PayProp operates several websites including uk.payprop.com. It is PayProp's policy to respect your privacy regarding any information PayProp may collect while operating its websites as PayProp takes the protection of your data seriously in all of its processing.
Welcome to our Privacy Policy (“policy”). We are an information technology company. Our core business relatesto enterprise software systems development (our “services”). We respect your privacy and take the protection of personal information very seriously.
Where we use the words “we”, “our”, or “us” we mean either,
Both parties are part of the Reapit Group (RPL Parent Ltd – Company number: 15303707). The company that is responsible for your personal information will be the company that is named on the website you access, named in any terms and conditions, or if there are noterms just yet, the company you have engaged with for services, or named in any messages sent to you.
For the purposes of data protection law and for the vast majority of personal information processing, we are a data processor. We are a data processor with respect to the personal information our clients (“clients”) capture on our platform where we are acting upon our clients’ instructions.However, in certain circumstances we also act as a data controller. This policy addresses personal information processing we carry out in our capacity as a data controller. This policy describes the way that we, as a data controller, collect, store, use, and protect information that can be associated with you or another specific person and can be used to identify you or that person (“personal information”).
We operate several websites including www.payprop.com/uk and www.reapit.com. This policy applies to you if you are someone who:
This policy does not apply to you if you are a job applicant, employee, agent or contractor. The fair, lawful and secure processing of the personal information of these types of data subjects is governed by other company policies outside the scope of this policy.
This policy applies to the services we offer through our websites and applies to personal information we process in pursuit of our own purposes which include our marketing and business development efforts. This policy also applies to you, as a user of our services, if we are using mechanisms to track your use of the services to enhance user experience and product improvement. We are processing this personal information under the lawful basis of legitimate interest, and you may opt out of this tracking within our platform.
This policy does not apply to the personal information that our clients control and process via our services. This policy does not apply to services other companies or individuals offer. This policy does not cover the activities performed by other companies and organisations who advertise our services or any third party operating any website to which our websites may contain a link.
By submitting personal information to us, you acknowledge and accept the practices described in this policy. We will endeavour to bring this policy to your attention every time we ask for your personal information. We will seek your specific consent whenever this is required.
It will be very difficult and, in some cases, even impossible for us to provide you services if you refuse to allow us to process your information. If you do not accept the practices described in this policy, or cannot form a legally binding contract, you must not provide us with any personal information.
If you have provided us with other information in addition to those available on your account, you have the right to withdraw your consent to the processing of such additional information at any time by contacting the data protection officer at dpo@reapit.com or dpo@payprop.co.uk, depending on the entity that you need to engage with. Where Reapit and PayProp act as joint controllers, dpo@reapit.com is our joint controller contact point but you may contact either of us.
Should you withdraw your consent to the processing of your information, you are hereby informed that such withdrawal may prevent us from providing all or certain aspects of our available services. You should also be aware that where we process your information under another lawful basis than consent, for example under contract or legal obligation, a request to delete your information may not be feasible or even allowed.
Non-personal information
Like most website operators, we collect non-personal information of the sort that web browsers and servers typically make available, such as the browser type, language preference, referring site and the date and time of each visitor request, from our website visitors.
Our purposes in collecting such non-personal information are to optimise your experience of our websites and render them more user-friendly, better understand how you use our websites and analyse your behaviour for statistical purposes, for example by monitoring the most popular service accounts on our websites. From time to time, we may release non-personal information in the aggregate, e.g., by publishing a report on trends in the usage of our websites. We may display this information publicly or provide it to third parties.
Personal information
You may choose to interact with us in ways that require us to gather your personal information. We do not collect or process more personal information than is necessary for us to fulfil the purposes for which we collected and processed the personal information. The amount and typeof personal information that we gather depends on the nature of the interaction, as detailed below.
The following table summarises the types of data processing activities we undertake in relation to personal information subject to this policy:
Your personal information will be made available only to the members of our staff who need to have access to such personal information to perform the purposes for which personal information have been provided. Such members of our staff have been instructed with respect to and have committed to comply with the contractual and legal data protectionobligations.
