Privacy Policy

1. Responsible Party & Information Officer

Under POPIA, we act as the Responsible Party for all personal information collected through our platform. Our Information Officer is registered with the Information Regulator and is responsible for ensuring POPIA compliance.

2. Scope of Protection

This Privacy Policy applies to all personal information processed by Dynasty 8 Real.Estate, including information relating to both natural persons (individuals) and juristic persons (companies, trusts, close corporations, and other legal entities). POPIA uniquely protects both categories in South Africa.

By using our platform, you consent to the practices described in this Privacy Policy. If you do not agree with this policy, please do not use our services.

3. Personal Information We Collect

3.1 Account Information (Mandatory)

• Name and surname — Required to create an account
• Email address — Required for authentication and communications
• Phone number — Required for property inquiry contact
• Password — Encrypted and never stored in plain text

Consequences of non-provision: Without this information, you cannot create an account or list properties on our platform.

3.2 Profile Information (Voluntary)

• Profile photo
• Company name and business registration number (for juristic persons)
• Professional credentials or bio

3.3 Property Listing Information

• Property details, descriptions, images, and location data
• Contact information displayed on listings (WhatsApp, email, phone)
• Property pricing and financial information

3.4 Usage & Technical Information

• IP address and browser type
• Device information and operating system
• Pages viewed, time spent, search queries, and property interactions
• Referring websites and exit pages

3.5 Location Information (With Consent)

With your explicit consent, we may collect precise geolocation data to provide location-based property search features and map functionality. You can withdraw this consent at any time through your browser or device settings.

3.6 Payment Information

Billing address and payment method details are processed securely via our payment processor, Netcash. We do not store your full credit card details or banking information on our servers.

4. Lawful Basis for Processing (POPIA Section 11)

We process personal information only where a lawful basis exists under POPIA:

• Consent: For marketing communications, cookie deployment (non-essential), and location tracking. You may withdraw consent at any time.
• Contract: To perform our subscription agreement and provide dashboard tools to property owners.
• Legal Obligation: To comply with tax, financial, and regulatory requirements.
• Legitimate Interest: For fraud prevention, platform security, and analytics — provided this does not override your rights.

5. Purpose of Processing

We collect and process personal information for the following specific, explicitly defined purposes only. We do not use your information for any incompatible purpose.

• To provide and maintain our SaaS property listing and management services
• To process subscription payments via Netcash
• To display your contact details on property listings so buyers/tenants can connect with you directly
• To send service-related notifications and updates (account, billing, security)
• To improve platform functionality and user experience
• To analyze usage patterns and optimize our services (with your analytics consent)
• To prevent fraud and ensure platform security
• To comply with legal obligations and protect our rights

6. Direct Marketing & Consent (POPIA Section 69)

Under POPIA, explicit opt-in consent is required for all unsolicited electronic marketing (email, SMS, WhatsApp). We do not use "legitimate interest" as a basis for marketing to non-customers.

• We will only send you marketing communications if you have explicitly opted in via a separate, unticked checkbox.
• Existing customers may receive marketing about similar products/services on an opt-out basis, as permitted by POPIA.
• Every marketing message includes a free, accessible opt-out mechanism.
• You may withdraw marketing consent at any time by emailing privacy@dynasty8real.estate or clicking the unsubscribe link in any email.

7. Cookies & Tracking Technologies

We use cookies and similar technologies to enhance your browsing experience. Under POPIA, we require your affirmative, informed consent before deploying non-essential cookies.

7.1 Essential Cookies (No Consent Required)

• Authentication and session management
• Security features and fraud prevention
• Load balancing and platform stability

7.2 Functional Cookies (Consent Required)

• Language and theme preferences
• User settings and saved preferences

7.3 Analytics Cookies (Consent Required)

• Google Analytics (G-S2R0Z2MDM2): Website traffic analysis. Data may be transferred to the United States.
• Microsoft Clarity: User behaviour and session recordings. Data may be transferred to the United States.
• SiteTooling: Lead capture and engagement analytics.

7.4 Marketing Cookies (Consent Required)

• Facebook/Meta Pixel: Retargeting and ad performance. Data transferred to the United States.
• TikTok Pixel: Ad campaign tracking and retargeting. Data transferred to the United States and Singapore.

