1. Introduction

Cream Legal (“we”, “our”, or “us”) is committed to protecting your privacy and ensuring that your personal information is processed lawfully, transparently, and securely in accordance with South African legislation, including the Protection of Personal Information Act, 4 of 2013 (POPIA) and the Electronic Communications and Transactions Act, 25 of 2002 (ECTA).

This Privacy Policy explains:

• What personal information we collect.
• How we use and protect your personal information.
• Your rights in terms of POPIA.
• How to contact us for queries or complaints.

By using our website, contacting us, or making use of our services, you agree to the terms of this Privacy Policy.

2. Personal Information We Collect

We may collect and process the following types of personal information:

2.1 Information You Provide Directly

When you:

• Fill in a contact form, consultation booking form, or eligibility assessment form.
• Email or call us.
• Subscribe to our newsletters or legal updates.
• Enter into a service agreement with us.

This may include:

• Full name
• Contact details (email, phone number, address)
• Identification numbers or passport details (for immigration and legal services)
• Business registration details
• Payment or billing information

2.2 Information Collected Automatically

When you visit our website, we may collect:

• IP address
• Browser type and version
• Pages you visit and the time spent on them
• Cookies and similar tracking technologies (see Section 8)

3. Purpose of Processing

We process your personal information for the following purposes:

• To provide legal, immigration, business, and conveyancing services.
• To respond to your enquiries and provide consultations.
• To send you updates, legal resources, or marketing material (if you opt-in).
• To comply with legal and regulatory requirements.
• For billing and payment purposes.
• To improve our website and services.

4. Legal Basis for Processing

We will only process your personal information if:

• You have given us consent.
• It is necessary for the performance of a contract with you.
• It is required to comply with legal obligations.
• It is in our legitimate interest to do so (e.g., improving services, preventing fraud).

5. Disclosure of Personal Information

We do not sell your personal information. We may share your information only with:

• Our internal staff and consultants for service delivery.
• Third-party service providers (e.g., IT support, payment processors) and affiliates under strict confidentiality agreements.
• Regulatory authorities or law enforcement where required by law.
• Professional service providers such as attorneys, auditors, and accountants, when necessary for your matter.

6. Cross-Border Transfers

Where we transfer personal information outside of South Africa (e.g., for immigration matters or cloud storage), we ensure that the receiving party is subject to laws or agreements providing adequate protection.

7. Data Retention

We will retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law (e.g., financial record-keeping for 5 years).

8. Cookies & Tracking

We use cookies to:

• Improve your browsing experience.
• Analyse website traffic.
• Customise content and advertising.

You can manage or disable cookies in your browser settings, but some website features may not work properly without them.

9. Security of Information

We take reasonable technical and organisational measures to protect your personal information from loss, misuse, unauthorised access, alteration, or disclosure. These measures include encryption, secure servers, and restricted access protocols.

10. Your Rights Under POPIA You have the right to:

• Access your personal information.
• Correct inaccurate or outdated information.
• Request deletion of your personal information (subject to legal obligations).
• Withdraw consent at any time (without affecting prior lawful processing).
• Object to certain types of processing.

To exercise these rights, contact our Information Officer.

11. Information Officer

Name: Natasha Khadambi 

Email: legal@creamcorp.co.za

Phone: +27 76 115 6967

Address: 821 Edgar Avenue, 26 Periwinkle Complex, Noordwyk, Midrand, 1687

12. Changes to this Policy

We may update this Privacy Policy from time to time. The latest version will always be posted on our website.

13. Complaints

If you believe we have not handled your personal information properly, you may lodge a complaint with:

The Information Regulator

Website: www.justice.gov.za/inforeg/

Email: complaints.IR@justice.gov.za

Cream Legal – Legal Made Simple. Business Made Strong.