Privacy Policy

Last updated: March 2026. This policy applies to Trust Co (Pty) Ltd’s processing of personal information in South Africa.

1. Responsible party

Trust Co (Pty) Ltd (“we”, “us”) is the responsible party for personal information collected through this website, contact forms, and in the course of providing legal and related services. Our registered details appear in the website footer (ECTA section 43).

2. Information officer

The Information Officer (and Deputy Information Officer, if appointed) is responsible for POPIA compliance. Contact: [Information Officer name, email, and postal address — same as registered office or as designated].

3. What we collect

Depending on how you interact with us, we may collect:

• Identity and contact details (e.g. name, email, telephone, organisation) submitted via forms or correspondence.
• Matter-related information required for legal advice, conflict checks, client onboarding, and regulatory compliance where applicable.
• Technical data (e.g. server logs, IP address, browser type) necessary to operate and secure the website.

We do not use the public contact form to collect identity numbers or sensitive financial data; such information may be requested at a later stage through secure channels if a matter requires it.

4. Purpose and lawful basis

We process personal information to:

• Respond to enquiries and manage client relationships.
• Provide legal and related services, including conflict screening and file management.
• Comply with law, regulation, and professional conduct rules.
• Improve website security and (where you have consented) non-essential cookies or analytics.

5. Retention

We retain personal information only for as long as necessary for the purposes above, including statutory retention periods applicable to legal practice and tax records. Retention periods vary by category of record.

6. Security

We implement appropriate technical and organisational measures to protect personal information against unauthorised access, loss, or destruction. Where confidential documents are exchanged, we may use encrypted or approved channels after engagement.

7. Sharing of information

We may share personal information with service providers who assist our operations (e.g. IT hosting) under strict confidentiality, or where required by law, court order, or regulatory authority. We do not sell personal information.

8. Your rights

Under POPIA you may request access to, correction of, or deletion of your personal information where applicable; object to processing; or lodge a complaint with the Information Regulator (South Africa). Requests should be directed to the Information Officer at the contact details provided above.

9. Cross-border transfers

If personal information is transferred outside South Africa, we will ensure appropriate safeguards as required by POPIA.

10. Changes

We may update this policy from time to time. The “Last updated” date will reflect material changes.

Contact us