You have the right to access and update your personal information at any time through your account on our websites. In addition and to the extent applicable, you have the right to:
To exercise any of these rights, please contact either dpo@reapit.com or dpo@payprop.co.uk depending on the entity relevant to you and your request or rights you wish to exercise. If you wish to exercise any of these rights in relation to Reapit and PayProp’s joint processing, our joint controller contact point is dpo@reapit.com.
We are committed to guaranteeingthe statutory rights of individuals. If you send us a request regarding yourrights under data protection law we will respond within 30 calendar days ofreceipt and, where possible, address your request within such time. Wherenecessary, this period may be extended by up to a further 60 days.
If requests are manifestly unfounded or excessive, in particular because of their repetitive character, we reserve our right to either charge a reasonable fee taking into account the request or refuse to act on the request. Without prejudice of non-personal information, we may request the provision of additional information to confirm the identity of the data subject if we have reasonable doubts concerning the identity of the person making the request.
We do not engage in profiling which is capable of producing legal or other significant effects for individual data subjects. Detailed information on the content and the means to exercise your rights is provided by the United Kingdom’s Information Commissioner’s Office, available here.
You must ensure that information you provide to us is:
In particular, since we will use e-mail and telephone communications with you, you are required to notify us of any modification of your e-mail address or contact number. Alternatively, you can directly update your contact profile on your account.
Insofar as you provide us with personal information about third parties, you represent and warrant that you have the right to share this personal information and where necessary have obtained sufficient informedconsent from such persons and provided them with all necessary information, asmay be required by applicable law or agreement, for us to store and process anysuch personal information.
We operate an internal Data Retention Policy. We will keep general and personal information only as long as it is necessary for the purposes for which they have been provided, unless retention of information is required by any applicable law or competent court or authority or forstatistical or archiving purposes.
We operate an internal Information Security Policy. We have taken and will maintain technical and organisational security measures to ensure our own and our suppliers’ information security standards are appropriate to the risks associated with the personal information processing we undertake. In particular, to protect personal information against unauthorised or unlawful processing, accidental loss, destruction or damage and ensure the ongoing confidentiality, integrity, availability of personal information and resilience of the systems and services used for processing of personal information. Our Information Security Policy is available for review upon request.
We work solely with world-class suppliers, some of whom have branches outside the UK and European Economic Area (‘EEA’).
To accomplish the purposes mentioned in this Policy(in order to provide or develop our Services or where one of the other legitimate interests identified above applies) we may need to disclose your personal information to other entities, including to entities located in countries whose data protection laws may be different from those in your country of residence. You hereby agree and give your consent to us to transfer and communicate your personal information as follows:
Any transfers of your personal information outside the UK and EEA take place subject to appropriate safeguards as provided in data protection law. These safeguards are intended to secure your rights as a data subject with respect to any relevant non-UK or EEA domiciled entities. We assume responsibility for the security of personal information that is accessible by our overseas affiliates.
This Policy does not regulate the use of cookies by any advertisers. We nonetheless inform you that ads appearing on any of our websites may be delivered to users by advertising partners, who may set cookies. These cookies allow the ad server to recognise your computer each time they send you an online advertisement to compile information about you or others who use your computer. This information allows ad networks to, among other things, deliver targeted advertisements that they believe will be of most interest to you.
We reserve the right to amend this policy from time to time. You will be informed of any material changes without delay. We encourage you to check this page frequently for any changes to the PrivacyPolicy. If you have a user account, you should also check your account dashboard for alerts to these changes. Your continued use of our websites after any non-significant change to this Policy will constitute your acceptance of such change.
We reserve the right, in the event that we buy or sell all or part of our business or assets, to disclose personal information held by us to the prospective seller or buyer of such business or assets.
In relation to any queries about this Policy or any other data protection matters, please contact dpo@reapit.com. or dpo@payprop.co.uk, or by visiting the applicable website and clicking “Contact us” to submit your inquiry.
If you have any concerns about our use of your personal information, you can make a complaint using the details above. If you remain unhappy with how we’ve used your information after raising a complaint with us, you can also complain to the ICO.
