Effective Date: 20 April 2026
Last Updated: 20 April 2026
Website:www.jennamoritz.co.za
Responsible Party: Jenna Moritz Attorneys
Jurisdiction: Republic of South Africa

1. INTRODUCTION

1.1. Jenna Moritz Attorneys (“Firm”, “we”, “us”, or “our”) is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, disclose, and protect your personal information in accordance with the Protection of Personal Information Act 4 of 2013 (“POPIA”) and other applicable South African laws.

1.2. By accessing our Website (www.jennamoritz.co.za) or engaging our legal services, you consent to the practices described in this Privacy Policy. If you do not agree with this Policy, please do not use our Website or provide us with your personal information.

1.3. We reserve the right to update this Privacy Policy periodically. Any material changes will be posted on this page with an updated effective date. We encourage you to review this Policy regularly.

2. DEFINITIONS

2.1. “Personal Information” means information relating to an identifiable, living, natural person, and where applicable, an identifiable existing juristic person, including but not limited to:

Information relating to race, gender, sex, pregnancy, marital status, national, ethnic, or social origin, colour, sexual orientation, age, physical or mental health, well-being, disability, religion, conscience, belief, culture, language, and birth;
Information relating to education, medical, financial, criminal, or employment history;
Any identifying number, symbol, email address, physical address, telephone number, location information, online identifier, or other particular assignment;
Biometric information;
Personal opinions, views, or preferences;
Correspondence that is implicitly or explicitly of a private or confidential nature.

2.2. “Processing” means any operation or activity concerning personal information, including collection, receipt, recording, organisation, collation, storage, updating, modification, retrieval, consultation, use, dissemination, merging, linking, blocking, degradation, erasure, or destruction.

2.3. “Responsible Party” means the entity that determines the purpose and means for processing personal informationâ€”in this case, Jenna Moritz Attorneys.

2.4. “Data Subject” means the person to whom personal information relatesâ€”in this case, you.

2.5. “Information Officer” means the person appointed by the Firm to oversee POPIA compliance.

3. INFORMATION OFFICER

3.1. The Firm has appointed an Information Officer who is responsible for ensuring compliance with POPIA and handling privacy-related queries and complaints.

3.2. Contact Details:
Information Officer
Jenna Moritz Attorneys
Website:www.jennamoritz.co.za

4. WHAT PERSONAL INFORMATION WE COLLECT

4.1. We may collect and process the following categories of personal information:

4.2. Information You Provide Directly:

(a) Contact Information: Name, surname, email address, telephone number, physical address, and postal address;
(b) Identity Information: South African ID number, passport number, date of birth, nationality, and gender;
(c) Professional Information: Occupation, employer, job title, and professional qualifications;
(d) Financial Information: Banking details, income information, and payment history (where relevant to legal matters);
(e) Case-Related Information: Details relevant to your legal matter, including sensitive personal information necessary for providing legal advice and representation;
(f) Communication Records: Correspondence, emails, and notes from consultations.

4.3. Information Collected Automatically:

(a) Technical Information: IP address, browser type and version, operating system, device information, and screen resolution;
(b) Usage Information: Pages visited, time spent on the Website, referring website, and clickstream data;
(c) Location Information: General geographic location derived from your IP address.

4.4. Information from Third Parties:

(a) Information from opposing parties, witnesses, or other parties involved in legal proceedings;
(b) Information from public records, regulatory bodies, or other publicly available sources;
(c) Information from referral sources or professional networks.

5. HOW WE COLLECT PERSONAL INFORMATION

5.1. We collect personal information through various means, including:

(a) Direct interactions when you contact us via telephone, email, or in person;
(b) Website contact forms, consultation requests, or newsletter subscriptions;
(c) Client intake forms and engagement letters;
(d) Correspondence during the course of legal representation;
(e) Third-party service providers acting on our behalf;
(f) Automated technologies such as cookies and server logs.

6. PURPOSE OF PROCESSING

6.1. We process your personal information for the following lawful purposes:

6.2. Primary Purposes:

(a) Legal Services: To provide legal advice, representation, and related services;
(b) Client Management: To manage our relationship with you, including billing, communication, and file management;
(c) Contractual Obligations: To fulfil our contractual obligations to you and enforce our rights;
(d) Compliance: To comply with applicable laws, regulations, court orders, and professional obligations.

6.3. Secondary Purposes:

(a) Communication: To respond to your enquiries and provide updates on your matters;
(b) Marketing: To send you legal updates, newsletters, or information about our services (only with your consent, which you may withdraw at any time);
(c) Website Improvement: To analyse Website usage and improve user experience;
(d) Security: To protect our Website, systems, and clients from fraud, unauthorised access, or other security threats;
(e) Legal Proceedings: To establish, exercise, or defend legal claims.

7. LEGAL BASIS FOR PROCESSING

7.1. In terms of POPIA, we process personal information based on the following lawful grounds:

(a) Consent: Where you have given explicit consent for specific processing activities;
(b) Contractual Necessity: Where processing is necessary to perform a contract with you or take steps at your request before entering into a contract;
(c) Legal Obligation: Where processing is necessary to comply with our legal or regulatory obligations;
(d) Legitimate Interest: Where processing is necessary for our legitimate interests, provided your rights and interests do not override those interests;
(e) Protection of Data Subject: Where processing is necessary to protect your vital interests or those of another person.

8. COOKIES AND TRACKING TECHNOLOGIES

8.1. Our Website uses cookies and similar tracking technologies to enhance your browsing experience and collect usage information.

