Privacy notice

This notice tells you how NSN Attorneys uses your personal information when you use this website or send us an enquiry. We wrote it to comply with the Protection of Personal Information Act 4 of 2013 (POPIA).

This notice applies to the website and to enquiries. If you become a client, our engagement letter gives you more detail about how we use your information in your matter.

1. Who we are

NSN Attorneys is a law practice in Cape Town. The practice is an incorporated company with one attorney, who is registered with the Legal Practice Council. We are the “responsible party” under POPIA. This means that we decide why and how your personal information is used.

Send any question about this notice, or about your personal information, to the information officer.

2. The personal information we collect

This website collects personal information in one place only: the enquiry form. The form does not send or store your information. It opens your own email app with an email to us, and you send that email yourself.

The message field is free text. Please give only the detail that we need to understand your enquiry. Do not include sensitive detail in the form, such as health information, identity numbers, bank details, or information about a child. You can give us that detail later, in a consultation.

You do not have to give us any information. If you do not complete the required fields, we cannot reply to your enquiry through the form. You can telephone us instead.

Cookies, analytics and trackers

This website sets no cookies. It has no analytics and no trackers. The fonts are stored on our own website, so your browser does not call a font service.

The company that hosts the website processes technical data, such as your IP address, to deliver the pages to your browser and to protect the website.

Links to other services

Our contact section has links to Google Maps and to WhatsApp. If you follow one of these links, you leave our website. Those services have their own privacy terms, and we do not control how they use your information.

3. Why we use your information, and the lawful basis

We use the information from the enquiry form for these purposes only:

• to reply to your enquiry;
• to check if we can act for you, which includes a check for a conflict of interest;
• to arrange a consultation with you;
• to keep a record of the enquiry and of our reply;
• to comply with the law and with the rules of our profession.

POPIA permits us to use your information on these grounds:

• Your consent. You tick the consent box before you send the form.
• Steps before a contract. You ask us to consider your matter, and we need the information to do so.
• Our legitimate interest. We must be able to answer enquiries and to keep a correct record of them.
• A legal obligation. Some laws and professional rules require us to keep records.

We do not sell your information. We do not use the information from the enquiry form for marketing. We make no decision about you by automated means alone.

Sending the form does not make you our client. An attorney–client relationship starts only when we agree in writing to act for you. See our disclaimer.

4. Who receives your information

The attorney of the practice reads your enquiry.

We use service providers to operate the website and our mailbox. POPIA calls these providers “operators”. They process your information for us and on our instructions.

We can also disclose your information in these cases:

• a law, a court order or a regulator requires the disclosure;
• the disclosure is necessary to protect our legal rights;
• you ask us to disclose it, or you agree to the disclosure.

5. Transfer of your information outside South Africa

Your enquiry email goes from your email provider to our email mailbox provider. If that provider stores email outside South Africa, your information goes to its servers in another country. Some countries do not have a data protection law that is equal to POPIA.

Section 72 of POPIA controls this transfer. We rely on these grounds:

• you consent to the transfer when you tick the consent box and send the email;
• the transfer is necessary for us to take the steps that you ask for before a contract;
• each operator is bound by an agreement that requires it to protect personal information.

If you do not want your information to leave South Africa, do not use the form. Telephone us on +27 72 247 4720 instead.

6. How long we keep your information

We keep your information only for as long as we need it for the purpose in section 3, or for as long as the law requires.

• If you do not become a client: we delete the enquiry when we no longer need it to reply to you.
• If you become a client: the enquiry becomes part of your client file. We keep the client file for as long as the law and the rules of our profession require.

When a retention period ends, we delete the information or we make it anonymous.

7. How we protect your information

We take reasonable technical and organisational steps to prevent loss, damage and unlawful access. These steps include:

• an encrypted connection (HTTPS) between your browser and the website;
• access to the enquiry mailbox for authorised persons only;
• passwords and device security on the equipment that we use;
• the duty of confidentiality that binds every attorney.

No transmission on the internet is fully secure. If a security breach affects your personal information, we will tell you and the Information Regulator, as POPIA requires.

8. Your rights

POPIA gives you these rights:

• Access. You can ask if we hold personal information about you, and you can ask for a copy or a description of it.
• Correction. You can ask us to correct information that is wrong, out of date, incomplete or misleading.
• Deletion. You can ask us to delete information that we no longer have the right to keep.
• Objection. You can object, on reasonable grounds, when we use your information on the basis of a legitimate interest.
• Withdrawal of consent. You can withdraw your consent at any time. The withdrawal does not affect what we did before it, or what the law permits without consent.
• Complaint. You can complain to the Information Regulator. See section 9.

To use a right, write to the information officer at [email protected]. The POPIA regulations prescribe forms for an objection and for a request to correct or delete information. You can use those forms, but a clear email is sufficient for us.

We must confirm your identity before we act on a request. We do not charge a fee to correct or delete information. A request for access to records follows the procedure in ourPAIA manual, and a prescribed fee can apply.

In some cases the law permits or requires us to refuse a request. For example, we must keep some records for a period that the law sets. If we refuse, we will give you the reason.

9. How to complain

Please speak to us first. Write to the information officer, and we will try to solve the problem.

You also have the right to complain to the Information Regulator, which is the authority that enforces POPIA in South Africa.

10. Changes to this notice

We can change this notice when the law changes or when we change how the website operates. We publish the current version on this page at https://nsnlaw.co.za/privacy. The version on this page applies from the date on which we publish it.

Last updated: 18 October 2026