POPIA
Privacy Policy
How Signa Advisory (Pty) Ltd handles personal information under the Protection of Personal Information Act, 2013.
1. Who we are
Signa Advisory (Pty) Ltd (“Signa”, “we”, “us”) is a legal and compliance advisory firm based in Durban, South Africa. For the purposes of the Protection of Personal Information Act, 4 of 2013 (“POPIA”), Signa is the responsible party in respect of personal information processed through this website and in the course of our engagements. Our Information Officer is contactable via admin@signa-adv.co.za.
2. What this policy covers
This policy explains what personal information we collect, why we collect it, how we protect it, who we share it with, and the rights you have under POPIA. It applies to visitors to this website, people who contact us, and clients and their representatives in the course of an engagement.
3. Information we collect
- Contact information you provide when you enquire or engage us — such as your name, organisation, email address and telephone number.
- Engagement information — information contained in documents and instructions you provide to us so that we can perform our services.
- Technical information — this website is a static site and does not use analytics cookies or tracking. Standard server logs (such as IP address and pages requested) may be processed by our hosting provider for security and operational purposes.
4. Why we process it
- To respond to enquiries and provide our advisory services;
- To conclude and perform contracts with clients;
- To comply with legal and regulatory obligations that apply to us;
- To protect our legitimate interests, including securing our systems;
- For any other purpose you consent to.
We process personal information lawfully, minimally and for defined purposes, in line with the conditions for lawful processing in Chapter 3 of POPIA.
5. How we protect it
We apply appropriate, reasonable technical and organisational measures to secure personal information against loss, damage, unauthorised access and unlawful processing — including access controls, encrypted transmission, and confidentiality undertakings. Engagement information is treated as confidential by default.
6. Who we share it with
We do not sell personal information. We share it only where necessary to deliver our services or comply with law, including with: service providers who process information on our behalf under written agreements (operators, in POPIA terms); admitted attorneys and counsel engaged on a client's matter; and regulators or authorities where the law requires it. Where information is transferred outside South Africa, we do so only as permitted by section 72 of POPIA.
7. How long we keep it
We retain personal information only as long as needed for the purposes above, for periods required by law, or for the establishment, exercise or defence of legal claims — after which it is deleted or de-identified.
8. Your rights
- To be told when your personal information is collected or has been compromised;
- To request access to the personal information we hold about you;
- To request correction or deletion of inaccurate or unlawfully held information;
- To object to processing, including for direct marketing;
- To complain to the Information Regulator (South Africa) — inforegulator.org.za.
To exercise any of these rights, contact our Information Officer at admin@signa-adv.co.za. We will respond within a reasonable time and as required by POPIA.
9. Changes to this policy
We may update this policy from time to time. The current version will always be published on this page with its “last updated” date.