Privacy Policy

(Protection of Personal Information Act, 4 of 2013 – POPIA)

1. Introduction

Thomson Krummeck and Associates  (“we”, “us”, “our”) is committed to protecting the privacy and personal information of all data subjects whose information we process.

This Privacy Policy explains how we collect, use, store, disclose, and protect personal information in accordance with the Protection of Personal Information Act, 4 of 2013 (POPIA).

By using this website or providing us with personal information, you consent to the processing of your personal information as set out in this policy.

2. Responsible Party

For purposes of POPIA, Thomson Krummeck and Associates is the Responsible Party.

Information Officer:
Name: Kelvin Thomson
Email Kelvin at TKA.co.za
Telephone: +27 (0)83 400 1611

3. Personal Information We Collect

We may collect and process the following categories of personal information, depending on how you interact with us:

  • Full name

  • Email address

  • Telephone number

  • Company name and job title

  • IP address and browser information

  • Website usage data (via cookies)

  • Any information voluntarily submitted through contact forms, emails, or enquiries

We do not intentionally collect special personal information unless legally required or explicitly consented to.

4. Purpose of Processing

Personal information is collected and processed for legitimate business purposes, including:

  • Responding to enquiries or requests

  • Providing products or services

  • Managing client or supplier relationships

  • Improving website functionality and user experience

  • Complying with legal or regulatory obligations

  • Internal administration and record-keeping

We only process personal information where there is a lawful basis to do so.

5. Lawful Basis for Processing

We process personal information on one or more of the following grounds:

  • Consent from the data subject

  • Performance of a contract

  • Compliance with a legal obligation

  • Legitimate business interests, where such interests do not override the rights of the data subject

6. Information Sharing and Disclosure

We may share personal information with:

  • Employees, contractors, or service providers who require access to perform their duties

  • Third-party service providers (e.g. IT, hosting, analytics) under appropriate confidentiality and security safeguards

  • Regulatory or law-enforcement authorities where required by law

We do not sell or trade personal information.

7. Cross-Border Transfers

Where personal information is transferred outside South Africa, we ensure that:

  • The recipient country has adequate data protection laws; or

  • Appropriate contractual safeguards are in place; or

  • The data subject has consented to the transfer

8. Information Security

We take reasonable technical and organisational measures to protect personal information against:

  • Loss

  • Unauthorised access

  • Unlawful processing

  • Damage or destruction

These measures include access controls, secure systems, and internal governance policies aligned with our Code of Conduct.

9. Data Retention

Personal information is retained only for as long as necessary to fulfil the purposes for which it was collected, or as required by law.

Once no longer required, personal information is securely destroyed or anonymised.

10. Data Subject Rights

In terms of POPIA, data subjects have the right to:

  • Access their personal information

  • Request correction or deletion of information

  • Object to the processing of personal information

  • Withdraw consent (where applicable)

  • Lodge a complaint with the Information Regulator

Requests may be submitted to the Information Officer using the contact details above.

11. Cookies and Website Usage

This website uses cookies in accordance with our Cookie Declaration.
Cookies may collect limited personal information to enhance website functionality and analytics.

Users may manage cookie preferences via their browser settings.

12. PAIA Requests

Requests for access to records are governed by the Promotion of Access to Information Act, 2 of 2000 (PAIA) and must be submitted in the prescribed manner.

Further details are available in our PAIA documentation or on request.

13. Changes to This Privacy Policy

Thomson Krummeck and Associates reserves the right to update this Privacy Policy from time to time.
Any changes will be posted on this page and will take effect upon publication.

14. Contact Details

For any privacy-related enquiries, please contact:

Information Officer
Email: Kelvin at TKA.co.za    
Telephone: +27 (0)83 400 1611