Privacy Policy

Your privacy matters. Learn how we collect, use, and protect your personal information in compliance with POPIA and South African privacy laws.

Last updated: May 12, 2026
POPIA Compliant
Version 2.0

Introduction

Legacy Protection Services respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, share, and protect personal information when you visit our website, contact us, request a quotation, or engage with our services.

We aim to process personal information in a lawful, reasonable, and responsible manner consistent with applicable South African privacy laws, including the Protection of Personal Information Act (POPIA).

By using our website or providing us with your personal information, you acknowledge that you have read and understood this Privacy Policy.

Who We Are

Legacy Protection Services is a professional security company providing VIP protection, armed response, electronic security, security consulting, and related services across South Africa and internationally.

Registration Number: 2024/123456/07
POPIA Information Officer: security@legacyprotectionafrica.com
PSIRA Registration: Active - Fully Compliant

Information We Collect

We may collect the following types of personal information:

Identity Information

Name, surname, title, and identification number where required

Contact Information

Email address, phone number, physical address, and postal address

Business Information

Company name, job title, professional credentials, and business address

Service Information

Security requirements, location preferences, service history, and assessment details

Communication Information

Enquiry details, quote requests, email communications, and form submissions

Technical Information

IP address, browser type, device type, pages visited, and referral source

We do not intentionally collect sensitive personal information unless explicitly required for service delivery and with your consent.

How We Collect Information

We collect personal information through the following methods:

  • Direct interactions: When you complete forms on our website, request a quotation, or contact us via email, phone, or contact forms
  • Automated technologies: When you browse our website, we may collect technical data through cookies and similar technologies
  • Third-party sources: We may receive information from service providers or business partners where lawful and necessary
  • Public sources: We may collect information from publicly available sources where relevant to our services

Why We Process Your Information

We process personal information for legitimate business purposes, including:

  • Responding to enquiries and providing information about our services
  • Preparing, sending, and managing quotations and proposals
  • Communicating about requested or contracted security services
  • Verifying service requirements and conducting security assessments
  • Providing customer support and technical assistance
  • Improving our website, services, and user experience
  • Maintaining internal records and administrative purposes
  • Complying with legal, regulatory, and security obligations
  • Protecting our legitimate business interests, including fraud prevention
  • Marketing and communication (only with your consent)

Sharing Your Information

We do not sell, rent, or trade your personal information.

We may share personal information with trusted third parties where necessary:

  • Service providers: Website hosting, IT support, email platforms, and data storage providers who process information on our behalf under strict confidentiality agreements
  • Professional advisers: Legal, accounting, insurance, and consulting professionals who provide services to us
  • Business partners: Where necessary for service delivery (e.g., security technology providers) with appropriate safeguards
  • Legal authorities: Regulatory, law enforcement, or governmental authorities where disclosure is required by law, court order, or legal process
  • Business transfers: In connection with a merger, acquisition, restructuring, or sale of assets (with notice provided where required)

Cookies & Website Analytics

Our website uses cookies and similar technologies to improve functionality, understand website usage, analyse performance, and enhance user experience.

You may control cookies through your browser settings. Disabling certain cookies may affect how parts of the website function.

Data Security

We take reasonable technical and organisational measures to protect personal information against loss, misuse, unauthorised access, disclosure, alteration, or destruction. These measures include:

SSL/TLS Encryption Secure Server Infrastructure Access Controls & Authentication Regular Security Assessments Staff Training on Data Protection

No method of transmission over the internet is completely secure. While we take reasonable steps to safeguard information, we cannot guarantee absolute security.

Data Retention

We retain personal information only for as long as necessary for the purpose it was collected:

Enquiries & Quotations Up to 12 months, unless a contract is concluded
Client Service Data Duration of service agreement + applicable legal retention period
Communication Records As necessary to respond to enquiries and maintain service history
Technical & Analytics Data Up to 26 months for website analytics purposes

When personal information is no longer required, we will take reasonable steps to delete, destroy, or de-identify it in accordance with applicable requirements.

Your Rights

Subject to applicable law, including POPIA, you have the following rights regarding your personal information:

Right to Access

Request access to the personal information we hold about you

Right to Correction

Request correction of inaccurate or incomplete information

Right to Object

Object to certain processing in appropriate circumstances

Right to Deletion

Request deletion of your personal information where lawful

Right to Withdraw Consent

Withdraw consent where processing is based on consent

Right to Lodge Complaint

Lodge a complaint with the Information Regulator of South Africa

To exercise these rights, please contact us using the information in Section 14. We will respond within a reasonable timeframe as required by law.

Children's Privacy

Our website and services are not directed at children under the age of 18. We do not knowingly collect personal information from children without verifiable parental consent.

If you believe we have inadvertently collected personal information from a child without proper consent, please contact us immediately so we can take appropriate action.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect operational, legal, or website changes. The updated version will be posted on this page with a revised "Last updated" date.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Material changes will be notified through our website or by direct communication where appropriate.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how your personal information is handled, please contact us:

Address 1 Trajan Place, Moreleta Park, Pretoria East, 0181, South Africa
POPIA Information Officer: security@legacyprotectionafrica.com

For privacy-related enquiries or to exercise your rights, please use our Contact page or email us directly.