This Privacy Policy explains what personal information De Klerk Turner Incorporated (“DKT”, “we”, “our”) collects, why we collect it, what we do with it, and what rights you have. It applies to this website and to our work as a law firm, and is governed by the Protection of Personal Information Act 4 of 2013 (“POPIA”).

1. About us

De Klerk Turner Incorporated is a firm of attorneys and notaries based in Cape Town, South Africa, with our office at Suite 4, 12th Floor, 35 Lower Long Street, Cape Town, 8001. For the purposes of POPIA, DKT is the responsible party in respect of the personal information described in this policy.

2. Information Officer

Our Information Officer is Tygue Turner. Any question or request relating to this policy — including access, correction, deletion, or objections to processing — may be directed to him at:

  • Email: info@dkt-inc.co.za (mark for the attention of the Information Officer)
  • Telephone: +27 21 330 5757
  • Post: The Information Officer, De Klerk Turner Incorporated, Suite 4, 12th Floor, 35 Lower Long Street, Cape Town, 8001

3. What personal information we collect

We collect only the personal information that we need for the purposes set out in this policy. Depending on how you interact with the firm, this may include:

3.1 Information you provide directly

  • Enquiry forms and email: your name, email address, telephone number, the subject matter of your enquiry, and any further details you choose to include in your message.
  • Career applications: your CV and accompanying details (name, contact information, identity number where relevant, qualifications, work history, references) and any other information you elect to submit.
  • Client engagement: when a mandate is accepted, we collect the information needed to act for you, including identity, contact, financial and matter-specific information. The Financial Intelligence Centre Act, 2001 (FICA) also requires us to collect and verify certain identification documents.

3.2 Information collected automatically

  • Website analytics: when you visit this website and consent to analytics cookies, we collect aggregated information about your visit (pages viewed, referring page, approximate location to city level, browser and device type, the time and duration of your visit). This is described in detail in our Cookie Policy.
  • Server logs: our hosting provider records standard request logs (IP address, user agent, requested URL) for security and operational purposes. These logs are retained for short periods and are not used to identify visitors.

3.3 Information from third parties

Where lawfully and necessary, we may also receive information from third parties — for example, opposing parties' attorneys, courts, regulators, credit bureaux (where you have given consent or where the law allows), referring counsel, recruiters, or your own professional advisors.

4. Why we process your information

We only process personal information when we have a lawful reason to do so. Depending on the context, that reason will be one of the following:

  • To provide legal services — responding to enquiries, accepting instructions, and acting on your behalf. This includes steps taken before a formal mandate is agreed.
  • Legal obligation — meeting our duties under FICA, the Legal Practice Act, court rules and other legislation that applies to the firm.
  • Legitimate interests — operating, securing and improving the website; managing client relationships; enforcing our terms; and protecting against fraud.
  • Consent — for non-essential cookies and any other processing where consent is the right basis. You can withdraw consent at any time without affecting anything already done.

5. Who we share information with

We do not sell personal information. We may share personal information with:

  • Counsel, correspondent attorneys and experts instructed on a matter on your behalf.
  • Courts, tribunals and regulators where required by law or court order, or where reasonably necessary to conduct your matter.
  • Service providers (operators) who process personal information on our behalf under written agreements — including our IT, hosting, document management, email, and accounting providers, and Google in respect of website analytics.
  • Professional bodies such as the Legal Practice Council, where regulation or audit requires it.
  • Successors and advisers if the firm or any part of it is reorganised, audited, or transferred to another legal practice.

6. Transfers outside South Africa

Some service providers process personal information outside South Africa — including Google, whose servers are global. Where this happens, we ensure appropriate safeguards are in place as required by POPIA, such as binding contractual obligations on the recipient. You may request further detail from our Information Officer.

7. How long we keep your information

We retain personal information only for as long as we need it for the purposes for which it was collected, and as required by law:

  • Client matter files are retained for at least five years after the conclusion of the matter, in accordance with the Legal Practice Council's record-keeping rules; longer periods may apply where prescription, litigation or regulatory requirements demand it.
  • FICA records are retained for the periods required by FICA and its regulations.
  • Enquiries that do not become matters are kept only for as long as needed to respond, after which they are deleted unless they form part of a continuing discussion.
  • Career applications are retained for up to twelve months to allow us to consider you for future roles, unless you ask us to delete them sooner.
  • Website analytics are retained in accordance with Google's data-retention settings; aggregated, non-identifying reports are kept indefinitely.
  • Server logs are retained for a short period — typically thirty to ninety days — for security and operational diagnostics.

8. How we keep your information safe

We take reasonable technical and organisational steps to protect personal information — including access controls, secure document management, encrypted channels where appropriate, regular backups, and confidentiality obligations on staff. No system is completely secure. If a breach occurs that requires notification, we will inform the Information Regulator and affected individuals as required by POPIA.

9. Your rights under POPIA

POPIA gives you, as a data subject, the following rights in respect of personal information that we hold about you:

  • Right of access — to ask whether we hold personal information about you, and to receive a description of it.
  • Right to correction or deletion — to ask us to correct inaccurate, irrelevant, excessive, out-of-date or unlawfully obtained information, or to delete it where appropriate.
  • Right to object — to object, on reasonable grounds, to the processing of your personal information.
  • Right to withdraw consent — where we rely on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing already carried out.
  • Right not to be subject to a decision based solely on automated processing — we do not currently make such decisions, but you retain this right.
  • Right to complain — to lodge a complaint with the Information Regulator if you believe we have not handled your personal information lawfully (see Section 11 below).

To exercise any of these rights, contact the Information Officer using the details in Section 2. We may ask you to verify your identity before responding, and will do so within the timeframes required by POPIA. A formal access request must be made on Form 2 under the Promotion of Access to Information Act, 2000; the form is available from the Information Regulator's website at inforegulator.org.za.

10. Cookies

This website uses cookies and similar technologies. Strictly necessary cookies — including the cookie that records your consent choice — are always on; analytics, marketing and preference cookies are off by default and only set if you opt in via the consent banner. Full details, including the cookies we use, their purposes and how long they last, are in our Cookie Policy. You can change your choice at any time using the “Cookie settings” link in the footer.

11. How to complain

If you are not satisfied with our response to a concern about your personal information, you may lodge a complaint with the Information Regulator (South Africa):

12. Changes to this policy

We may update this policy from time to time as our practices or the law changes. The effective date above shows the most recent version. Where changes materially affect how we process personal information, we will take steps to notify you.

13. Contact

For all matters relating to this Privacy Policy, please contact the Information Officer, Tygue Turner, at info@dkt-inc.co.za or +27 21 330 5757.

Last updated: 15 May 2026.