Privacy policy
How prop.forsale collects, uses and protects personal information, and the choices you have.
Last updated 2026-09-24
Who we are
prop.forsale is operated by [Operator legal entity and registration number], [Registered address] ("we"). We provide websites, listing tools, enquiry handling, newsletters and billing to property agencies, and a property discovery site for the public.
For information about agency users, platform visitors and billing, we are the responsible party. For information an agency collects through its own site (enquiries, newsletter subscribers, deals), the AGENCY is the responsible party and we act as its operator under the operator terms in our Terms of service. Each agency site links to the agency's own privacy notice.
Information Officer: [Information Officer name, once registered with the Information Regulator]. Contact: [privacy contact email].
What we collect
We collect only what the service needs:
- Agency users: name, email address, sign-in and security records, role, and the agency details you enter (brand, contact details, listings, content).
- Enquirers (on behalf of agencies): name, email, optional phone number, message, the listing concerned, your consent choices and a one-way hash of your IP address as evidence of consent.
- Newsletter subscribers (on behalf of agencies): email, optional name, tags, consent record, confirmation and unsubscribe events, and delivery, bounce or complaint status.
- Billing: the billing contact and Stripe customer reference. Card details go directly to Stripe; we never see or store them.
- Technical data: IP address, browser and request information needed to deliver pages, stop abuse and keep the service secure; aggregated page-view counts.
Why we use it, and on what basis
We process personal information only for a specific, lawful purpose (POPIA sections 9 to 13):
- To provide the service you signed up for (performance of a contract).
- To deliver an enquiry to the agency you contacted and let it reply (your consent, which you give on the form).
- To send newsletters you confirmed by double opt-in (your consent; every email has a one-click unsubscribe).
- To take payment and keep financial records (contract and legal obligation).
- To secure the service, prevent spam and abuse, and fix faults (legitimate interest).
Transfers outside South Africa
Our service providers process information outside South Africa, mainly in the United States and the European Union. We only use providers bound by agreements that require an adequate level of protection, as POPIA section 72 requires, and we rely on those contractual safeguards (or, where applicable, your consent or the performance of a contract with you) for each transfer.
How long we keep it
We keep personal information only as long as the purpose requires (section 14). Planned periods: enquiries and deals [retention period to be confirmed (DEC-04)]; unsubscribed newsletter addresses are reduced to a suppression record after [retention period to be confirmed (DEC-04)]; audit and billing records as long as the law requires. When an agency deletes its workspace, its data is removed 30 days later, including uploaded files.
How we protect it
We use encryption in transit, strict separation between agencies, hashed passwords and tokens, least-privilege access for staff, and logging of administrative actions (section 19). If we become aware of a security compromise affecting your information we will notify you and the Information Regulator as section 22 requires.
Your rights
Contact [privacy contact email] to use any of these rights. For information an agency holds, contact the agency first; we will help it respond.
- Ask whether we hold personal information about you and request a copy (POPIA section 23).
- Ask us to correct or delete information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or unlawfully obtained (section 24).
- Object to processing based on legitimate interests, and to direct marketing at any time (section 11(3)).
- Withdraw consent you gave, without affecting processing that took place before you withdrew it.
- Lodge a complaint with the Information Regulator (South Africa): inforeg.org.za, complaints.IR@inforegulator.org.za.
More information
Cookies are described in our cookie notice (/cookies). How to request records is described in our PAIA manual (/paia-manual). We will post any change to this policy on this page with a new date.