Thom Kight & Company

Legal

Privacy Policy

How we collect, use, and protect your personal information — in compliance with POPIA and GDPR.

Section 1

Introduction

At Thom Kight & Company, one of our core priorities is respecting and protecting your privacy. This Privacy Policy outlines the types of information we collect, how we use it, your rights as a data subject, and our compliance with the Protection of Personal Information Act (POPIA) and, where applicable, the General Data Protection Regulation (GDPR).

Section 2

What We Collect

We may collect and process the following personal information:

  • Identity and contact data (name, ID/passport number, phone number, email)
  • Funeral service preferences and records, including medical records
  • Billing and payment details
  • Website usage data (IP address, browser type, timestamps, log files)

Section 3

Purpose & Lawful Basis

We collect and use personal information:

  • To perform a contract with you (e.g., funeral arrangements)
  • Because you have given us consent
  • Where it is necessary for our legitimate interests
  • To comply with legal and regulatory obligations

Section 4

How We Use Your Data

Your personal information may be used to:

  • Deliver funeral services and related offerings
  • Respond to enquiries and manage client relationships
  • Process insurance claims and internal documentation
  • Ensure compliance with applicable laws
  • Conduct analytics and improve our website

Section 5

Data Retention

We retain personal information only for as long as necessary to fulfil the purposes outlined in this policy or to meet legal, accounting, or reporting obligations.

Section 6

Third-Party Sharing

We may share your data with:

  • Service providers assisting with funeral arrangements
  • Insurance partners for claims processing
  • Website analytics or marketing partners (with consent)
  • Regulatory bodies, where required

Section 7

Your Rights

Under POPIA and GDPR, you have the right to access, update, or delete your personal data; object to processing; request data portability; and withdraw consent at any time. Please email gabrielle@thomkight.co.za to exercise these rights.

Section 8

Security Safeguards

We implement reasonable technical and organisational measures to secure your data from loss, misuse, unauthorised access, or disclosure. If your personal information is transferred outside South Africa, we ensure adequate protection in accordance with Section 72 of POPIA.

Section 9

Contact Us

Information Officer: Gabrielle Keight — gabrielle@thomkight.co.za. By using our website, you hereby consent to this Privacy Policy and agree to its terms.