You can manage your cookie preferences at any time by clicking the cookie icon in the bottom-left corner of the screen. You can also control cookies through your browser settings. Note that disabling essential cookies may affect platform functionality.

8. Third-Party Operators & Cross-Border Transfers

We share personal information with trusted third-party operators (processors) who assist in operating our platform. All operators are bound by written agreements imposing POPIA-equivalent obligations.

Cross-border transfer notice: Some of our operators process personal information outside South Africa (primarily in the United States and Singapore). By using our platform and consenting to the relevant cookie categories, you explicitly consent to these transfers, acknowledging that the foreign jurisdictions may not provide protection substantially similar to POPIA. We mitigate this risk through binding data processing agreements with all operators.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption of data in transit (SSL/TLS) and at rest
• Regular security assessments and penetration testing
• Role-based access controls and strong authentication mechanisms
• Secure data storage using industry-leading cloud providers
• Employee training on data protection practices
• Internal breach register maintained for all security incidents

While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

10. Data Breach Notification

In the event of a security compromise involving unauthorized access, acquisition, loss, destruction, or alteration of personal information, we will:

• Notify the Information Regulator via the mandatory eServices Portal as soon as reasonably possible (best practice: within 72 hours of discovery).
• Notify affected data subjects directly via email, SMS, or prominent website notice.
• Provide: a description of the breach, categories of data involved, approximate number of affected subjects, likely consequences, measures taken, and recommendations for mitigation.
• Delay notification only if law enforcement or the Regulator determines it would impede a criminal investigation.
• Maintain a documented internal breach register even for incidents below the reporting threshold.

11. Data Retention & Destruction

We retain personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law.

• Active accounts: Retained while your account is active and for 1 year after your last login.
• Property listings: Retained for the listing duration plus 1 year for legal and dispute resolution purposes.
• Payment records: Retained for 5 years in accordance with South African tax law.
• Marketing consent records: Retained for 3 years after consent is withdrawn, for audit purposes.
• Server logs & analytics: Retained for 12 months, then anonymized or deleted.

When personal information is no longer required, we destroy, delete, or de-identify it in a manner that prevents reconstruction in an intelligible form. You may request account deletion at any time by contacting our Information Officer.

12. Your Rights as a Data Subject (POPIA Section 23–24)

Under POPIA, you have the following rights. You may submit requests via hand, fax, post, email, SMS, WhatsApp, or telephone.

• Access (Section 23): Request confirmation that we hold your data and request a copy. We may charge a reasonable fee, which we will disclose in writing before processing.
• Correction (Section 24): Request correction of inaccurate, irrelevant, excessive, out of date, incomplete, misleading, or unlawfully obtained data. No charge for correction requests.
• Deletion: Request deletion of your personal information. We will action this within a reasonable time, subject to legal retention requirements.
• Objection (Section 11(3)): Object to processing on reasonable grounds relating to your particular situation.
• Object to Direct Marketing (Section 69): Opt out of marketing at any time via the unsubscribe link or by contacting us.
• Withdraw Consent: Withdraw previously given consent at any time. Processing will stop, but prior lawful processing is unaffected.
• Portability: Receive your data in a structured, machine-readable format where technically feasible.
• Restriction: Request limitation of processing in certain circumstances.

To exercise these rights, please contact our Information Officer at privacy@dynasty8real.estate. We will respond within a reasonable time (best practice: 30 days).

13. Children's Privacy

Our services are not intended for individuals under the age of 18. Under POPIA, processing a child's personal information is prohibited unless an exception applies.

• We do not knowingly collect personal information from children under 18.
• If we discover that a child under 18 has provided personal information without verifiable parental or guardian consent, we will delete that information immediately.
• If you believe a child has registered without appropriate consent, please contact our Information Officer immediately.

14. PAIA Manual

In terms of the Promotion of Access to Information Act 2 of 2000 (PAIA), we have published a PAIA manual on our website. The manual outlines the procedure for requesting access to records held by Dynasty 8 Real.Estate. A POPIA annexure is included in the manual. You can request a copy by emailing privacy@dynasty8real.estate.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.

16. Lodging a Complaint with the Information Regulator

If you believe we have infringed your rights under POPIA, you have the right to lodge a complaint with the Information Regulator:

17. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Information Officer: