NewRevised White Paper on immigration: what is policy and what is already law.

Read the guide
Policies and disclosures

Privacy Policy and POPIA Notice

This notice is issued under sections 18 and 51 of POPIA and explains how personal information is handled when you use the website, complete an assessment or engage Legalyze.

1. Responsible party

Legalyze (Pty) Ltd is the Responsible Party for the personal information described in this notice.

  • Business address: WeWork Offices, Rosebank, Johannesburg, South Africa
  • Email: info@legalyze.co.za
  • Telephone: +27 87 551 1660
  • WhatsApp: +27 69 911 0911

2. Information Officer

Privacy, access, correction and deletion requests may be sent to the Information Officer at info@legalyze.co.za.

3. Personal information we collect

  • Contact information: name, email address, telephone number and business address.
  • Identification information: identity or passport details, nationality and date of birth where relevant to the requested service.
  • Service information: immigration status, travel, employment, qualifications, family relationships, business particulars, compliance facts and deadlines.
  • Documents: records uploaded through an approved portal or provided through an agreed channel.
  • Commercial information: quotations, invoices, payment references and transaction status. Card details are not collected by Legalyze where a third-party payment processor is used.
  • Technical information: security logs, IP-derived security identifiers, device and browser details, page activity, referral information and campaign parameters.
  • Communications: enquiries, assessment responses, emails, portal messages and support records.

4. Why we process personal information

Information is processed to assess enquiries, provide quotations, deliver accepted services, collect and review documents, communicate progress, prevent fraud and abuse, maintain records, meet statutory duties, improve the website and send opted-in updates.

5. Legal grounds for processing

Depending on the context, processing may be based on consent, performance of a contract, steps requested before entering into a contract, a legal obligation, protection of a legitimate interest or another ground permitted by POPIA.

6. Special personal information and children

Immigration and identity processes may involve sensitive records. Such information is requested only where relevant and should be submitted through the approved intake channel. Information concerning a child must be supplied by, or with the authority of, a competent person unless another legal basis applies.

7. Sharing and operators

Information may be shared only where necessary with government bodies, submission centres, payment providers, hosting and communication providers, document-storage providers, professional advisers or another service provider involved in an accepted scope. Operators are required to protect information appropriately. Legalyze does not sell personal information.

8. Professional referrals

Where a matter requires advice, representation or another reserved professional service, information is shared with the identified practitioner only with a proper basis and for the agreed purpose. The practitioner’s engagement and responsibility are separate from Legalyze’s administrative and document-support scope.

9. Cross-border processing

Some technology providers may process information outside South Africa. Appropriate safeguards must be used where POPIA requires them, including contractual protection, an adequate legal framework or the data subject’s consent where applicable.

10. Retention

Records are kept only for as long as required for the purpose, an accepted service, dispute resolution, security or a statutory retention period. Retention differs by record type. Records that are no longer required are deleted, destroyed or de-identified in a reasonably secure manner.

11. Security

Legalyze uses proportionate technical and organisational safeguards, including access controls, private server-side storage for lead and portal records, secure sessions, logging, backups and encrypted transport when the production site is served over HTTPS. No online system can be guaranteed completely secure.

12. Website analytics and cookies

Essential cookies support security, forms and portal sessions. Optional analytics run only after the relevant consent is recorded. See the Cookie Policy for details and controls.

13. Your rights

Subject to POPIA and other applicable law, you may request access to personal information, correction or deletion of inaccurate or unlawfully retained information, object to certain processing, withdraw consent and complain to the Information Regulator.

14. Complaints

Please contact Legalyze first so the issue can be investigated. You may also lodge a complaint with the Information Regulator.

15. Changes to this notice

This notice may be updated to reflect changes in services, technology, operators or law. The current version will remain available on this page.