Privacy Policy

How RSA Property collects, uses, protects, shares and retains personal information.

1. Scope

This Privacy Policy explains how RSA Property processes personal information when you visit the website, create or manage an account, submit or respond to a property enquiry, publish or manage a listing, create an agency, agent or professional profile, purchase a platform service, or otherwise interact with RSA Property.

It should be read together with the Terms & Conditions, Cookie Policy, PAIA Manual and any specific notice shown at the point where information is collected.

2. Responsible party

For personal information processed for RSA Property’s own platform operations, RSA Property acts as the responsible party as contemplated in the Protection of Personal Information Act 4 of 2013 (POPIA). Property agencies, agents, developers, professionals, payment providers and other third parties may separately act as responsible parties for information they receive or collect for their own purposes.

3. Information we collect

Account and identity information

This may include your name, username, email address, telephone number, password-related account data, account type, organisation, professional role and verification information.

Agency, agent, developer and professional information

Where relevant, we may process business names, profile photographs or logos, office and service-area details, contact information, professional biography, social links, regulatory or registration details, and documents provided for verification or onboarding.

Property and listing information

This may include listing content, property location, media, descriptions, pricing, property attributes, mandate or listing status information, and the identity of the agency or professional responsible for the listing.

Enquiries and communications

We process information you submit through contact forms, viewing requests, lead forms, support channels, registration forms and other communications, including the content of your message and information needed to route the enquiry.

Transaction information

Where paid services are offered, RSA Property may process order references, package or service selections, billing status and transaction confirmations. Card or bank payment credentials may be processed directly by the relevant payment service provider and are not necessarily stored by RSA Property.

Technical and usage information

We may collect device, browser, IP address, approximate location, page-view, referral, authentication, security, cookie and diagnostic information needed to operate, protect and understand use of the platform.

4. Sources of information

Personal information may be collected directly from you, from an organisation or agency that creates or manages your profile, from property-feed or syndication partners acting on behalf of a listing provider, from service providers that support the platform, and from publicly available sources where lawful and appropriate.

5. How we use personal information

• Provide property search, listing, account, profile, enquiry and directory functionality.
• Route enquiries to the relevant agency, agent, developer or professional.
• Create, verify, secure and administer user and business accounts.
• Provide purchased packages, subscriptions, advertising, promoted listings or other paid services.
• Send service, security, account, renewal, transactional and support communications.
• Detect misuse, fraud, abuse, unauthorised access and technical problems.
• Measure and improve platform reliability, usability, search quality and performance.
• Comply with applicable law, regulatory requirements, court orders and lawful requests.
• Protect RSA Property, users, clients, partners and the public against legal or security risks.

RSA Property processes personal information only where there is a lawful and reasonable basis for doing so under POPIA and other applicable South African law.

6. Sharing and disclosure

We may disclose personal information to agencies, agents, developers or professionals where you direct an enquiry to them; to vendors that provide hosting, email, security, analytics, payments, mapping, communications or other platform services; to professional advisers; to regulators, courts or law-enforcement authorities where legally required; and in connection with a legitimate business restructuring or transfer, subject to appropriate safeguards.

RSA Property does not sell personal information merely for the purpose of allowing unrelated third parties to market to you.

7. Cross-border processing

Some service providers may process or host information outside South Africa. Where personal information is transferred across borders, RSA Property will take reasonable steps required by POPIA to ensure that the transfer is lawful and that appropriate protection is in place.

8. Retention

We retain personal information for no longer than is reasonably necessary for the purpose for which it was collected, unless longer retention is required or permitted by law, reasonably necessary for contractual, evidentiary, fraud-prevention, security or dispute-resolution purposes, or authorised by the data subject.

9. Security

RSA Property uses reasonable technical and organisational safeguards designed to protect personal information against loss, unauthorised access, interference, misuse, alteration or disclosure. No online system can be guaranteed to be completely secure, and users remain responsible for protecting their account credentials and devices.

10. Your POPIA rights

Subject to POPIA and any lawful limitations, a data subject may request confirmation of whether RSA Property holds personal information about them, request access to that information, request correction or deletion of inaccurate, irrelevant, excessive, outdated, incomplete or unlawfully obtained information, and object to certain processing.

Requests can be made through the POPIA Requests page. RSA Property may need to verify identity before releasing or changing information.

11. Direct marketing

Where RSA Property sends electronic direct marketing, it will do so in accordance with applicable law. You may opt out using the unsubscribe mechanism provided or by contacting RSA Property. Service, security and transactional communications may still be sent where they are necessary for an active account or service.

12. Cookies and similar technologies

RSA Property uses cookies and similar technologies for essential site operation, authentication, security, preferences, analytics and, where applicable, marketing. More detail is available in the Cookie Policy.

13. Children

RSA Property is not intended to knowingly collect personal information from children without the involvement of a competent person or another lawful basis where required by POPIA.

14. Changes to this policy

We may revise this Privacy Policy when our services, legal obligations or processing practices change. The updated version will be published on this page with a new revision date.

15. Contact and complaints

A data subject may also lodge a complaint with the Information Regulator of South Africa where the requirements for doing so are met.