B1. Who is responsible, and scope
IQ Prop (Pty) Ltd is the responsible party for IQprop account administration, analysis, referral instructions, listings and the related processing described here. Our Information Officer is Ian Black; contact privacy@iqprop.co.za or the address in A1. GoFund, lenders, agents, landlords and insurance providers may be separate responsible parties for their own activities; their notices apply to those activities and do not remove our responsibility for our own processing.
B2. Information we collect
We receive information from you and your authorised representative, from your use of the service, from payment and technical providers, from listings you ask us to import, and from counterparties involved in features you request. Publicly available information can still be personal information, and information about identifiable companies and other juristic persons may also be protected by POPIA.
- Account and support — name, contact details, login credentials (passwords are stored hashed), preferences and correspondence.
- Billing — plan, transaction reference, billing period and payment status. Our payment provider handles card details; we do not store full card numbers or security codes.
- Analysis — addresses, property characteristics, price, rent, costs, deposit, rates, your assumptions and saved results. Gross income and buying structure are optional inputs for relevant calculations.
- Offers and listings — the content, contact details, instructions and status information needed for the feature, including information about authorised counterparties.
- Technical — IP address, device and browser information, usage events, cookie identifiers, and security and error logs.
- Waiting list — if you join the waiting list while sign-up is closed, your email address, the date you consented and the policy version then in force (see B9).
- Referral — described in B4.
We do not need identity documents, bank statements, payslips or tax assessments for ordinary analysis. If a separate feature needs extra documents, its own collection notice explains the fields, purpose, recipient and consequences before you provide them.
B3. Why we process it, and on what basis
We use account and analysis data to perform our contract with you; billing data to take payment and meet record-keeping duties; and proportionate technical and support information for our legitimate interests in reliability, fraud prevention and resolving queries, where those interests are justified and your objections are respected. We use optional referral, waiting-list and marketing information on the basis of your consent, as described below.
Required fields are identified at the point of collection. Without the information needed to supply a requested service, we may be unable to provide it. Optional financial details, marketing choices, waiting-list sign-up and referrals are never conditions of ordinary analysis access. Give us other people's information only where you have a lawful basis and have told them appropriately; we still meet our own notice and processing duties.
We use statistics that do not identify anyone only after effective de-identification. A random identifier alone does not make information anonymous. Any identifiable analysis stays subject to an appropriate lawful basis and these safeguards. We will explain a materially new purpose before using information for it, and obtain consent where required.
B4. Optional GoFund referral
When you choose a GoFund referral and separately authorise it, IQprop sends your name, email address, telephone number, gross monthly income (if supplied), proposed buying structure (own name, company or trust), property address, purchase price, deposit and proposed bond amount. We identify GoFund's legal entity, and provide its contact details and a link to its privacy notice, on the request screen before you decide. The referral choice is separate from creating an account or publishing a listing.
The purpose of the transfer is for GoFund to contact you and handle the bond assessment you asked for. GoFund acts as a separate responsible party for its bond-origination activities and must provide its own privacy information. Its later document collection, credit checks and lender applications follow GoFund's own, separately explained process and the legal requirements for each step. Your referral instruction does not permit unrelated promotions or unrestricted onward sharing.
Ian Black owns both IQprop and GoFund. We disclose that connection, and GoFund's bank-paid commission, so you can decide with your eyes open. Referral consent is optional, specific and recorded separately from your acceptance of the Terms. We do not sell access to your personal information, and we do not pass your details to GoFund merely because you have an account, list a property, or use an analysis tool.
You may withdraw referral consent through privacy@iqprop.co.za. We stop future consent-based sharing and, if the request has already been sent, notify GoFund and help you contact it. Withdrawal does not undo lawful processing already done, or require deletion of records that must lawfully be kept. GoFund and any lender handle requests about their own records.
B5. Other recipients
Hosting, database, payment, communications and technical-support providers receive the information they need for their roles. Where a provider acts as our operator, a written contract requires confidentiality, appropriate safeguards, controlled sub-contracting and prompt reporting of security compromises. A provider's own legal duties may also make it a responsible party for some activities.
