1. Who is responsible
Renva Properties Group, based in Midrand, Gauteng, South Africa, is responsible for the processing described here. Privacy and Information Officer enquiries may be sent to hello@renvaproperties.co.zawith “POPIA request” in the subject line.
2. Information we collect
Depending on how you use the service, we may collect:
- name, email address, phone number and account details;
- address, city, country and optional identification details;
- member and authorised-user names, emergency contacts and access notes;
- membership periods, selected access days, properties, plan fees and history;
- payment status, transaction references and provider identifiers—but not full card or bank login details;
- reviews, enquiries, support messages and communications; and
- limited technical and security information, such as timestamps, browser requests and shortened security hashes used to detect abuse.
3. Why we use it
We process personal information to check booking-date availability, create and manage memberships, verify EFT payments, communicate with members, remember future access preferences, provide support, manage properties, publish verified reviews, keep accounting and legal records, prevent fraud and secure the service. We rely on performance of the membership contract, legal obligations, consent where required, and legitimate operational and security interests that do not unfairly override your rights.
4. When information is shared
We may share only the information reasonably needed with hosting and email service providers, the relevant property team, banking partners where verification requires it, and contractors who help deliver residence access, professional advisers, insurers, fraud prevention services and public authorities where lawfully required. Service providers must use the information only for the instructed service and protect it. We do not sell personal information.
5. Payments
Membership payments are currently made by EFT to the verified account shown in the signed-in member portal. Renva records the payment amount, membership reference and confirmation status needed to activate access. We never ask for or store a member’s online-banking password, PIN or one-time password.
6. Storage, international processing and security
Information may be processed by trusted providers in South Africa or another country. Where information crosses borders, we use providers and safeguards intended to provide protection consistent with applicable South African law. We use access controls, signed secure sessions, restricted banking-detail access, transport encryption, audit records, rate limits, restricted administration and backups. No internet service can promise absolute security, but we regularly review reasonable technical and organisational safeguards.
7. Retention
We keep information only for as long as reasonably needed for the purposes above. Membership and transaction records may be retained for at least five years where tax, accounting or dispute obligations require it. Optional profile information is removed or de-identified when it is no longer needed, subject to legal holds, security records and legitimate record-keeping requirements.
8. Cookies
The signed-in areas use a strictly necessary, secure session cookie so the website can recognise an authenticated administrator or client. It is not used for advertising. If analytics or non-essential cookies are introduced later, this notice and any required consent controls will be updated before they are enabled.
9. Your POPIA rights
Subject to applicable law, you may ask whether we hold your information, request access or correction, ask for deletion or destruction where appropriate, object to certain processing, withdraw consent where processing depends on consent, or object to direct marketing. We may need to verify your identity and may retain information that the law requires us to keep. You may also complain to South Africa’s Information Regulator.
10. Other people and children
If you provide another authorised user’s information, you must have permission to do so and make this notice available to them. Memberships must be held by an adult or legal entity. Information about a child should only be supplied by or with the authorisation of a competent person and only where needed for authorised access.
11. Updates and contact
We may update this notice as the service or legal requirements change. The current version and effective date will remain available here. For a privacy request or question, email hello@renvaproperties.co.za.