Privacy policy

Last updated: 9 November 2026

1. Who we are

Good Legal Inc. (“Good Legal”, “we”, “us”) is a law practice in Cape Town, South Africa, regulated by the Legal Practice Council. We are the responsible party for the personal information described in this policy.

Our Information Officer is Keryn de Vries. You can contact her at keryn@goodlegal.co.za or on +27 73 940 2017.

2. What this policy covers

This policy covers personal information we collect through this website (goodlegal.co.za), by email and telephone, and in the course of acting for our clients. Information about clients and their matters is also protected by our professional duty of confidentiality and, where it applies, legal professional privilege.

3. What we collect

• When you use our contact form: your name and email address, what you need help with and your message, and, if you choose to give them, your phone number and company. We also record that you agreed to our use of these details, the exact wording you agreed to, and when.
• When you email or call us: your contact details and whatever you choose to tell us.
• When you become a client: the information we need to act for you, such as identity and contact details, details of your business, the documents and facts relevant to your matter, and billing information. The law requires us to verify the identity of some clients.

Please don’t send confidential or sensitive details through the contact form. We’ll ask for what we need once we’ve spoken.

4. Why we use it

• To respond to your enquiry and discuss whether and how we can help.
• To provide legal services, including retainers, and to manage our relationship with you.
• To bill for our services and keep proper financial records.
• To meet our legal and professional obligations, including those under the Legal Practice Act and anti-money-laundering laws.
• To keep this website and our systems secure.

We rely on your consent (for website enquiries), on what is needed to take steps towards or perform a contract with you, on obligations imposed on us by law, and on our legitimate interests in running a secure practice. We don’t use your information for direct marketing without your separate consent, we don’t sell it, and we don’t make decisions about you by automated means alone.

5. Cookies and tracking

This website sets no cookies of its own and uses no analytics, advertising or tracking tools. To protect the site and the contact form from bots and abuse, our hosting provider, Cloudflare, examines technical signals from your browser (including through its Turnstile check on the contact form) and may use strictly necessary security cookies. Your IP address is used briefly to limit repeated form submissions; we don’t store it with your enquiry.

6. Who we share it with

We share personal information only where it is needed for the purposes above, or where the law requires it. We use these service providers (operators), each bound by data processing terms:

• Cloudflare, Inc. hosts this website, stores contact form enquiries in a database located in Western Europe, protects the site from bots, and forwards email sent to our goodlegal.co.za addresses.
• Google LLC provides the email inbox where enquiries and emails to us are received.

We may also share information with others where your matter requires it (for example, counsel, experts or the other side’s legal representatives), always in line with our duty of confidentiality, and with regulators, courts or authorities where the law requires us to.

7. Information sent outside South Africa

Cloudflare and Google may store or process personal information outside South Africa, including in Europe and the United States. Under section 72 of POPIA, we transfer personal information only to providers bound by agreements that give it a level of protection substantially similar to POPIA, or where you have consented or the transfer is needed to perform a contract with you.

8. How long we keep it

• Website enquiries are deleted from the website’s database automatically after 12 months.
• Emails and correspondence are kept for as long as needed to deal with your enquiry or matter.
• Client records are kept for as long as the law and our professional rules require (for example, at least five years after a client relationship ends for identity verification records), and then securely destroyed.

9. How we protect it

We take appropriate, reasonable technical and organisational measures to protect personal information against loss, damage and unauthorised access. These include encrypted connections (HTTPS) for this website, access limited to the people who need it, and service providers with recognised security practices. If we believe personal information has been accessed by someone without authority, we will notify the Information Regulator and the people affected as POPIA requires.

10. Your rights

Under POPIA you have the right to:

• ask whether we hold personal information about you, and for a copy of it;
• ask us to correct or delete information that is inaccurate, out of date, excessive or unlawfully obtained;
• object to our processing of your information, and withdraw your consent at any time (this doesn’t affect processing that happened before);
• not receive direct marketing without your consent;
• complain to the Information Regulator.

To use any of these rights, contact our Information Officer at keryn@goodlegal.co.za. We may need to confirm your identity first. Requests for access to records are dealt with under our PAIA manual. Some information may be withheld where the law allows, for example where it is privileged or concerns another client.

11. The Information Regulator

If you’re not satisfied with how we have handled your personal information, you can complain to the Information Regulator (South Africa): inforegulator.org.za, complaints by email to POPIAComplaints@inforegulator.org.za, general enquiries to enquiries@inforegulator.org.za. Address: JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001.

12. Changes to this policy

We’ll update this page when the way we handle personal information changes. The date at the top shows when it last changed.