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
Website: https://www.ico.org.uk/make-a-complaint
Last updated: 5 June 2025
Welcome to our Privacy Policy (“policy”). This Privacy Policy explains how Reapit and PayProp collect, use and protect personal information when we act as a data controller. This includes personal information collected through our websites, marketing activities, business development activities and certain product usage tracking. In this policy, “personal information” means information that can be associated with you or another specific person and can be used to identify you or that person, either directly or indirectly. We respect your privacy and take the protection of personal information very seriously.
We provide software and related services to businesses in the real estate industry (“services”).
Where we use the words “we”, “our”, or “us” we mean,
Both parties are part of the Reapit Group (RPL Parent Ltd – Company number: 15303707).
The company responsible for your personal information will usually be the company named:
In most cases, we act as a data processor. This means we process personal information on behalf of our customers and in line with their instructions, for example where customers use our platforms to manage their own data. In some cases, we act as a data controller. This means we decide why and how personal information is used. This policy only applies where we act as a data controller.
We operate several websites including www.payprop.com/uk and www.reapit.com. This policy applies to you if you:
This policy does not apply to you if you are a job applicant, employee, agent or contractor. We provide those individuals with a separate privacy policy.
This policy applies to personal information we use for our own purposes, including website management, marketing and business development. It also applies where we track how users interact with our services to improve user experience and product performance. We rely on our legitimate interests for this processing, and you can opt out of this tracking within our platform at any time.
This policy does not apply to:
When you provide personal information to us, we will process it as described in this policy. Where consent is required, we will ask for it separately. It will be very difficult and, in some cases, even impossible for us to provide you services if you refuse to allow us to process your information. If you do not accept the practices described in this policy you must not provide us with any personal information.
Where we rely on your consent to process personal information, you can withdraw that consent at any time by contacting us at dpo@reapit.com or dpo@payprop.co.uk, depending on which company is relevant to your request. If Reapit and PayProp act as joint controllers, dpo@reapit.com is our joint controller contact point, but you may contact either company.
If you withdraw your consent to our processing of your information, we may no longer be able to provide some or all of the relevant services to you. If we process your information under another lawful basis, such as contract or legal obligation, we may need or be required to keep using or storing that information.
Website and usage information
When you visit our websites, we may collect technical and usage information, such as browser type, language preference, referring website, and the date and time of your visit. Some of this information may not identify you directly, but it helps us understand how you use our websites and improve their performance.
We use this information to:
From time to time, we may share or publish aggregated reports about website usage trends. These reports do not identify individuals and cannot be linked back to you.
Personal information
We collect personal information when you choose to interact with us, for example by contacting us, requesting information, arranging a demonstration, or using our websites. We only collect and use personal information that we need for the purposes described in this policy.
The table below explains what personal information we use, where it comes from, why we use it, and our lawful basis for using it.
What we use and where it comes from | Why we use it | Our lawful basis |
|---|---|---|
Publicly available business contact information, such as your name, role, employer, business email address or telephone number, where available from public sources. | To contact businesses to enquire whether they are interested in using our services. | Our legitimate interests in promoting our services and developing business relationships. |
Contact and enquiry information you provide to us, such as your name, contact details, job title, organisation and enquiry details. | To respond to enquiries, arrange demonstrations, manage our relationship with you or your organisation, and provide requested information. | Contract or steps before entering into a contract; and our legitimate interests in managing customer and prospective customer relationships. |
Marketing preferences and contact details. | To send marketing communications, reports, insights or other materials you have requested or may reasonably expect to receive. | Consent. |
Information needed for legal, regulatory or security purposes. | To comply with legal obligations, respond to public authorities, protect our systems and users, and manage legal claims. | Legal obligation; legitimate interests; and, where applicable, public interest. |
Technical information collected when you visit our websites, such as your IP address, device information, browser information and website usage data. |
For further information, please see our Cookie Policy. | Our legitimate interests, namely monitoring and improving our website and services, and your consent whenever required. |
Information you provide to Reapit or PayProp where we act as joint controllers. | To send you relevant marketing about services similar to those you have asked us about, where permitted by law. | Our legitimate interests, namely the pursuit of our own marketing and business development efforts, or your consent whenever required. |
Reapit and PayProp may act as joint controllers where both companies jointly decide how and why your personal information is used. This may happen where you provide information to either Reapit or PayProp and that information is used by both companies for the purposes described in the table above. Where consent is required, either Reapit or PayProp may ask for it on behalf of both companies.