8.2. Types of Cookies We Use:

(a) Essential Cookies: Necessary for the Website to function properly;
(b) Analytical/Performance Cookies: Help us understand how visitors interact with our Website;
(c) Functionality Cookies: Remember your preferences and settings.

8.3. You can manage cookie preferences through your browser settings. However, disabling certain cookies may affect the functionality of our Website.

9. HOW WE SHARE YOUR PERSONAL INFORMATION

9.1. We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

(a) Service Providers: With trusted third-party service providers who assist us in operating our Website, conducting our business, or servicing you (e.g., IT support, cloud storage providers, accounting services), provided they agree to keep your information confidential and secure;
(b) Legal Requirements: When required by law, court order, or legal process, or to protect our rights, property, or safety, or that of our clients or others;
(c) Professional Advisors: With other legal professionals, experts, or counsel where necessary for your legal matter;
(d) Regulatory Bodies: With the Legal Practice Council, Law Society, or other regulatory authorities as required by law;
(e) Business Transfers: In connection with a merger, acquisition, or sale of assets, subject to confidentiality obligations.

9.2. All third parties with whom we share personal information are required to maintain appropriate security measures and process information only in accordance with our instructions.

10. INTERNATIONAL TRANSFERS

10.1. We primarily process personal information within the Republic of South Africa.

10.2. In limited circumstances, we may transfer personal information to recipients outside South Africa (e.g., cloud service providers with servers abroad). Where such transfers occur, we ensure that:

(a) The recipient country has adequate data protection laws;
(b) Appropriate safeguards are in place, such as standard contractual clauses or binding corporate rules;
(c) The transfer is necessary for the performance of a contract or with your explicit consent.

11. DATA SECURITY

11.1. We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction, including:

(a) Encryption of data in transit and at rest;
(b) Secure server environments and firewalls;
(c) Access controls and authentication procedures;
(d) Regular security assessments and updates;
(e) Staff training on data protection and confidentiality.

11.2. Despite these measures, no method of transmission over the internet or electronic storage is completely secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

12. DATA RETENTION

12.1. We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, including:

(a) The duration of our attorney-client relationship;
(b) Any period required by applicable laws or professional regulations;
(c) The period necessary to establish, exercise, or defend legal claims.

12.2. Once the retention period expires, we will securely delete, destroy, or de-identify your personal information in accordance with our data retention policies and applicable law.

13. YOUR RIGHTS AS A DATA SUBJECT

13.1. In terms of POPIA, you have the following rights regarding your personal information:

13.2. Right of Access:

You have the right to request confirmation of whether we hold personal information about you and to request access to such information.

13.3. Right to Correction:

You have the right to request the correction or updating of any inaccurate, irrelevant, excessive, out-of-date, incomplete, misleading, or unlawfully obtained personal information.

13.4. Right to Deletion:

You have the right to request the deletion or destruction of personal information that we are no longer authorised to retain, subject to legal and professional obligations.

13.5. Right to Object:

You have the right to object to the processing of your personal information on reasonable grounds relating to your particular situation, or if the processing is for direct marketing purposes.

13.6. Right to Withdraw Consent:

Where processing is based on consent, you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing prior to withdrawal.

13.7. Right to Lodge a Complaint:

You have the right to lodge a complaint with the Information Regulator if you believe your rights have been infringed.

14. EXERCISING YOUR RIGHTS

14.1. To exercise any of your rights, please contact our Information Officer using the contact details provided in Section 3.

14.2. We may require proof of identity before processing your request to ensure the security of your information.

14.3. We will respond to your request within a reasonable time and in accordance with POPIA requirements. In certain circumstances, we may charge a reasonable fee for providing access to your information.

15. DIRECT MARKETING

15.1. We will only send you marketing communications if you have provided your consent or if we have a legitimate interest to do so.

15.2. You may opt out of receiving marketing communications at any time by:

(a) Clicking the “unsubscribe” link in any marketing email;
(b) Contacting our Information Officer;
(c) Updating your preferences through your account settings (if applicable).

16. CHILDREN’S PRIVACY

16.1. Our Website and services are not directed at children under the age of 18. We do not knowingly collect personal information from children without appropriate parental or guardian consent.

16.2. If you believe we have inadvertently collected personal information from a child, please contact us immediately so that we can take appropriate steps to delete such information.

17. LINKS TO THIRD-PARTY WEBSITES

17.1. Our Website may contain links to third-party websites. This Privacy Policy does not apply to those websites.

17.2. We encourage you to review the privacy policies of any third-party websites you visit, as we are not responsible for their privacy practices or content.

18. BREACH NOTIFICATION

18.1. In the event of a personal information breach that is likely to result in serious harm to you, we will notify you and the Information Regulator in accordance with POPIA requirements.

18.2. We will take all reasonable steps to mitigate any potential harm resulting from a breach.

19. COMPLAINTS

19.1. If you have any concerns or complaints about our handling of your personal information, please contact our Information Officer in the first instance.

19.2. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Regulator:

Information Regulator (South Africa)
Website:www.inforegulator.org.za
Email:inforeg@justice.gov.za

20. CONTACT US

20.1. For any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us:

Jenna Moritz Attorneys
Website:www.jennamoritz.co.za

21. GOVERNING LAW

21.1. This Privacy Policy is governed by the laws of the Republic of South Africa, including POPIA.

By using our Website or engaging our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal information as described herein.