Privacy Notice

Garnat Properties — Privacy Notice

Last updated: 1 January 2028

1. Who we are

Garnat Properties is responsible for the personal information described in this notice.

This notice explains how we handle information collected through our website enquiry form and related correspondence under South Africa’s Protection of Personal Information Act, 2013 (“POPIA”).

Legal address: 332 Toop Street, Despatch, 0127.
Information Officer: Garth Jager.

2. What information we collect

When you submit an enquiry, we collect your name, email address, enquiry type, message and, if provided, telephone number. We also process subsequent correspondence about your enquiry.

Submitting an enquiry is voluntary. The form requires your name, email address, enquiry type and message so that we can understand and respond to your request. Your telephone number is optional. Without the required information, the form cannot be submitted.

Please avoid including identity documents, banking details or sensitive personal information in your message. Only provide another person’s information if you are authorised to do so.

Hosting and security services may also process technical information, including IP addresses, browser information and request records, to operate and protect the website.

3. Why we process your information

We use enquiry information to understand your request, direct it to the appropriate person and communicate with you. Necessary technical information helps us prevent automated spam, protect the website and investigate service problems.

Ordinary enquiry handling and website security rely on our legitimate interests in responding to requests and operating a secure website. Where applicable, processing may also be necessary to take steps towards an agreement you request or meet a legal obligation.

Submitting an enquiry does not subscribe you to a marketing mailing list.

We do not sell your enquiry information or use it for unrelated marketing.

4. Who receives your information

The website sends enquiry details to our designated enquiry mailbox. People authorised to handle your request, and providers supporting our hosting, email and IT services, may process relevant information for those purposes.

Access is restricted to authorised people, and relevant service providers are subject to appropriate confidentiality and security arrangements.

We may also disclose information where required or permitted by law.

5. Cloudflare Turnstile and overseas processing

The contact page uses Cloudflare Turnstile to distinguish human visitors from automated spam. Its checks begin when the page loads.

Cloudflare processes technical signals such as IP addresses, browser characteristics and information about the website being visited. It uses these signals to protect websites and improve its bot-detection capabilities. Further details appear in Cloudflare’s Turnstile Privacy Addendum.

Cloudflare operates internationally, so technical information may be processed outside South Africa. Our hosting or email services may also involve overseas processing.

6. Cookies and tracking

The website uses necessary cookies for session and form-security functions. Blocking necessary cookies or Cloudflare Turnstile may prevent the enquiry form from working.

Google Analytics is optional and loads only after you accept analytics. We use it to understand visits to our public pages, development-card views and selections, and successful enquiry sends. Card views do not represent visits to individual development pages.

Google may process technical information such as IP and network information, browser and device characteristics, and pseudonymous cookie identifiers. Google operates internationally, so processing may take place outside South Africa. See Google’s Privacy Policy for details. Advertising storage, advertising user data and advertising personalisation remain disabled.

We send known public page paths and approved campaign categories, not arbitrary URL parameters. We do not send enquiry names, email addresses, telephone numbers, messages, enquiry types or application-supplied visitor identifiers to Analytics.

Your choice is remembered in your browser for 180 days. Use Analytics preferences in the footer at any time to reject analytics or change your choice. Withdrawal stops future measurement and removes Analytics cookies accessible to this website, without resetting your form entries. Earlier lawful processing is not undone. Missing, expired or unreadable choices mean Analytics remains off. Rejecting analytics does not prevent enquiries.

Separately, we keep monthly totals of successful enquiry mail sends for internal reporting, irrespective of your analytics choice. These private aggregates contain counts, coverage dates, reporting status and integrity information; they contain no enquiry content, contact details or visitor identifiers. A successful send records the mail service’s acceptance, which does not guarantee inbox delivery.

7. Storage, retention and security

Enquiries and related correspondence are retained in our designated mailbox and any authorised systems used to manage your request.

Information is deleted or de-identified when there is no longer a lawful reason to retain it. Records may be retained where needed for a resulting agreement, legal obligation or dispute.

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss and misuse.

No system can guarantee absolute security.

8. Your rights and complaints

Subject to POPIA and applicable access procedures, you may request access to your personal information, correction of inaccurate information, or deletion where retention is no longer authorised. You may object to processing on applicable grounds and withdraw consent where processing relies on consent. Withdrawal does not invalidate earlier lawful processing.

To contact our Information Officer, use the contact form, select General enquiry, and describe your privacy request. Alternatively, write to our legal address above.

We may request proportionate information to verify your identity before releasing or changing records. We will explain any lawful limitation on your request.

You may also complain directly to the Information Regulator (South Africa):

9. Changes to this notice

We will update this notice when our practices change and display the revised date. Publishing a revision does not create consent for a new processing purpose.