The table below explains who else we may share your personal information with, why we share it, and our lawful basis for doing so.
Who we share it with | Why we share it | Our lawful basis |
|---|---|---|
Companies within the Reapit Group including affiliated companies. | To provide and promote our services, manage customer and prospective customer relationships, and support business development reporting. | Our legitimate interests in managing our group business, promoting our services and supporting customer relationships; contract or steps before entering into a contract with our customers; and consent where required. |
Suppliers and service providers, such as CRM providers, hosting providers, analytics providers and marketing agencies. | To help us provide our services, manage enquiries and customer relationships, send marketing communications, and operate our websites and systems. | Contract or steps before entering into a contract with our customer; and our legitimate interests in operating our business, providing our services and promoting them. Consent where required. |
Professional advisors, such as accountants and lawyers. | Only when necessary, limited to what is necessary.ATo obtain legal, financial, tax, audit, insurance or other professional advice, and to manage legal claims or business administration. | Our legitimate interests in administering our business, obtaining professional advice and managing legal claims; and legal obligation where applicable. |
Public authorities, such as regulators, law enforcement authorities, and HMRC. | To comply with legal obligations or respond to lawful requests from public authorities. | Legal obligation. |
We do not sell your personal information. We will only use it for a new purpose where permitted by law and, where required, we will ask for your consent.
We only give staff access to personal information where they need it for their role and for the purposes described in this policy. Staff with access to personal information are required to follow our data protection and confidentiality obligations, and receive appropriate guidance on handling personal information.
If you have an account with us, you may be able to access and update some of your personal information through that account. You can also contact us to exercise your data protection rights.
Under data protection law, and subject to certain conditions, you may have the right to:
To exercise your rights, please contact dpo@reapit.com or dpo@payprop.co.uk, depending on which company is relevant to your request. If your request relates to personal information used jointly by Reapit and PayProp, dpo@reapit.com is our joint controller contact point. You may also contact either company directly.
If you are a tenant, landlord, or owner, please contact your managing agent to exercise your data protection rights. This policy does not apply to personal information processed by your managing agent in connection with its relationship with you, or which we process on behalf of a managing agent.
We will respond to requests about your rights without undue delay and within one month of receiving your request. If your request is complex or you have made several requests, we may extend this period by up to two further months. We will let you know if we need more time. If a request is manifestly unfounded or excessive, for example because it is repetitive, we may charge a reasonable fee or refuse to act on it. If we have reasonable doubts about your identity, we may ask for additional information to confirm who you are before responding to your request.
We do not use profiling or automated decision-making that produces legal or similarly significant effects about you. You can find more information about your rights on the Information Commissioner’s Office website, available here.
You must ensure that information you provide to us is accurate, up to date, and lawful. If your email address or telephone number changes, please let us know. If you have an account with us, you may also be able to update your contact details in your account.
If you provide us with personal information about another person, you must make sure you are allowed to share it with us and that, where required, you have told that person how their information will be used.
We have an internal data retention policy. We keep personal information only for as long as we need it for the purposes described in this policy, unless we need to keep it for longer to comply with the law, respond to a court or regulator, manage legal claims, or keep records for audit, statistical or archiving purposes where permitted by law.
When deciding how long to keep personal information, we consider the type of information, why we collected it, any legal or regulatory requirements, and whether we need it to manage legal claims or business records.
We have an internal information security policy. We use technical and organisational measures designed to protect personal information against unauthorised access, unlawful use, accidental loss, destruction or damage.
We also require relevant suppliers to maintain appropriate security standards. Our security measures are intended to support the confidentiality, integrity, availability and resilience of the systems and services used to process personal information.
Some of our group companies, suppliers and service providers are located in countries outside the UK and the European Economic Area (‘EEA’). To provide our services, operate our websites, manage our business and carry out the purposes described in this policy, we may need to transfer personal information to those countries.
Data protection laws in those countries may differ from those in your country.
