privacy policy

LegacyCheck (Pty) Ltd is the responsible party for your personal information under POPIA. We are incorporated in South Africa and operate the estate transparency platform at legacycheck.co.za.

You can reach our Information Officer at [email protected].

We collect different types of information depending on how you use LegacyCheck.

• Estate lookup data: fraud prevention, rate limiting, and an anonymous audit trail, processed under our legitimate interest in keeping the service secure and functional.
• Contact form data: responding to your inquiry, processed with your consent and to perform the communication you requested.
• Analytics data: improving our website and understanding how visitors navigate the service, processed under our legitimate interest in maintaining and enhancing the platform.

We will not use your personal information for any purpose incompatible with the purposes stated above.

• Cloudflare Turnstile: bot protection on estate lookups. Your browser communicates with Cloudflare's servers to verify you are human. Cloudflare is based in the United States and processes data under their own privacy policy.
• Email delivery providers: we use third-party transactional email services to send confirmation and notification emails. These providers process your email address on our behalf and are contractually bound to protect it.
• Google Analytics: we use Google Analytics to understand how visitors use our site, including pages visited, traffic sources, and device types. Google Analytics uses cookies and processes data on Google's servers, which may be located outside South Africa, including in the United States. The data collected is aggregated and does not personally identify you. You can opt out using the Google Analytics Opt-out Browser Add-on.

We do not sell, rent, or trade your personal information to any third party.

Cloudflare Turnstile, Google Analytics, and our email delivery providers may process data outside South Africa, including in the United States and the European Union. Where such transfers occur, we take reasonable steps to ensure your information receives a comparable level of protection to that required under POPIA.

• Identity numbers are stored securely and access is restricted to authorised personnel only
• All data in transit is protected by HTTPS (TLS)
• Session cookies are protected so other websites and browser scripts cannot access them
• Database access is restricted to authorised personnel only
• Subscription payments are processed by Paystack, a PCI-DSS-compliant payment provider. Card numbers, expiry dates, and CVV codes are entered directly into Paystack's secure environment and are never stored on our servers.

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Delete your personal information, subject to legal retention obligations
• Object to processing carried out under legitimate interest
• Withdraw consent at any time, without affecting the lawfulness of processing that occurred before withdrawal
• Lodge a complaint with the Information Regulator (South Africa)

To exercise any of these rights, email us at [email protected] with the subject line "POPIA Request". We will respond within 30 days.

Our website uses a session cookie to maintain your browsing session and stores your cookie consent preference in your browser's local storage. We also use Google Analytics cookies to collect aggregated, anonymised data about how visitors use our site. We do not use advertising cookies. See our Cookie Policy for full details.

We may update this policy from time to time. When we do, we will revise the "last updated" date at the top of this page. Continued use of our services after any changes constitutes your acceptance of the updated policy.

For any privacy-related questions, or to exercise your rights under POPIA: