Privacy Policy
Privacy Policy
Version 2.0 | Effective: 10 October 2026
1. About this policy
This policy explains what personal information we collect, why we collect it, what we do with it and what you can ask us to do about it. It covers this website, our template shop, and the work we do for clients.
We are the responsible party for the personal information described here, as that term is used in the Protection of Personal Information Act 4 of 2013.
We have written this in plain language on purpose. If anything in it is unclear, ask us and we will explain it.
2. Who we are
The StartUp Legal (Pty) Ltd
Registration number: 2024/259720/07
222 Smit Street, 21st Floor, Braamfontein, 2000
+27 (0) 82 287 8742
Our Information Officer is Mzuzukile Soni, who can be reached at hello@thestartuplegal.co.za.
3. The information we collect
If you visit the website: your IP address, device and browser type, operating system, the page that referred you, the pages you viewed, how long you spent and similar usage data, collected through cookies and analytics.
If you contact us: your name, email address, telephone number, the name of your business, your industry, and whatever you choose to put in your message.
If you book a fit call: your name, email address and whatever you enter when booking, held in our calendar and booking system.
If you buy a template: your name, email address, billing details, what you bought, when, for how much, and your download history. We do not receive or store your card number or card security code. Those go directly to our payment provider.
If we act for you: whatever we need to do the work. Depending on the matter that may include identity and address verification documents, financial information, the content of your contracts and correspondence, and information about other people that you give us.
If you subscribe to our mailing list: your name and email address.
4. Where we get it
Almost always from you. Occasionally from public registers such as the CIPC, from your colleagues or other advisers where they are involved in the same matter, and from the technology that runs this website.
5. Why we process it, and on what basis
We process personal information only where POPIA allows it. The table below sets out what we do and why we are permitted to do it.
What we do with it
Why we are allowed to
Selling and delivering templates, and keeping a record of the sale
Performance of our contract with you, and our legal obligations
Responding to your enquiry and arranging a fit call
Your request, and our legitimate interests in running the business
Doing the legal work you engage us for
Performance of our contract with you, and compliance with our professional obligations
Verifying identity where the law requires it
Compliance with a legal obligation
Keeping accounting, tax and company records
Compliance with a legal obligation
Sending you marketing about our templates and services
Your consent, or section 69(3) of POPIA where you are an existing customer
Understanding how the website is used and improving it
Our legitimate interests
Establishing, exercising or defending a legal claim
Protection of a legitimate interest
6. Children
This website is not intended for people under the age of 18 and we do not knowingly collect a child’s personal information through it. Where a matter requires us to process a child’s personal information, we do so only with the consent of a competent person or where the law otherwise permits it.
7. Special personal information
We do not seek special personal information. Where a matter requires it, we process it only on a ground POPIA allows, which in our work is ordinarily that the processing is necessary to establish, exercise or defend a right or obligation in law.
8. Cookies
This website uses cookies. Some are necessary for the site and the shop to work, including those that hold your session and your basket. Others measure how the site is used, and others support marketing.
You can refuse or delete cookies in your browser settings. If you block the necessary ones, parts of the site, including checkout, will not work.
9. Who we share it with
We use service providers who process personal information on our behalf and on our instructions. POPIA calls them operators. They are bound to confidentiality and to appropriate security. They are:
• Wix, which hosts this website and the shop;
• Paystack, which processes card payments;
• Google, for our email, calendar and fit call booking link;
• Wix, for invoicing and accounting records; and
• Mailsuite, where we send marketing.
We also share personal information where the law requires it, where we are compelled by a court, a regulator or a professional body, and where it is necessary to protect our rights or someone else’s safety.
We do not sell personal information, and we do not share it with anyone for their own marketing.
10. Information that leaves South Africa
Some of our service providers store data outside South Africa, including in the United States and the European Union. Where that happens we transfer personal information only on a ground section 72 of POPIA allows, which in our case is ordinarily that the recipient is subject to a law or a binding agreement that provides an adequate level of protection, or that the transfer is necessary to perform our contract with you.
11. Marketing
We will send you marketing only if you have asked us to, or if you are an existing customer and what we are sending relates to something similar to what you bought.
Every marketing message carries a way to unsubscribe. You can also email hello@thestartuplegal.co.za and ask us to stop, and we will stop.
12. How long we keep it
• Enquiries that do not become work: 12 months.
• Shop customers: seven years from the date of purchase, which is what our tax and company law obligations require.
• Client files: for as long as our professional and legal obligations require, and in any event not less than five years after the matter closes.
• Mailing list subscribers: until you unsubscribe.
• Website analytics: as configured in our analytics tools, ordinarily not longer than 26 months.
After that we delete the information or de-identify it so that it can no longer be linked to you.
13. How we protect it
We take reasonable technical and organisational steps to keep personal information secure. That includes access controls, encryption of information in transit, and choosing service providers who can demonstrate appropriate security.
No system is completely secure. If a security compromise affects your personal information, we will notify you and the Information Regulator as section 22 of POPIA requires.
14. Your rights
You may:
• ask us what personal information we hold about you, and ask for a copy of it;
• ask us to correct or delete information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or obtained unlawfully;
• object, on reasonable grounds, to our processing of your information;
• withdraw a consent you have given us, which does not affect what we lawfully did before you withdrew it;
• ask us to stop sending you marketing; and
• complain to the Information Regulator.
To exercise any of these, email hello@thestartuplegal.co.za. We may ask you to verify your identity before we act on a request.
A request for access to information is dealt with under the Promotion of Access to Information Act 2 of 2000 and our PAIA manual, which is published at https://www.thestartuplegal.co.za/ and is available from us on request. A prescribed fee may apply to an access request. We will respond within the periods PAIA and POPIA prescribe.
15. Complaining to the Information Regulator
We would rather hear from you first, but you are entitled to go straight to the Regulator.
Information Regulator (South Africa)
Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191
enquiries@inforegulator.org.za
010 023 5200
POPIA complaints are lodged through the Regulator’s eServices portal at eservices.inforegulator.org.za. PAIA complaints go to PAIAComplaints@inforegulator.org.za.
16. Changes to this policy
We may update this policy. The current version and its effective date appear at the top of this page. Where a change materially affects you, we will tell you.
17. Contact us
The StartUp Legal (Pty) Ltd
222 Smit Street, 21st Floor, Braamfontein, 2000
+27 (0) 82 287 8742