Effective Date: November 2025
Website: https://mandacate.com
Contact: info@mandacate.com

1. Introduction

Mandacate (Pty) Ltd (“Mandacate”, “we”, “our”, “us”) respects your right to privacy and is committed to protecting the personal information of all users of our platform, including property sellers, real estate agencies, investors, and service providers.

This Privacy Policy explains how we collect, use, disclose, and protect your personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA) and other applicable South African legislation, including the Financial Intelligence Centre Act (FICA).

By using our website or platform, you agree to the practices described in this Privacy Policy.

2. Information We Collect

We may collect and process the following types of information:

2.1 Personal Information

• Full name, ID or passport number, or company registration details
• Contact details such as email address, phone number, and address
• Banking and tax details where required for FICA or payment purposes
• Property ownership and transaction information
• Supporting identification documents (e.g., proof of address, certified ID copies)

2.2 Platform Information

• Login credentials and user profile details
• Records of property mandates, agency allocations, and service provider agreements
• Communication and correspondence via the Mandacate platform

2.3 Technical Information

• IP address, browser type, and device identifiers
• Website usage data for security, analytics, and performance purposes

3. How We Collect Information

• Directly from you when you register or submit a form on the Mandacate platform
• From third parties such as regulatory authorities, compliance partners, or agencies
• Automatically through our website or digital services

4. Purpose for Processing Personal Information

• Fulfilling our legal obligations under FICA and POPIA
• Facilitating property mandate allocations between Sellers and Agencies
• Onboarding Service Providers and Investors
• Verifying identity, ownership, and compliance documentation
• Communicating updates, notifications, and agreements via the Mandacate platform
• Managing payments, commissions, and compliance reimbursements
• Protecting Mandacate, its users, and partners against fraud and unauthorised access

5. Legal Basis for Processing

Mandacate processes personal information under one or more of the following lawful grounds:

• To comply with legal and regulatory obligations (FICA, PPRA, POPIA)
• To perform contractual duties under mandate or service provider agreements
• With your consent, where required
• For our legitimate business interests, such as maintaining a secure and efficient platform

6. Disclosure of Information

Mandacate will only share personal information with:

• Real Estate Agencies and Service Providers selected or contracted via the Mandacate platform
• Regulatory authorities, compliance auditors, and legal partners when required by law
• Conveyancing attorneys for property transfers and commission payments
• Technology and security providers assisting in maintaining our digital infrastructure

All third parties are bound by confidentiality and data protection obligations consistent with POPIA.

7. Data Security

Mandacate implements appropriate administrative, technical, and physical safeguards to protect your personal information from loss, misuse, unauthorised access, alteration, or destruction. This includes:

• Secure servers and encrypted data storage
• Restricted internal access based on role and necessity
• Regular data backups and compliance audits

8. Data Retention

Personal information is retained only as long as necessary to:

• Fulfil the purpose for which it was collected
• Comply with legal and regulatory retention periods
• Resolve disputes and enforce agreements

After such periods, information is securely deleted or anonymised.

9. Your Rights

Under POPIA, you have the right to:

• Access your personal information held by Mandacate
• Correct or update inaccurate or incomplete information
• Request deletion of personal information, subject to legal retention requirements
• Withdraw consent for processing, where applicable
• Lodge a complaint with the Information Regulator at www.justice.gov.za/inforeg

Requests can be submitted to info@mandacate.com.

10. Cookies and Website Tracking

Mandacate.com uses cookies and analytics tools to improve user experience, monitor website performance, and ensure platform security. You can manage cookie preferences through your browser settings.

11. Third-Party Links

Our website may include links to external websites or services. Mandacate is not responsible for the privacy practices or content of such third parties.

12. Children’s Information

Mandacate does not knowingly collect or process personal information from individuals under 18 years of age without parental consent.

13. Changes to this Policy

Mandacate reserves the right to update or amend this Privacy Policy at any time. Updates will be published on our website, and continued use of our platform constitutes acceptance of the revised terms.

14. Contact Us

For any questions, concerns, or requests regarding this Privacy Policy, please contact:

Mandacate (Pty) Ltd
Reg. No: 2025/515238/07
Email: info@mandacate.com
Location: Cape Town, South Africa