NuMax Realty (Pty) Ltd

(Registered Property Practitioner Entity)

Last Updated: June 2026

1. Introduction and Purpose

We respect your constitutional right to privacy. As a registered Property Practitioner body operating in South Africa, we are bound by the Protection of Personal Information Act, No. 4 of 2013 (POPIA) and the Property Practitioners Act, No. 22 of 2019 (PPA).

This Privacy Policy explains how we collect, use, store, share, and protect your Personal Information when you visit our website, interact with our agents, or use our real estate services.

2. Who is the “Responsible Party”?

Your data is processed by NuMax Realty (Pty) Ltd, operating as the Responsible Party.

  • Physical Address: 36 Main Road, Kleinmond
  • Information Officer: Nicolette Geldenhuys
  • Email Address: privacy@numax.co.za
  • PPRA Registration Number: FFC 202670752400000

Note: Our Information Officer is duly registered with the South African Information Regulator.

3. What Personal Information We Collect

We collect information necessary to fulfill our mandates, verify your identity under financial laws, and provide property marketing services. This includes:

  • Basic Identifiers: Name, identity number or passport number, nationality.
  • Contact Data: Email address, physical/postal addresses, telephone numbers.
  • Financial & FICA Data: Proof of funds, banking details (for trust account transactions), tax numbers, source of income (required under the Financial Intelligence Centre Act).
  • Property Information: Title deeds, property descriptions, levy accounts, or rental histories.
  • Technical Data: IP address, cookies, browsing behavior on our platform.

4. How We Collect Data

We collect your information through two primary channels:

  1. Directly from You: When you complete web forms, subscribe to alerts, sign a sole mandate, submit a digital offer to purchase (OTP), or request a property valuation.
  2. From Public & Third-Party Records: Property portals (Property24, Private Property), the Deeds Office, credit bureaus, or via the Property Practitioners Regulatory Authority (PPRA) database for verification purposes.

5. Lawful Grounds and Purpose of Processing

We will only process your personal information where we have a lawful basis to do so under POPIA. Depending on the circumstances, we may process your information:

With your consent
For purposes such as subscribing to newsletters, receiving selected marketing communications or accepting non-essential website cookies. Where we rely on consent, you may withdraw it at any time.

To enter into or perform a contract
Where processing is necessary to take steps at your request or to provide services under a mandate, lease, sale agreement or other contractual arrangement.

To comply with a legal obligation
Where we are required to collect, retain, verify or disclose information in order to comply with applicable legislation and regulatory requirements, including FICA, property-sector legislation, tax obligations and lawful record-keeping requirements.

To protect a legitimate interest
Where processing is reasonably necessary to protect your legitimate interests, the legitimate interests of NuMax Realty or those of another person, provided that the processing is lawful, reasonable and does not unjustifiably infringe your privacy.

We process personal information only for specific and legitimate purposes, including:

  • responding to enquiries;
  • providing property sales, rental and related services;
  • verifying the identity of clients and meeting compliance requirements;
  • communicating with buyers, sellers, landlords, tenants and service providers;
  • administering mandates, offers, leases and property transactions;
  • maintaining business, financial and regulatory records;
  • protecting our systems, website, clients and business operations; and
  • sending marketing communications where permitted by law.

6. Sharing Data with Third Parties (Operators)

To successfully conclude a property transaction, we must share your data with external stakeholders. We secure written undertakings from all Operators to ensure they treat your data with the strict confidentiality required by POPIA.

  • Conveyancers & Attorney Firms: For property registration and transfer.
  • Bond Originators & Financial Institutions: For buyer pre-qualifications and mortgage applications.
  • Approved Inspections/Service Providers: For compliance certificates (Electrical, Beetle, Gas).
  • The PPRA: Where legally mandated for regulatory reporting.

We will never sell your data to third-party marketing companies.

7. Retention of Your Information

In accordance with Section 56 of the Property Practitioners Act, a property practitioner must retain all documents, mandates, and transactional records for a mandatory minimum period of 5 years.

Once this legal retention period lapses, and the data is no longer required to provide services, it will be securely destroyed, deleted, or de-identified.

8. Security Safeguards

We implement strict physical, technological, and organizational security measures to prevent unauthorized access, loss, or data breaches:

  • Fully encrypted data transmissions (HTTPS/SSL) on this website.
  • Controlled, password-protected access to our customer relationship management (CRM) systems.
  • Secure cloud storage managed by POPIA/GDPR-compliant operators.
  • Immediate, written notification to you and the Information Regulator should any data breach occur, as required by Section 22 of POPIA.

9. Direct Marketing & Opt-Outs

We fully comply with Section 69 of POPIA regarding direct marketing:

  • New Clients: We will only send you automated electronic marketing (SMS, Email newsletters) if you have explicitly opted-in.
  • Existing Clients: We may send you property listings or updates related to our services, provided you were given a clear opportunity to opt-out at the time of data collection.
  • Every marketing email includes a functional “Unsubscribe” link.

10. Your Rights as a Data Subject

Under Chapter 5 of POPIA, you have the right to:

  1. Access: Ask us what personal records we hold of yours (free of charge).
  2. Correction: Request that we amend or update inaccurate, incomplete, or outdated data.
  3. Destruction: Request the deletion of your data (provided a legal statutory retention period, such as the PPRA 5-year rule, does not override this).
  4. Objection: Object to data processing on reasonable grounds, or object to direct marketing at any time.

To exercise these rights, please contact our Information Officer using the details provided in Section 2. You may be asked to provide proof of identity to protect against fraudulent requests.

11. Lodging a Complaint

If you believe your personal data has been mishandled by us, you have the right to lodge a formal complaint with the South African Information Regulator:

Email: complaints.IR@inforegulator.org.zamments form, and also the visitor’s IP address and browser user agent string to help spam detection.

Website: inforegulator.org.za