Effective Date: 14 January 2026
Last Updated: 14 January 2026
The Law Catalog is committed to protecting your privacy and processing your personal information in a lawful, transparent, and secure manner, in accordance with the Protection of Personal Information Act, 2013 (POPIA) and other applicable South African laws.
This Privacy Notice explains:
- Who we are
- What personal information we collect
- How we collect it
- Why we process it
- With whom we share it
- How long we keep it
- Your rights as a data subject
- How to contact us
By using our website (https://thelawcatalog.com), submitting information via contact forms, commenting on posts, subscribing to updates, or otherwise interacting with us, you agree to the practices described in this Notice.
1. Who We Are (Responsible Party)
We are The Law Catalog, an independent blog exploring the interconnected, interdisciplinary, and overlapping nature of law.
Our physical address: Operated remotely in South Africa.
Information Officer: Sikhosonke Mayekiso
Email: info@thelawcatalog.com
We act as the “responsible party” under POPIA for the personal information we process.
2. What Personal Information We Collect
We collect only limited personal information necessary for the blog’s operation. This may include:
- Contact and identification information: Name, email address (e.g., when you comment, contact us, or subscribe to newsletters/updates).
- Technical/usage data: IP address, browser type, device information, pages visited, time/date of access (collected automatically via server logs or basic analytics tools).
- Communication data: Any information you voluntarily provide in messages, comments, or forms (e.g., questions about legal topics).
- We do not collect special personal information (e.g., race, health, political opinions) unless you voluntarily provide it in a comment or inquiry, and we do not process it further.
We do not knowingly collect personal information from children under 18 without verifiable parental consent.
3. How We Collect Personal Information
- Directly from you: When you submit a comment, contact form, subscription request, or email us.
- Automatically: Through website technologies like server logs, cookies (if enabled for essential functions), or basic analytics (e.g., no advanced tracking like Google Analytics unless disclosed).
- From third parties: Rarely, e.g., if you comment via a linked social platform (subject to their policies).
4. Purpose and Lawful Basis for Processing
We process your personal information only for specific, legitimate purposes, including:
- To operate, maintain, and improve the blog.
- To respond to your inquiries, comments, or requests.
- To send optional updates/newsletters (if you subscribe).
- To comply with legal obligations (e.g., record-keeping).
- To protect our rights, safety, and the integrity of the site (e.g., moderating abusive comments).
Lawful bases under POPIA (Section 11):
- Your consent (e.g., for subscriptions or optional cookies).
- Necessary for our legitimate interests (e.g., site security, responding to comments) – balanced against your rights.
- Necessary to perform a contract (if any, e.g., providing access to subscribed content).
- Compliance with law.
We do not use your information for automated decision-making or profiling.
5. Sharing Your Personal Information
We do not sell your personal information. We may share it only:
- With service providers (e.g., hosting provider, email service like Mailchimp if used) who are bound by POPIA-compliant agreements.
- If required by law, court order, or to protect our rights.
- In the event of a merger/acquisition (with notice where possible).
No international transfers occur unless to POPIA-equivalent jurisdictions or under adequate safeguards (e.g., standard contractual clauses).
6. Security of Your Personal Information
We take reasonable technical and organisational measures to protect your information from loss, misuse, unauthorised access, disclosure, alteration, or destruction (e.g., secure hosting, limited access, password protection). However, no method is 100% secure – we cannot guarantee absolute security.
7. Retention Period
We keep personal information only as long as necessary for the purposes above or as required by law:
- Comment data: Retained indefinitely unless you request removal.
- Subscription data: Until you unsubscribe.
- Logs/technical data: Up to 12–24 months for security.
Thereafter, we securely delete or anonymise it.
8. Your Rights Under POPIA
As a data subject, you have the right to:
- Access your personal information we hold.
- Request correction, deletion, or destruction (where lawful).
- Object to processing (on reasonable grounds).
- Withdraw consent (where processing is based on consent) — this won’t affect prior lawful processing.
- Lodge a complaint with the Information Regulator (details below).
To exercise these rights, email us at [your email]. We will respond within a reasonable time (usually 30 days).
9. Cookies and Similar Technologies
We use only essential cookies for site functionality (no advertising/tracking cookies unless you enable them). See our separate Cookie Notice [link if you create one] for details. You can manage preferences via your browser.
10. Changes to This Notice
We may update this Notice periodically. Changes will be posted here with the updated date. Continued use of the site after changes constitutes acceptance.
11. Contact Us / Complaints
For questions, requests, or complaints:
Email: info@thelawcatalog.com
If unsatisfied with our response, contact the Information Regulator:
Email: enquiries@inforegulator.org.za
Website: https://inforegulator.org.za
Physical: JD House, 27 Siemert Street, Braamfontein, Johannesburg
Thank you for trusting us with your information. We value your privacy and are committed to handling it responsibly.