Privacynotice

Who we are

This privacy notice explains how personal information is collected and used on this website, in line with the Protection of Personal Information Act 4 of 2013 (POPIA).

Our Information Officer is registered with the Information Regulator of South Africa, as POPIA requires.

What we collect

We only collect what we need in order to do the thing you have asked us to do.

When you use the contact form

• Your name
• Your email address
• Your telephone number, if you choose to give it
• The subject you select and whatever you write in the message

When you place an order

• Your name, email address and telephone number
• Your delivery address
• A record of what you bought and when

We never see or store your card details. Card payments are handled entirely by our payment provider on their own secure systems. We receive only a confirmation that a payment succeeded or failed.

Automatically, when you visit

• Your IP address, browser type and device type
• Which pages you visited and how long you stayed

Why we collect it

We do not use your information for any purpose other than the one it was collected for, unless you agree or the law requires it.

Who we share it with

We do not sell your personal information. We never have and we do not intend to.

We share it only with the operators who make the service work:

• Our payment provider — to process your payment securely
• Our courier — your name, address and phone number, so your order can be delivered
• Our email and form providers — to receive and reply to your message
• Our accountant — transaction records, for tax and audit
• SARS, a regulator or a court — where we are legally obliged to disclose

Some of these operators store information on servers outside South Africa. Where that happens we only use providers who are subject to laws or binding agreements that give your information a level of protection comparable to POPIA, as section 72 requires.

How long we keep it

• Enquiries that do not become business: 12 months, then deleted
• Client and order records: 5 years from the end of the transaction, as tax law requires
• Property mandates and related records: for the period required by the Property Practitioners Act and FICA
• Marketing list: until you unsubscribe

Once a retention period ends, the information is deleted or permanently anonymised.

How we protect it

• The website is served over an encrypted HTTPS connection
• Payments are processed by a PCI-DSS compliant provider; we never handle card data
• Access to client records is limited to those who need it
• Accounts protecting personal information use strong, unique passwords with multi-factor authentication where available

If a security compromise occurs that puts your personal information at risk, we will notify both the Information Regulator and you, as section 22 of POPIA requires.

Your rights

Under POPIA you have the right to:

• Ask what we hold about you, and receive a copy
• Correct or delete information that is wrong, misleading, irrelevant or out of date
• Object to us processing your information, on reasonable grounds
• Withdraw consent you previously gave, at any time
• Unsubscribe from marketing, in any message we send you
• Complain to the Information Regulator

To exercise any of these, email YOUR@EMAIL. We will respond within 30 days. There is no charge, except a reasonable fee for the cost of copying where a request is large.

The Information Regulator

If you are not satisfied with how we have handled your information, you may complain directly:

Cookies

Cookies are small files a website stores on your device.

• Essential cookies keep the site working — remembering your cookie choice, for instance. These cannot be switched off.
• Analytics cookies tell us which pages people read. These are only set if you accept them.

Declining analytics cookies does not affect anything you can do on the site. You can also clear or block cookies in your browser settings at any time.

Direct marketing

We will only send you marketing by email or SMS if you have asked us to, or if you are an existing client and the message relates to something similar to what you already bought — which is the narrow exception section 69 of POPIA allows.

Every message includes a one-click unsubscribe. We act on unsubscribes immediately.

Children's information

This website is not directed at children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has given us their information, contact us and we will delete it.

Changes to this notice

We may update this notice as the business or the law changes. The date at the top always reflects the current version. Where a change materially affects your rights, we will tell you directly.