
      3. 5.1.3.To conduct due diligence and risk assessments
      4. 5.1.4.To manage client relationships and communications
      5. 5.1.5.To process billing and payments
      6. 5.1.6.To improve our website and services
      7. 5.1.7.For internal record keeping and administrative purposes
    2. 5.2.We will not process personal information for any purpose that is incompatible with these purposes unless permitted by law.

  • 6.Legal Basis for Processing
    1. 6.1.We process personal information where:
      1. 6.1.1.Processing is necessary to perform a contract
      2. 6.1.2.Processing is required to comply with a legal obligation
      3. 6.1.3.You have provided consent
      4. 6.1.4.Processing is necessary for our legitimate interests, provided these do not override your rights

  • 7.Disclosure of Personal Information
    1. 7.1.We may share personal information with:
      1. 7.1.1.Employees, consultants and service providers who require access
      2. 7.1.2.Regulatory authorities and government bodies where required by law
      3. 7.1.3.Counterparties and advisors in transactions
      4. 7.1.4.Courts, tribunals or dispute resolution bodies
      5. 7.1.5.Third-party service providers (e.g. IT, cloud storage, analytics providers)
    2. 7.2.We ensure that all third parties process personal information in accordance with applicable data protection laws.

  • 8.Cross-Border Transfers
    1. 8.1.Where personal information is transferred outside South Africa, we ensure that:
      1. 8.1.1.The recipient is subject to laws or agreements that provide an adequate level of protection; or
      2. 8.1.2.You have consented to the transfer; or
      3. 8.1.3.The transfer is otherwise permitted under POPIA

  • 9.Data Security
    1. 9.1.We take appropriate, reasonable technical and organisational measures to protect personal information against:
      1. 9.1.1.Loss or damage
      2. 9.1.2.Unauthorised access
      3. 9.1.3.Unlawful processing
    2. 9.2.These measures include access controls, secure storage systems and confidentiality obligations.

  • 10.Retention of Personal Information
    1. 10.1.We retain personal information only for as long as:
      1. 10.1.1.Necessary to fulfil the purpose for which it was collected
      2. 10.1.2.Required by law or regulatory obligations
      3. 10.1.3.Needed for lawful business purposes (including dispute resolution)

  • 11.Your Rights
    1. 11.1.In terms of POPIA, you have the right to:
      1. 11.1.1.Access your personal information
      2. 11.1.2.Request correction or deletion of your personal information
      3. 11.1.3.Object to the processing of your personal information
      4. 11.1.4.Withdraw consent where processing is based on consent
      5. 11.1.5.Lodge a complaint with the Information Regulator
    2. 11.2.Requests may be submitted using the contact details below.

  • 12.Cookies and Website Use
    1. 12.1.Our website may use cookies and similar technologies to:
      1. 12.1.1.Improve user experience
      2. 12.1.2.Analyse website traffic
      3. 12.1.3.Enhance functionality
    2. 12.2.You may disable cookies in your browser settings, although this may affect website functionality.

  • 13.Third-Party Links
    1. 13.1.Our website may contain links to third-party websites. We are not responsible for the privacy practices of those websites.

  • 14.Updates to this Policy
    1. 14.1.We may update this Privacy Policy from time to time. The latest version will always be available on our website.

  • 15.Contact Us
    1. 15.1.If you have any questions about this Privacy Policy or wish to exercise your rights, please contact:

      Burnell Attorneys
      Email: matt@burnellattorneys.com
      Address: 65 6th Street, Parkhurst, Johannesburg