Privacy Policy

Crawford Harris (“we”, “us”, “our”) is committed to protecting your privacy and handling your personal information responsibly, in accordance with the Protection of Personal Information Act, 4 of 2013 (“POPIA”). This policy explains what personal information we collect through crawfordharris.co.za, why we collect it, how we use and protect it, and what rights you have.

Who is responsible for your information

Crawford Harris is the responsible party for the personal information collected via this website. Any queries about this policy, or requests to exercise your rights under POPIA, can be directed to our Information Officer using the contact details on our contact form or by emailing us at the address listed on this site.

What personal information we collect

  • Contact form submissions: when you use our enquiry form, we collect your name, email address, phone number, and the content of your message.
  • Newsletter sign-up: if you subscribe to updates from us, we collect your email address (and name, if provided) via MailPoet, our email delivery provider.
  • Website usage data: we use Umami, a privacy-focused, self-hosted analytics tool, to understand general visitor numbers and page popularity. Umami does not use tracking cookies and does not collect information that identifies you personally.
  • Security/anti-spam data: our contact form is protected by Cloudflare Turnstile, which performs a challenge in your browser to confirm you are not a bot. Turnstile may process limited technical data (such as your browser and IP address) for this purpose, governed by Cloudflare’s own privacy policy.

Why we collect it (purpose and lawful basis)

  • To respond to your enquiries and provide the legal services you request from us.
  • To send you newsletters or updates you have specifically opted in to receive.
  • To understand how visitors use our website so we can improve it.
  • To protect our website and users from spam and automated abuse.

We only process personal information where you have consented, where it is necessary to take steps at your request prior to entering into an agreement, or where we have a legitimate interest that does not override your right to privacy.

How we protect your information

We take reasonable technical and organisational measures to keep your personal information secure, including restricted access, secure hosting, and up-to-date security software. We do not sell or rent your personal information to third parties. We only share information with third-party service providers (such as our email and hosting providers) to the extent necessary to operate this website and provide our services, and only under obligations of confidentiality.

How long we keep your information

We retain personal information only for as long as necessary to fulfil the purpose for which it was collected, or as required by law or professional record-keeping obligations applicable to legal practices.

Your rights under POPIA

You have the right to:

  • Request confirmation of whether we hold personal information about you, and access to that information;
  • Request correction or deletion of personal information that is inaccurate, irrelevant, excessive, out of date, incomplete, or misleading;
  • Object to the processing of your personal information on reasonable grounds;
  • Withdraw consent (such as unsubscribing from our newsletter) at any time;
  • Lodge a complaint with the Information Regulator of South Africa if you believe your rights under POPIA have been infringed.

The Information Regulator can be contacted at [email protected] or via inforegulator.org.za.

Changes to this policy

We may update this policy from time to time to reflect changes in our practices or legal obligations. The date below shows when this policy was last updated.

Last updated: 14 September 2026