We share an enquiry, offer or listing with the recipients and audience shown when you instruct us to send or publish it. Agents and owners may use enquiry details to respond to that enquiry; receiving a lead is not permission for unrelated marketing. A public listing can be copied or indexed by others — so avoid unnecessary personal identifiers and remove private documents before publishing. Any insurance referral needs its own recipient-specific notice and choice. We may disclose necessary information to professional advisers, courts, regulators or other authorities where the law requires or justifies it, limiting disclosure to what is necessary. We do not rely on an operator contract to justify unrelated sharing with a separate business.
B6. Assessments and automated decisions
Calculation outputs help you compare scenarios; they are not final credit or tenant-eligibility decisions. You can ask us to explain an output and to correct its inputs. If a feature would make a decision based solely on automated processing, with legal or similarly significant effects, we must first give the required notice, lawful basis and safeguards, including the applicable rights to make representations and to seek review.
B7. How the browser add-on handles data
When you press Submit for a supported Property24 or Private Property link in IQprop, or click the add-on's icon on a supported listing, the add-on opens that listing — and rental listings in the same suburb — in your own browser. It reads the figures shown (such as price, levies, rates, room counts and rents) and passes them to the IQprop page you have open.
The add-on's import does not itself upload those page figures to IQprop's servers. When you save an analysis, the figures are stored as analysis data. Loading IQprop and external pages still creates ordinary network requests, and those websites may receive your IP address and set their own cookies. "Local importing" does not mean all use of the platform is offline.
To apply the Free-plan allowance, the IQprop page sends us the listing number of each property you open, or a daily marker when you type figures in yourself, linked to your account or to the iq_anon identifier in B8. This happens whether or not you use the add-on, and before any Save.
The add-on is limited to the supported import workflow. It does not collect unrelated browsing history, read other sites for tracking, or keep its own history of listings you opened. It stores one setting on your device: the IQprop web address you use. Your browser keeps its own history. You can disable or uninstall the add-on; doing so does not delete analyses already saved in IQprop.
B8. Cookies and device identifiers
Session and security cookies support login and safe use of the service. The iq_anon cookie holds a random identifier used to apply the anonymous Free-plan allowance of one analysis per month; it lasts about two months. Although it need not contain your name, its identifier and the usage data linked to it may be personal information.
We use that identifier only for the stated access-limit purpose, subject to an appropriate lawful basis and applicable cookie requirements. You can remove or block cookies in your browser, though this may affect anonymous access or login. Optional analytics and advertising cookies are set only with your agreement, and you can withdraw that agreement. We do not treat a Free-plan identifier as marketing consent.
B9. Marketing, service messages and the waiting list
Our policy is to send promotional email, SMS or other electronic direct marketing only after a separate opt-in. This includes upgrade promotions to Free and trial users, and partner promotions. An email-confirmed account, a trial, a property enquiry or a referral request is not, by itself, marketing consent. You can use ordinary features without opting in.
Each marketing message identifies the sender and gives a free, simple way to opt out; you can also email privacy@iqprop.co.za. We honour applicable direct-marketing blocks and contact restrictions, and we keep a minimal suppression record to respect your choice. Absence from an opt-out register is not consent.
Receipts, security notices and factual account or trial-expiry messages may be sent to run the service. We do not disguise promotions as service notices. Optional alerts — for example, an interest-rate change affecting a saved deal — can be controlled separately; any message that promotes an upgrade follows the marketing rule above.
Waiting list. While sign-up is closed, you can choose to give us your email address so we can tell you when it opens. We rely on your consent, captured when you join the list. We keep only the address, the date you consented and the policy version then in force, and we process it (including in Frankfurt, see B10) to send you a single notification that sign-up is open — which may include a current launch offer. After that we remove you from the waiting list, keeping a minimal record that the notification was sent. To be removed sooner, or to withdraw consent at any time, email privacy@iqprop.co.za.
B10. Processing outside South Africa
Our application and database hosting uses Frankfurt, Germany, so your information is processed outside South Africa. Payment, communications, support, backups and sub-contractors may involve other countries; a provider's South African incorporation does not by itself fix where processing happens. Ask privacy@iqprop.co.za for current recipient and country information relevant to your data.