This may include transfers to group companies in countries such as the United States, Canada, Ireland, Switzerland, Denmark, South Africa, Australia and New Zealand. We may also transfer personal information to suppliers and service providers who support our websites, systems, marketing, analytics, security, customer relationship management and other business activities described in this policy.
Where required by data protection law, we use appropriate safeguards for international transfers, such as adequacy decisions, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, the EU Standard Contractual Clauses, or other safeguards permitted by law. These safeguards are intended to protect your personal information and your data protection rights. We take steps to ensure that personal information transferred to overseas group companies is protected in line with applicable data protection law.
If you have provided your email address to us, we may occasionally send you information about our services, new features, industry insights or opportunities for you to provide feedback. We primarily use uk.payprop.com or www.reapit.com to communicate this type of information, and we expect to keep these communications to a minimum.
You can unsubscribe from marketing communications at any time by using the unsubscribe link included in those communications. Please note that even if you unsubscribe from marketing communications, we may still send you important administrative, service, or legal notices where necessary.
We may work with advertising partners who use cookies or similar technologies to help deliver and measure relevant advertising. These technologies may collect information about your use of our websites and other websites.
For information about how we use cookies and similar technologies, please see our Cookie Policy.
We may update this policy from time to time to reflect changes in our business, services, legal requirements or data processing activities. Where appropriate, we will notify you of material changes. We encourage you to review this policy regularly so that you remain informed about how we use personal information. Your continued use of our websites after any non-significant change to this Policy will constitute your acceptance of such change.
If we buy, sell, merge, restructure or transfer all or part of our business, personal information may be transferred as part of that transaction where permitted by law.
If you have any questions about this policy or how we use personal information, please contact:
You can also contact us through the relevant website using the “Contact us” form.
If you have any concerns about how we use your personal information, please contact us first so that we can try to resolve them. If you remain dissatisfied, you may also complain to the Information Commissioner’s Office.
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
Website: https://www.ico.org.uk/make-a-complaint
Last updated: 20 July 2026
Promotion of Access to Information Act (PAIA) MANUAL
PAIA Request for Access to Record (Form)
PAIA Outcome of Request and of Fees Payable (Form)
Welcome to our Privacy Policy (“policy”). This policy explains how PayProp collects, uses and protects personal information when we act as responsible party. This includes personal information collected through our websites, marketing activities, business development activities and certain product usage tracking. In this policy, “personal information” means information that can be associated with you or another specific person and can be used to identify you or that person, either directly or indirectly.
We respect your privacy and take the protection of personal information very seriously.
We provide software and related services to businesses in the real estate industry (“services”).
Where we use the words “we”, “our”, or “us” we mean Property Payment Solutions (Pty) Ltd (registration no. 2005/001364/07), a private company incorporated under the laws of South Africa, with address 38 Dorp Street, Stellenbosch, 7600, South Africa (“PayProp”).
PayProp is a part of the Reapit Group (RPL Parent Ltd – Company no. 15303707) a company registered in England and Wales and registered office address at 67 – 74 Saffron Hill, EC1N 8QX London, United Kingdom.
In most cases, we act as an operator. This means we process personal information on behalf of our clients and in line with their instructions, for example where clients use our platforms to manage their own data. In some cases, we act as a responsible party. This means we decide why and how personal information is used. This policy only applies where we act as a responsible party.
This policy applies to you if you:
This policy does not apply to you if you are a job applicant, employee, agent or contractor. We provide those individuals with a separate privacy policy.
This policy applies to personal information we use for our own purposes, including website management, marketing and business development.
We collect potentially personally-identifying information like Internet Protocol (IP) addresses. We do not use such information to identify our website visitors and do not disclose such information, other than under the same circumstances that we use and disclose personally-identifying information, as described below.
This policy does not apply to:
When you provide personal information to us, we will process it as described in this policy. Where consent is required, we will ask for it separately. It will be very difficult and, in some cases, impossible for us to provide services to you if you refuse to allow us to process your information. If you do not accept the practices described in this policy, you must not provide us with any personal information.
Where we rely on your consent to process personal information, you can withdraw that consent at any time by contacting our Information Officer at io@payprop.co.za.
