PRIVACY POLICY

Last Updated: 24 February 2026

1. Introduction

Cornerstone Property Partners (Pty) Ltd (“we,” “us,” “our,” or “the Agency”) operates this website and provides real estate services including property sales, rentals, property management, and related advisory services. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website, use our services, or otherwise interact with us.

By accessing our website or using our services, you consent to the collection and processing of your personal information as described in this Privacy Policy.

2. Information We Collect

We collect personal information that you voluntarily provide to us and information that is automatically collected when you use our website. This may include:

2.1 Information You Provide:

• Full name, identity or passport number, contact details (phone, email, physical address)
• Property preferences, search criteria, budget, and financing information
• Employment details, income information, and credit references (for rental or purchase applications)
• Copies of identity documents, bank statements, payslips, or other documentation required for FICA compliance
• Communications with us (emails, messages, phone call recordings, meeting notes)
• Feedback, reviews, testimonials, or survey responses
• Marketing preferences and consent records
• Any other information you choose to provide when requesting our services

2.2 Information Collected Automatically:

• IP address, browser type, device information, operating system
• Pages visited, time spent on pages, links clicked, referring website
• Cookies, web beacons, and similar tracking technologies
• Location data (if you enable location services)
• Analytics data through Google Analytics and similar tools

2.3 Information from Third Parties:

• Property portals (Property24, Private Property, etc.)
• Credit bureaus and reference checking services
• Bond originators, banks, and financial institutions
• Other estate agents, landlords, sellers, attorneys, and conveyancers
• Social media platforms (if you interact with us there)
• Public records and property databases (Deeds Office, LightStone, Searchworks, etc.)

3. Purpose of Processing

We process your personal information for the following lawful purposes:

• Service Delivery: To provide property search assistance, arrange viewings, facilitate sales and rental transactions, manage properties, and deliver any services you request
• Contractual Obligations: To perform our obligations under agency agreements, lease agreements, sale agreements, and any contracts to which you are a party
• FICA & Legal Compliance: To comply with FICA, Estate Agency Affairs Act, Rental Housing Act, POPIA, and all other applicable legislation
• Communication: To respond to enquiries, send property alerts, provide updates on transactions, and maintain ongoing client relationships
• Marketing: To send promotional materials, newsletters, property listings, market reports, and other marketing communications (only with your consent, which you may withdraw at any time)
• Business Operations: To manage our business, maintain records, train staff, improve our services, conduct market research, and analyze trends
• Legal & Legitimate Interests: To protect our rights, prevent fraud, establish or defend legal claims, and pursue the legitimate interests of our business
• Security: To protect our website, systems, and data from unauthorized access, misuse, or security threats

4. Legal Basis for Processing

We process your personal information based on:

• Your explicit consent (which you may withdraw at any time)
• The necessity to perform a contract with you or take steps at your request before entering a contract
• Compliance with our legal obligations under FICA, EAAB regulations, tax laws, and other applicable legislation
• Protection of your legitimate interests or those of a third party
• Our legitimate business interests, including marketing, service improvement, security, and business development

5. Data Sharing and Disclosure

We may share your personal information with third parties in the following circumstances:

• Service Providers: Property portals, bond originators, conveyancers, attorneys, home inspectors, credit bureaus, IT service providers, marketing agencies, and other professional service providers
• Property Stakeholders: Sellers, landlords, buyers, tenants, managing agents, bodies corporate, homeowner associations, and other parties involved in property transactions
• Legal & Regulatory Authorities: SARS, the Financial Intelligence Centre, the Estate Agency Affairs Board, courts, and other authorities when required by law
• Business Transfers: In the event of a merger, acquisition, sale of assets, or restructuring of our business
• Third Parties with Your Consent: Any other parties to whom you authorize us to disclose your information

We do not sell your personal information to third parties for their marketing purposes.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information from unauthorized access, loss, destruction, alteration, or disclosure. These measures include secure servers, encryption, firewalls, access controls, password protection, regular security audits, staff training on data protection, and physical security of our offices and document storage facilities.

However, no method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including for the duration of our service relationship, as required by legal, regulatory, tax, accounting, or reporting requirements (typically 5–7 years for financial and transaction records), and as necessary to establish or defend legal claims. Once the retention period expires, we will securely delete or anonymize your personal information.

8. Your Rights Under POPIA

You have the following rights regarding your personal information:

• Right of Access: Request confirmation of whether we hold your personal information and obtain a copy
• Right to Correction: Request correction of inaccurate, incomplete, or outdated information
• Right to Deletion: Request deletion of your information (subject to legal and contractual obligations)
• Right to Object: Object to the processing of your information for direct marketing or other purposes
• Right to Restrict Processing: Request that we restrict processing in certain circumstances
• Right to Data Portability: Request your information in a structured, commonly used, machine-readable format
• Right to Withdraw Consent: Withdraw your consent at any time (without affecting the lawfulness of prior processing)
• Right to Complain: Lodge a complaint with the Information Regulator if you believe your rights have been violated

9. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience, analyze website traffic, and deliver personalized content. For full details, please refer to our Cookie Policy below.

10. International Data Transfers

Your personal information is primarily processed and stored within South Africa. If we transfer your information outside South Africa, we will ensure compliance with POPIA’s cross-border transfer requirements and that appropriate safeguards are in place.

11. Children’s Privacy

Our services are not directed at children under the age of 18. We do not knowingly collect personal information from minors without parental consent. If we become aware that we have collected information from a child without proper consent, we will delete it promptly.

12. Contact Information & Information Officer

Information Officer: Dean Hodgson
Company: Cornerstone Property Partners (Pty) Ltd
Address: Ballito, KwaZulu-Natal, South Africa
Email: [Your email address]
Phone: [Your phone number]

13. Complaints to the Regulator

If you believe we have not resolved your privacy concern adequately, you may lodge a complaint with:

The Information Regulator (South Africa)
JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
Email: inforeg@justice.gov.za | Website: www.justice.gov.za/inforeg

14. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last Updated” date at the top indicates when the policy was last revised. Continued use of our services after changes constitutes acceptance of the updated policy.