POPIA Information

Responsible party and operators

Property Direct Hub, operated by HMR Property Solutions, acts as the responsible party for the personal information processed through the platform for our own purposes.

We use operators, such as hosting, database, storage, email and authentication providers, who process information on our behalf under confidentiality obligations.

Estate agents, landlords and property managers who use the platform act as responsible parties for the information they collect about their own clients, tenants and contractors.

Accountability and processing limitation

We process personal information lawfully and in a reasonable manner that does not unnecessarily infringe your privacy, and we collect only what we need for the stated purpose.

Where we rely on consent, that consent is voluntary, specific and informed. Consent boxes are never pre-ticked, and consent may be withdrawn at any time.

Where processing is necessary to provide the service or to perform a contract, we say so rather than presenting it as an optional choice.

Purpose specification and further processing

Buyer information is made available to registered estate agents for one purpose: to contact you about properties that may suit your stated requirements.

Inspection records, photographs and documents are processed for property-management, record-keeping and communication purposes connected to the property concerned.

We do not use personal information for a new, incompatible purpose without a lawful basis for doing so.

Information quality and openness

We take reasonable steps to keep information accurate and up to date, and users can correct their own account and advert details at any time.

This page, the Privacy Policy and the Cookie Policy together explain what we collect, why, and who it is shared with.

Security safeguards

We apply account-based access control, database row-level security, private file storage and encrypted connections, and we restrict buyer-request and inspection access to the relevant registered accounts.

Unnecessary image metadata, including location data, is removed when photographs are processed for upload.

If a security compromise affecting personal information occurs, we will act reasonably and in line with our obligations under POPIA.

Retention

A buyer request is visible to registered agents for 14 days from submission, after which it expires automatically and is no longer shown.

Other records are retained for as long as needed for the purpose, or as required for compliance and dispute handling, and then deleted or de-identified.

Data subject participation — your rights

You may ask what personal information we hold about you, ask us to correct or delete it, object to processing, or withdraw consent where consent is the basis for processing.

Use the Contact page to make a request. We may need to confirm your identity before acting on it.

You may also lodge a complaint with the Information Regulator of South Africa.

Special care with documents and photographs

Uploaded files may contain identity, financial or other sensitive details. Only upload what is necessary, and avoid capturing personal material that is not relevant to the property, advert or inspection.