Privacy Policy

1. Who we are

Hei Realty & Tech (Pty) Ltd ("Hei Realty & Tech", "we", "us", "our") is a South African company operating a technology division and a property division. This policy applies to this website and to enquiries you send us through it.

For the purposes of POPIA we are the responsible party for the personal information described in this policy. Where the GDPR applies, we act as the data controller.

Our products — including HeiConnect — may have their own privacy notices covering the information processed inside those platforms. This policy covers the corporate website only.

2. Information we collect

Information you give us

• Your name, email address and, if you choose to provide them, your phone number and company name.
• The subject of your enquiry and the content of any message you send us.
• Any additional information you volunteer in correspondence with us.

Information collected automatically

• Standard server log data such as IP address, browser type, device type, referring page and the pages you view.
• Aggregated, non-identifying usage information used to understand how the site performs.

We do not collect special personal information (such as health, religious or biometric data) through this website, and we ask that you do not send it to us.

3. How we use your information

• To respond to your enquiry and provide the information or service you asked about.
• To provide quotes, proposals or accommodation availability where you have requested them.
• To maintain a record of business correspondence.
• To keep the website secure, available and working correctly.
• To comply with our legal and regulatory obligations.

We do not sell your personal information, and we do not use enquiry details for unrelated marketing without your consent.

4. Lawful basis for processing

We process personal information on the following bases:

• Consent — where you have voluntarily submitted an enquiry or subscribed to updates.
• Performance of a contract — where processing is necessary to provide a service you have engaged us for.
• Legitimate interests — for site security, fraud prevention and ordinary business administration.
• Legal obligation — where retention or disclosure is required by law.

5. Cookies

This website uses a small number of cookies, kept to the minimum needed for the site to work:

• Session cookie — issued by our web framework to maintain your session.
• Security cookie — used to protect forms against cross-site request forgery (CSRF).

These are strictly necessary cookies. We do not currently run advertising or third-party tracking cookies on this website. If analytics or marketing cookies are introduced in future, this policy will be updated and consent obtained where required.

You can block or delete cookies in your browser settings, but parts of the site — including the contact form — may then not work correctly.

6. Sharing your information

We may share personal information with:

• Service providers who host our website, deliver our email or provide technical support, under appropriate confidentiality terms.
• Professional advisers such as accountants or legal advisers, where necessary.
• Authorities, where disclosure is required by law or to protect our legal rights.

Some of our service providers may process information outside South Africa. Where information is transferred across borders, we take reasonable steps to ensure it receives a level of protection comparable to that required by POPIA.

7. How long we keep information

We keep enquiry correspondence only for as long as it serves a legitimate business purpose — typically no longer than 24 months after our last contact with you — unless a longer period is required by law or by an ongoing commercial relationship. Server logs are retained for a short operational period.

8. Security

We apply reasonable technical and organisational measures to protect personal information, including encrypted connections (HTTPS), restricted access to enquiry records, secure hosting and standard protections against common web attacks.

No system is completely secure. If a breach occurs that is likely to compromise your personal information, we will notify you and the Information Regulator as required by POPIA.

9. Your rights

Subject to applicable law, you have the right to:

• Request access to the personal information we hold about you.
• Request correction of information that is inaccurate or incomplete.
• Request deletion of information we no longer have a lawful reason to keep.
• Object to processing based on our legitimate interests.
• Withdraw consent at any time, where processing is based on consent.
• Request that we transfer your information to another party, where technically feasible.
• Lodge a complaint with the Information Regulator of South Africa, or your local supervisory authority under the GDPR.

To exercise any of these rights, email us at info@heirealtyandtech.co.za. We will respond within the period required by law.

10. Children's privacy

This website is intended for business users and adults. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or the law. The date at the top of this page shows when it was last revised. Material changes will be highlighted on this page.

12. Contact us

Questions about this policy, or about how we handle your information, can be sent to:

• Email: info@heirealtyandtech.co.za
• Phone: +27 69 846 7092
• Location: Gauteng, South Africa