If you withdraw your consent to our processing of your information, we may no longer be able to provide some or all of the relevant services to you. If we process your information under another lawful basis, such as contract or legal obligation, we may need or be required to keep using or storing that information.
Website and usage information
When you visit our websites, we may collect technical and usage information, such as browser type, language preference, referring website, and the date and time of your visit. Some of this information may not identify you directly, but it helps us understand how you use our websites and improve their performance.
We use this information to:
From time to time, we may share or publish aggregated reports about website usage trends. These reports do not identify individuals and cannot be linked back to you.
Personal information
We collect personal information when you choose to interact with us, for example by contacting us, requesting information, arranging a demonstration, or using our websites. We only collect and use personal information that we need for the purposes described in this policy.
The table below explains what personal information we use, where it comes from, why we use it, and our lawful basis for using it.
What we use and where it comes from | Why we use it | Our lawful basis |
|---|---|---|
Company information: Company name, registration number, registered address, VAT number, auditor details. | To enter into the contract with the client and to provide services to the client. | For the conclusion or performance of a contract between us and our clients |
Contact information: Contact information of a representative of the client and records of correspondence with the representative of the client. |
|
|
Know-your-customer documents: A copy of your Fidelity Fund Certificate, your Financial Intelligence Centre registration number, your financial year end, your bank statements, your shareholding information, your trust deed and Master of the High Court letters of authority (where relevant), your remittance account details, and details available via external portals such as WinDeed and/or the Companies and Intellectual Property Commission. |
| Compliance with a legal obligation. |
CCTV: Information captured on security systems, including CCTV and key card entry systems when accessing our premises. |
| Legitimate interest in protecting physical persons and property from harm. |
Financial information: Financial information of those who engage in transactions with us, including our clients, and any additional personal information required to process those transactions. | To enable us to provide the client with the services and for us to receive appropriate payment for those services. | For the conclusion or performance of a contract between us and our clients |
Who we share it with | Why we share it | Our lawful basis |
|---|---|---|
Companies within the Reapit Group including affiliated companies. | To provide and promote our services, manage customer and prospective customer relationships, and support business development reporting. | Our legitimate interests in managing our group business, promoting our services and supporting customer relationships; contract or steps before entering into a contract with our customers; and consent where required. |
Suppliers and service providers, such as CRM providers, hosting providers, analytics providers and marketing agencies. | To help us provide our services, manage enquiries and customer relationships, send marketing communications, and operate our websites and systems. | Contract or steps before entering into a contract with our customer; and our legitimate interests in operating our business, providing our services and promoting them. Consent where required. |
Professional advisors, such as accountants and lawyers. | To obtain legal, financial, tax, audit, insurance or other professional advice, and to manage legal claims or business administration. | Our legitimate interests in administering our business, obtaining professional advice and managing legal claims; and legal obligation where applicable. |
Public authorities, such as regulators, law enforcement authorities and the Information Regulator. | To comply with legal obligations or respond to lawful requests from public authorities. | Legal obligation. |
We do not sell your personal information. We only use it for a new purpose where permitted by law and, where required, we will ask for your consent.
We only give staff access to personal information where they need it for their role and for the purposes described in this policy. Staff with access to personal information are required to follow our data protection and confidentiality obligations, and receive appropriate guidance on handling personal information.
If you have an account with us, you may be able to access and update some of your personal information through that account. You can also contact us to exercise your data protection rights.
Under data protection law, and subject to certain conditions, you may have the right to:
To exercise your rights, please contact io@payprop.co.za. We will respond to requests about your rights without undue delay and within one month of receiving your request. We will let you know if we need more time.
If you are a tenant, landlord, or owner, please contact your managing agent to assist you with your rights as this policy does not apply to you in the context of that relationship.
If requests are manifestly unfounded or excessive, for example because they are repetitive, we may charge a reasonable fee or refuse to act on them. If we have reasonable doubts about your identity, we may ask for additional information to confirm who you are before responding to your request.
We do not use profiling or automated decision-making that produces legal or similarly significant effects about you.
You must ensure that information you provide to us is accurate, up to date, and lawful. If your email address or telephone number changes, please let us know. If you have an account with us, you may also be able to update your contact details in your account.
