Privacy policy

Who is responsible

Paramount Properties ("we") is the responsible party for the personal information collected on this website. Our contact details are on the Contact page.

What we collect

• When you create an account: your first name, last name, e-mail address, phone number and a password. The password is stored only as a one-way hash; we cannot read it.
• When you send an enquiry, request information, book a call or ask for a viewing: the details you type into the form, the house it concerns and the time you sent it.
• When you save a house to your account: which house you saved.
• Technical information needed to keep you signed in: one session cookie, the time your session was created and last used, and the browser description sent by your device.

What we do not collect

• We do not use advertising or analytics trackers, and we do not set third-party cookies.
• We do not ask for your identity number, bank details or income on this website. Those are needed only if you decide to buy, and are then collected by the conveyancing attorney under their own privacy notice.

Why we collect it

The legal basis under POPIA is your consent (you give us the information when you create the account or send the form), and our legitimate interest in answering enquiries about the development.

• To give you an account that stays signed in on your device and shows you the price list, your saved houses and your enquiries.
• To answer your enquiries and arrange calls or viewings.
• To send you news about The Paramount Estate, such as the release of prices or a change in the programme, but only if you ticked the box asking for it. You can untick it on your account page at any time.
• To keep the website secure and working.

Who sees it

• The people at Paramount Properties who answer enquiries and manage sales.
• Our hosting providers, who store the website and its database on our behalf and are bound by contract to process it only on our instructions. Servers may be outside South Africa; providers are chosen for security standards at least equal to POPIA's.
• An estate agent or conveyancing attorney appointed for the development, if you ask to buy or to be contacted about buying.
• Nobody else. We do not sell or share personal information for marketing by others.

How long we keep it

• Your account, for as long as you keep it. Delete it and the account, its sessions and saved houses are removed within 30 days.
• Enquiries, for up to three years after the last contact, so we can answer follow-up questions and keep a record of what was said.
• Sessions expire after 180 days without use and are then deleted.
• Records needed for a sale are kept for as long as the law requires.

Cookies

The site sets one cookie, named pp_session, when you sign in. It holds a random identifier that links your browser to your account, is marked HttpOnly and Secure, and lasts 180 days, renewing when you use the site. Signing out removes it. The site works without cookies if you are not signed in; the price list and account pages need it.

A single preference for light or dark display may be stored in your browser's local storage. It contains no personal information.

Your rights

To exercise any of these, use the Contact page or write to our information officer at the address given there.

• To see the personal information we hold about you, and to have it corrected. Most of it is on your account page, where you can change it yourself.
• To withdraw consent to marketing at any time, on your account page or by asking us.
• To ask us to delete your information, subject to what we must keep by law.
• To object to processing, and to complain to the Information Regulator (South Africa) at inforeg.org.za if you believe we have not handled your information lawfully.

Security

Passwords are hashed with scrypt and never stored or logged in clear text. Sessions are random, stored hashed, and bound to your browser by a cookie that scripts cannot read. All traffic to the site uses HTTPS. Access to the database is limited to the people who need it to run the website.

Children

This website is for adults. We do not knowingly collect information from anyone under 18.

Changes

If this policy changes, the new version will be published here with its date. If a change affects how we use information you have already given us, we will tell you by e-mail before it takes effect.