1. Introduction
TapToView ("we", "us", "our") is committed to protecting the personal information of all individuals who interact with our Platform. This Privacy Policy explains what personal information we collect, why we collect it, how we use it, and your rights as a data subject under the Protection of Personal Information Act 4 of 2013 ("POPIA").
This Policy applies to: registered estate agents and property professionals ("Agents") who use the TapToView platform, and prospective property buyers ("Buyers") who submit their details via a TapToView property landing page.
2. Responsible Party
The responsible party for the processing of personal information collected through the Platform is TapToView. You may contact our Information Officer at: [email protected].
3. Personal Information We Collect
From Agents:
- Full name and email address (registration)
- Agency name, contact number, and WhatsApp number (profile)
- Property listing information (title, description, price, location, photos)
- Account credentials (email address and hashed password — we never store plain-text passwords)
From Buyers (via property landing pages):
- Full name
- Email address
- Mobile phone number
- POPIA consent confirmation (timestamp recorded)
Automatically collected:
- Property page view counts (anonymous, no personal data)
- Session cookies required for authentication (no third-party tracking cookies)
4. Purpose of Processing
We process personal information for the following specific purposes:
- Agent account management — to create and maintain agent accounts and provide access to the Platform.
- Lead capture and delivery — to capture buyer enquiries and deliver them to the relevant agent via email notification.
- Buyer confirmation — to send buyers a confirmation email with property details and agent contact information.
- Platform analytics — to provide agents with aggregated performance metrics (lead counts, view counts) about their listings.
- Legal compliance — to maintain records as required by applicable South African law.
We do not process personal information for any purpose other than those listed above without obtaining fresh consent or establishing another lawful basis under POPIA.
5. Lawful Basis for Processing
We process personal information on the following lawful bases:
- Consent — Buyers provide explicit POPIA consent before submitting their details. Agents consent to processing by accepting these Terms and our Privacy Policy at registration.
- Contractual necessity — Processing is necessary to deliver the Platform services described in our Terms and Conditions.
- Legitimate interest — Platform security, fraud prevention, and aggregate analytics.
- Legal obligation — Retention of records as required by applicable law.
6. Sharing of Personal Information
We do not sell personal information. We share personal information only in the following limited circumstances:
- With the relevant agent — Buyer lead data (name, email, mobile) is shared with the agent who owns the property listing, for the purpose of following up on the property enquiry.
- Email service providers — We use a transactional email service to deliver confirmation and notification emails. These providers process email addresses solely for delivery purposes and are bound by data processing agreements.
- Cloud infrastructure providers — Our Platform is hosted on cloud infrastructure. Providers are bound by appropriate data processing agreements and security standards.
- Legal authorities — Where required by law, court order, or to protect the rights and safety of TapToView or others.
7. Data Retention
We retain personal information for the following periods:
- Agent account data — For the duration of the account and for 3 years after account closure, unless a longer period is required by law.
- Buyer lead data — For 2 years from the date of capture, after which it is permanently deleted.
- Email logs — For 1 year for operational and compliance purposes.
After the applicable retention period, personal information is securely deleted or anonymised.
8. Your Rights as a Data Subject
Under POPIA, you have the following rights:
- Right of access — You may request a copy of the personal information we hold about you.
- Right to correction — You may request correction of inaccurate or incomplete personal information.
- Right to deletion — You may request deletion of your personal information, subject to our legal retention obligations.
- Right to object — You may object to the processing of your personal information on grounds relating to your particular situation.
- Right to withdraw consent — Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
- Right to lodge a complaint — You have the right to lodge a complaint with the Information Regulator of South Africa at www.justice.gov.za/inforeg.
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
9. Security
We implement appropriate technical and organisational measures to protect personal information against unauthorised access, loss, destruction, or alteration. These include HTTPS encryption, hashed password storage (bcrypt), access controls, and regular security reviews.
In the event of a data breach that poses a risk to data subjects, we will notify the Information Regulator and affected data subjects as required by POPIA.
10. Cookies
TapToView uses only functional session cookies strictly necessary for authentication. We do not use advertising, tracking, or analytics cookies that collect personal information. No cookie consent banner is required for strictly necessary cookies under POPIA.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify registered users of material changes via email or a prominent notice on the Platform. The "Last updated" date at the top of this page indicates when the Policy was last revised.
12. Contact Us
For privacy-related queries or to exercise your data subject rights, contact our Information Officer at: [email protected]