Legal
Compliant with the Protection of Personal Information Act 4 of 2013 ("POPIA"). Last updated: 17 May 2026.
Kelly Metalic Property Group (Pty) Ltd ("KMPG") is the responsible party for personal information processed through this Platform, as defined in POPIA.
We collect: (a) registration information — name, email address, phone number, password hash; (b) profile information — agency name, EAAB registration, profile photo, bio; (c) property listing information; (d) payment information — transaction references and amounts (no card details are stored by KMPG); (e) usage data — pages visited, searches conducted, enquiries sent; (f) device and technical data — IP address, browser type, operating system; (g) communications — messages sent through the Platform.
We use your personal information to: (a) provide and operate the Platform and its services; (b) verify your identity and credentials; (c) process payments; (d) send transactional notifications (account verification, enquiry replies, viewing confirmations); (e) send newsletter communications (with your consent); (f) improve the Platform through analytics; (g) comply with legal obligations; (h) prevent fraud and ensure security.
Under POPIA, we process your personal information on the following grounds: (a) performance of a contract — to provide our services; (b) legitimate interests — to improve the Platform and prevent fraud; (c) consent — for marketing communications and push notifications (which you may withdraw at any time); (d) legal obligation — where required by South African law.
We do not sell your personal information. We may share it with: (a) service providers who assist with operating the Platform (payment processors, email delivery services) — bound by data processing agreements; (b) estate agents and property owners — when you submit a property enquiry; (c) law enforcement or regulatory bodies — when required by law; (d) a successor entity — in the event of a business acquisition, subject to the same privacy commitments.
We retain your personal information for as long as your account is active or as needed to provide services. Account data is retained for 5 years after account closure for legal and accounting purposes. Property listing data is retained for 7 years for compliance. You may request deletion at any time (see Your Rights below).
You have the right to: (a) access your personal information; (b) correct inaccurate or incomplete information; (c) request deletion ("right to be forgotten") subject to our legal obligations; (d) object to processing for direct marketing; (e) withdraw consent at any time without affecting the lawfulness of prior processing; (f) lodge a complaint with the Information Regulator (South Africa) at www.inforegulator.org.za. To exercise your rights, use our POPIA request form.
We use session cookies (strictly necessary for login) and preference cookies (for language and display settings). We do not use third-party advertising cookies. You may decline non-essential cookies via the cookie banner shown on your first visit.
We implement industry-standard security measures including HTTPS/TLS encryption, bcrypt/Argon2id password hashing, CSRF protection, rate limiting, and regular security reviews. No method of transmission over the internet is 100% secure.
Your data is stored on servers located in South Africa. If any service providers process data outside South Africa, we ensure appropriate safeguards are in place consistent with POPIA requirements.
Our Information Officer can be reached at: privacy@kellymetalicpropertygroup.co.za. For data subject requests, use our POPIA request form.