If you provide us with personal information about another person, you must make sure you are allowed to share it with us and that, where required, you have told that person how their information will be used.
We have an internal data retention policy. We keep personal information only for as long as we need it for the purposes described in this policy, unless we need to keep it for longer to comply with the law, respond to a court or regulator, manage legal claims, or keep records for audit, statistical or archiving purposes where permitted by law.
When deciding how long to keep personal information, we consider the type of information, why we collected it, any legal or regulatory requirements, and whether we need it to manage legal claims or business records.
We have an internal information security policy. We use technical and organisational measures designed to protect personal information against unauthorised access, unlawful use, accidental loss, destruction or damage.
We also require relevant suppliers to maintain appropriate security standards. Our security measures are intended to support the confidentiality, integrity, availability and resilience of the systems and services used to process personal information.
Certain information that our clients provide to us is stored on servers in foreign jurisdictions, notably in the European Union.
Some of our group companies, suppliers and service providers are located in countries outside the Republic of South Africa. Any transfers of your personal information outside South Africa will only take place subject to appropriate safeguards as provided in data protection law. These safeguards are intended to secure your rights as a data subject with respect to any relevant non-South African domiciled entities.
To provide our services, operate our websites, manage our business and carry out the purposes described in this policy, we may need to transfer personal information to those countries. As a website visitor, by using PayProp’s websites, you agree and consent to us transferring and communicating your personal information. If you do not consent, you must not use our website.
When you use our services, or in other instances where we process your personal information, we will only transfer your personal information where we meet the requirements set out in applicable data protection law, for example where the transfer is necessary for the performance of a contract. This may include transfers to group companies in countries such as the United Kingdom, United States, Canada, Ireland, Switzerland, Denmark, Australia and New Zealand. We may also transfer personal information to suppliers and service providers who support our websites, systems, marketing, analytics, security, customer relationship management and other business activities described in this policy.
We have agreements in place with our suppliers and service providers. We require them to comply with the applicable data protection laws, in particular the Protection of Personal Information Act 4 of 2013, and comply with any instructions they receive from us, as responsible party or operator, regarding personal information.
We assume responsibility for the security of personal information that is accessible by our overseas affiliates.
If you have provided your email address to us, we may occasionally send you information about our services, new features, industry insights, and opportunities for you to provide feedback. We primarily use payprop.com to communicate this type of information, and we expect to keep these communications to a minimum.
You can unsubscribe from marketing communications at any time by using the unsubscribe link included in those communications. Please note that if you unsubscribe from marketing communications, we may still send you important administrative, service, or legal notices where necessary.
We only use cookies if you have consented by selecting “yes” in the cookie banner that appears when you first visit our website.
If you wish to change your cookie preference, different browsers provide different methods to block and delete cookies used by websites. You can change the settings of your browser to block/delete the cookies. Listed below are the links to the support documents on how to manage and delete cookies from the major web browsers.
If you are using any other web browser, please visit your browser’s official support documents.
This policy does not regulate the use of cookies by any advertisers. We nonetheless inform you that ads appearing on any of our websites may be delivered to users by advertising partners, who may set cookies. These cookies allow the ad server to recognise your computer each time they send you an online advertisement to compile information about you or others who use your computer. This information allows ad networks to, among other things, deliver targeted advertisements that they believe will be of most interest to you.
We may update this policy from time to time to reflect changes in our business, services, legal requirements or data processing activities. Where appropriate, we will notify you of material changes. We encourage you to review this policy regularly so that you remain informed about how we use personal information. Your continued use of this site after any change in this policy will constitute your acceptance of such change.
If we buy, sell, merge, restructure or transfer all or part of our business, personal information may be transferred as part of that transaction where permitted by law.
If you have any questions about this policy or how we use personal information, please contact io@payprop.co.za, or visit the relevant website and use the “Contact us” form.
If you have any concerns about how we use your personal information, please contact us first so that we can try to resolve them. If you remain dissatisfied, you may also complain to the Information Regulator.
Information Regulator
Woodmead North Office Park
54 Maxwell Drive
Woodmead
Midrand
Johannesburg
2191
Telephone: 010 023 5200
POPIAComplaints@inforegulator.org.za
Last updated: July 2026