Your information, and what we do with it.
This notice explains what personal information we collect, why we need it, who we share it with, and the rights you have over it under the Protection of Personal Information Act, 2013 (POPIA).
Last updated 2026-07-31
This document is not yet final.
Our company registration details are still being confirmed, so the sections identifying the responsible party are incomplete. Everything else describes how we actually operate today. For anything urgent, contact us and a person will answer.
Outstanding: registered name, registration number, address, information officer, privacy email
Who is responsible
The responsible party is [registered name — to be confirmed], trading as Top View Property, of [address — to be confirmed].
Our Information Officer is [information officer — to be confirmed]. Any question, request or complaint about your personal information should go to hello@topviewproperty.ai.
What we collect, and why
We only collect what a step actually needs. Nothing here is gathered speculatively.
- When you register interest or join the waitlist: your name, email address, mobile number, and — depending on the form — your city, budget range, buying stage, and whether you are buying to live in or to invest. We need this to respond to you and to match you to suitable developments. Without it we cannot contact you at all.
- When you create an account: your name and email address, handled on our behalf by Clerk (see processors below). We never see or store your password.
- When you reserve a unit: the unit and development concerned, the deposit amount, and the payment reference. Card and banking details are entered directly with our payment provider and never reach our systems.
- When you submit FICA and bond documents:identity documents, proof of address, payslips and bank statements. This is legally required before a property application can be processed, and is the most sensitive information we hold — see “How we protect it” below.
- As you browse: pages viewed, the site that referred you, campaign tags in the link you arrived through, and a randomly generated visitor identifier stored in a cookie. This tells us which marketing is working. It is not linked to you personally unless and until you submit a form.
Marketing, and how to stop it
We only add you to our mailing list if you tick the box asking us to. That consent is recorded against your record, separately from the enquiry itself — declining it still gets your enquiry answered by a person.
Every marketing email carries an unsubscribe link, and you can opt out at any time without giving a reason. Transactional messages — a reservation hold, a deposit receipt, a document request — are not marketing and continue regardless, because they concern a transaction you have entered into.
Who else sees it
We do not sell your personal information. We share it only with the operators below, each of whom processes it on our instructions and for no other purpose:
- The developer or agent whose development you enquired about, so they can follow up. They see your contact details and what you enquired about.
- Supabase — our database and file storage.
- Clerk — account sign-in and identity.
- Resend — sending email.
- Paystack — processing deposit payments.
- Vercel — hosting.
- Meta — where you arrived through one of our advertisements, we send a hashed, irreversible version of your email address or mobile number so the advertising platform can measure that campaign. We never send it in readable form.
Some of these operators process information outside South Africa. POPIA permits this where the receiving country or the operator's contractual commitments provide comparable protection, which is the basis we rely on.
We will also disclose information where the law requires it — for example under FICA, or in response to a lawful order.
How we protect it
Access is enforced in the database itself, not only in the application: each record carries rules limiting it to the person it belongs to, the developer responsible for that development, and our own administrators.
FICA and bond documents are held in private storage. They are never publicly addressable and are retrieved only through short-lived links issued to someone already authorised to see that specific document.
If your personal information is ever compromised, we will notify you and the Information Regulator as POPIA requires.
How long we keep it
Enquiry and marketing records are kept while they are still useful to you and for a reasonable period afterwards, unless you ask us to delete them sooner. Records tied to a reservation, a payment or a FICA submission are kept for the periods required by the Financial Intelligence Centre Act and general tax and company law, which are longer and are not ours to waive.
Your rights
Under POPIA you may:
- ask what personal information we hold about you, and get a copy
- have information that is wrong or incomplete corrected
- ask us to delete information we no longer have a lawful reason to keep
- object to us processing your information, including for marketing
- withdraw consent you previously gave, at any time
- complain to the Information Regulator
Write to hello@topviewproperty.ai and we will respond. If you are not satisfied, the Information Regulator of South Africa can be reached at inforegulator.org.za.
Cookies
We use a small number of cookies: one to keep you signed in, one holding a random visitor identifier, and one recording how you first reached the site so we can attribute the enquiry to the right campaign. We also use Microsoft Clarity to see how visitors use the site (things like clicks, scrolling and mouse movement), which sets its own cookies for that purpose. We do not use cookies to build a profile of you across other websites.
Changes
If we change how we handle personal information, we will update this notice and change the date above. Where a change is significant, we will tell you directly. Continuing to use Top View Property after that means you accept the updated notice.