Privacy Policy

Last updated: June 2026

This document is a starting template. Company-specific details in [square brackets] must be completed, and the final wording should be reviewed by a qualified attorney before you rely on it.

Investment Property Platform (“IPP”, “we”, “us”, “our”), operated by [Company Name] (Pty) Ltd (registration number [____]), is committed to protecting your personal information in accordance with the Protection of Personal Information Act, 2013 (POPIA).

1. Information we collect

Account information — your name, email address, password and membership tier.
Contact and profile details — phone number, company and investor type where you provide them.
Activity — saved opportunities, watchlist, alert preferences, document downloads and confidentiality (NDA) acceptances.
Payment information — subscription payments are processed by our payment provider, PayFast. We do not store your card details.
Technical data — IP address, browser and usage data collected through cookies and analytics.

2. How we use your information

To create and manage your account and provide the platform’s features.
To process membership payments and send service communications.
To send opportunity alerts and newsletters where you have opted in.
To maintain records of confidentiality undertakings for off-market documents.
To improve the platform and for security, fraud prevention and legal compliance.

3. Sharing your information

We share personal information only with: our service providers (payment processing, email delivery, hosting and analytics); property sellers or agents when you submit an enquiry; and authorities where required by law. We do not sell your personal information.

4. Cookies

We use cookies and similar technologies as described in our Cookie Policy.

5. Security and retention

We take reasonable technical and organisational measures to safeguard your information and retain it only for as long as necessary for the purposes set out above or as required by law.

6. Your rights under POPIA

You have the right to access, correct or delete your personal information, to object to processing, and to lodge a complaint with the Information Regulator (South Africa). To exercise these rights, contact our Information Officer at [privacy@your-domain.co.za].

7. Cross-border transfers

Some service providers may process data outside South Africa. Where this occurs we take steps to ensure your information receives an adequate level of protection.

8. Changes and contact

We may update this policy from time to time. Questions can be directed to [privacy@your-domain.co.za].