Before an international transfer, we establish a basis under POPIA section 72. Our approach is to require adequate protection under applicable law or binding agreements, including comparable protection for onward transfers. Where that basis is not available, a different ground permitted by section 72 is established before transfer. Hosting in the European Union does not by itself prove that every recipient and onward transfer meets POPIA. Where we need specific consent for a transfer, we explain the recipient, destination, purpose and implications before asking for it; accepting these terms is not consent to every international transfer. An objection may affect a service that depends on overseas processing — we will explain the implications and consider lawful alternatives.
B11. Retention and deletion
We keep information only for a lawful purpose, and no longer than we need it. Account and saved-analysis information is kept while your account is open. After closure we may keep it for up to twelve months so you can recover your work, unless you ask for earlier deletion or it is no longer needed. Closing an account does not authorise continued marketing.
Billing records are generally kept for five years from the applicable statutory starting point — which may be a tax-return submission date rather than the payment date — and a longer statutory period or a justified legal hold may apply. Routine technical and security logs are kept for up to twelve months, with longer retention only for a documented incident, legal duty or dispute.
We keep referral instructions, consent evidence, offer-transmission records and necessary complaint records for the period justified by the transaction, a legal duty or a potential claim, and we review that need. We keep minimal marketing and waiting-list suppression records only while needed to prevent renewed contact. Backups follow controlled expiry; deleted information is not restored to active use without the deletion instruction being reapplied, except where lawful preservation is required.
B12. Safeguards and security compromises
We maintain reasonable technical and organisational safeguards proportionate to the risks — including access controls, secure credentials, protected transmission, appropriate storage protection and incident response. No system can guarantee absolute security.
Where there are reasonable grounds to believe personal information has been accessed or acquired by an unauthorised person, we notify the Information Regulator and affected people as soon as reasonably possible, subject to POPIA's permitted exceptions and delays. Notification is not limited to incidents we judge to create a real risk. We explain the known circumstances, the protective steps and the assistance available, as the law requires.
B13. Your rights under POPIA
You may ask whether we hold your personal information, request access and details of recipients, seek correction or lawful deletion, object to processing on grounds POPIA recognises, withdraw consent, and complain to the Information Regulator. These rights are subject to lawful limits, including necessary retention and the protection of other people's information.
Send requests to privacy@iqprop.co.za, or use the address or telephone number in A1. We ask only for proportionate proof of identity and authority. We aim to acknowledge within five business days and respond within thirty calendar days, or sooner where required; applicable statutory periods take priority, and we explain any lawful extension, refusal or partial access and the remedies available. Confirmation of whether we hold your information is free, as are objections and requests for correction or deletion. If a prescribed access fee may lawfully apply to copies or a formal records request, we explain it before charging, including any exemptions. A deletion request is not refused merely because a subscription or dispute exists; we identify which records must remain, and why.
B14. PAIA access to company records
PAIA gives access to records held by a private body where the statutory requirements are met, including that the record is required to exercise or protect a right. This policy does not replace our separate PAIA section 51 manual — request the manual and assistance from the Information Officer at privacy@iqprop.co.za.
For a formal PAIA request, use the current Form 2 from the Information Regulator. Identify the records, the right you seek to exercise or protect, why the records are needed, your preferred format and any representative authority, and submit it to our Information Officer. We decide within thirty days, subject to a lawful extension of no more than a further thirty days with notice and reasons; lawful refusal grounds and third-party procedures may apply. If access is refused, or we do not respond in time, you may use the Information Regulator's complaint process or a court remedy within the applicable time limit. PAIA's internal-appeal process for certain public bodies does not apply to IQprop as a private company.
B15. Complaints, children and changes
You may complain directly to the Information Regulator without first complaining to us. Current forms and channels are at https://inforegulator.org.za and https://eservices.inforegulator.org.za; general enquiries enquiries@inforegulator.org.za.
The service is for adults. Do not submit children's information or unnecessary special personal information. If we discover such information, we assess the legal requirements, restrict unnecessary processing and arrange deletion where appropriate. We notify you of material policy changes before new processing starts, and obtain fresh consent where required.