Legal

Privacy Policy

Last updated: July 2026

Sakstons Property Group ("we", "us", or "our") is committed to protecting your personal information. This privacy policy explains what data we collect through our website, why we collect it, and how we handle it in line with the Protection of Personal Information Act 4 of 2013 (POPIA) of South Africa, the European Union General Data Protection Regulation (GDPR), and other applicable data protection laws.

This policy applies to all visitors to our website, regardless of location. If you are in the European Economic Area (EEA), the GDPR applies to the processing of your personal data. If you are in South Africa, POPIA applies. Both frameworks grant you substantial rights over your personal information, which are described below.

1. What information we collect

We only collect personal information that you voluntarily provide to us through the forms on our website:

• Contact form: name, email address, phone number, message, and property interest.
• Valuation popup form: name, email address, phone number, message, property type, property address, and estimated property value.
• Get in Touch popup form: name, email address, phone number, message, and area of interest.

We do not collect payment details, login credentials, or health data. We do not create user accounts, run a newsletter signup, or use third-party analytics or advertising services unless you have given explicit consent via our cookie consent banner.

2. How we use your information

Your information is used solely for the purpose for which you provided it:

• Responding to your property enquiry, valuation request, or general contact message.
• Connecting you with an appropriate estate agent at our Sandton office.
• Following up on your property interest where you have consented to be contacted.

We will never use your data for unrelated marketing, sell it to third parties, or share it outside the scope described in this policy.

3. Legal basis for processing

We process your personal information on the following legal grounds:

• Consent (GDPR Art. 6(1)(a) / POPIA s. 11): you voluntarily submit your details through our forms, indicating your agreement for us to process the information for the stated purpose.
• Legitimate interest (GDPR Art. 6(1)(f) / POPIA s. 15): processing is necessary to provide the property services you have requested and to fulfil our obligations as a licensed estate agency under the Property Practitioners Act 2019 (PPA).
• Contract performance (GDPR Art. 6(1)(b)): where applicable, processing is necessary to perform a service agreement with you.

4. International data transfers

Our website is hosted on servers located in South Africa. Your data is processed and stored within South Africa. If you are accessing our website from outside South Africa (including the EEA, UK, or other jurisdictions), your data is transferred to and processed in South Africa.

Under GDPR, transfers of personal data to countries outside the EEA require adequate safeguards. South Africa's POPIA has been deemed by the European Commission to provide an adequate level of data protection. We also rely on your explicit consent (given by submitting a form on our website) as a legal basis for this transfer, as permitted under GDPR Art. 49(1)(a).

5. Data retention

We keep your enquiry or valuation data for as long as it is relevant to providing you with property services — typically no longer than 12 months after your last interaction with us. After that period, your data is securely deleted from our records.

We may retain certain data for longer where required by law (for example, to comply with PPRA record-keeping requirements or tax regulations).

6. Your rights

Under both POPIA and GDPR, you have the following rights as a data subject:

• Access (GDPR Art. 15 / POPIA s. 23): request a copy of the personal information we hold about you.
• Rectification (GDPR Art. 16 / POPIA s. 24): ask us to correct inaccurate or incomplete information.
• Erasure (GDPR Art. 17 / POPIA s. 24): request that we delete your personal information ("right to be forgotten"), subject to any legal obligation to retain it.
• Restriction of processing (GDPR Art. 18): request that we limit how we use your data in certain circumstances.
• Objection (GDPR Art. 21 / POPIA s. 40): object to the processing of your information, including processing based on legitimate interests.
• Data portability (GDPR Art. 20): request your data in a structured, commonly used, machine-readable format.
• Withdrawal of consent (GDPR Art. 7(3) / POPIA s. 11): withdraw your consent at any time. We will cease processing your data from that point forward without it affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, email us at info@sakstons.com or call 011 234 9801. We will respond to your request within 30 days as required by both POPIA and GDPR.

7. Third-party sharing

We do not sell, rent, or trade your personal information. The only third party with access to your data is our web hosting provider, which stores form submissions in a secure database on our behalf under a data processing arrangement. We do not use any third-party analytics, advertising, or tracking services unless you have given explicit consent via our cookie consent banner.

8. Security measures

We take reasonable steps to protect your personal information in line with GDPR Art. 32 and POPIA s. 19:

• All form submissions are encrypted in transit via HTTPS (TLS 1.2+).
• Contact and valuation forms include honeypot spam protection to prevent automated abuse.
• Data is stored in a SQLite database on a secured server with access controls in place.
• Access to personal data is restricted to authorised personnel who need it to perform their duties.

While we implement industry-standard measures, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security but are committed to maintaining the protections described here.

9. Cookies and tracking technologies

Our website uses the following categories of cookies:

• Essential cookies: required for the website to function properly. These include consent preferences stored in your browser's localStorage. No opt-out is available for essential cookies as they are necessary for site operation.
• Analytics cookies (only with consent): Google Analytics 4 is used to understand how visitors interact with the website. It is activated only after you click "Accept All" on our cookie consent banner. We do not enable advertising storage.
• Advertising cookies (only with consent): used to deliver relevant advertisements. We do not currently use any advertising cookies.

We use localStorage (browser-side storage) to remember your cookie consent preference. This is not a traditional cookie but functions similarly. No third-party cookies are set without your explicit consent.

You may withdraw consent and clear stored preferences at any time by clearing your browser's localStorage/site data. Our cookie consent banner will reappear on your next visit, allowing you to make a fresh choice.

10. Compliance statements

POPIA: Sakstons Property Group complies with the Protection of Personal Information Act 4 of 2013. We have appointed internal controls to ensure responsible collection, processing, and storage of personal information. We do not process special personal information (such as health, biometric, or children's data) and do not engage in automated decision-making or profiling.

GDPR: For visitors from the European Economic Area (EEA), we comply with the EU General Data Protection Regulation (Regulation (EU) 2016/679). We process your data lawfully, fairly, and transparently; collect only what is necessary; and protect your rights as described in this policy.

11. Changes to this policy

We may update this privacy policy from time to time. Material changes will be reflected by updating the "Last updated" date at the top of this page. We encourage you to review this page periodically.

12. Supervisory authorities and complaints

If you are not satisfied with our response to a data protection concern, you have the right to lodge a complaint with the relevant supervisory authority:

• South Africa: The Information Regulator — www.inforegulator.org.za
• European Union: Your national Data Protection Authority (DPA) within the EEA. A full list is available at edpb.europa.eu.

13. Contact us

For requests to access information held by Sakstons Property Management, please refer to our PAIA Manual and POPIA Compliance Policy.

If you have any questions or concerns about this privacy policy or how your data is handled, please contact us:

• Email: info@sakstons.com
• Phone: 011 234 9801
• Address: The Campus, Bryanston, Sandton, Gauteng, South Africa