Privacy Notice

Responsible party and contact

SW Real Estate trading as SWD Real Estate (Pty) Ltd. determines the purposes and means of the processing described here. Its registration and service details are R756699 and Smithco Building, King Mswati III Avenue, Matsapha, Kingdom of Eswatini, M0200. Privacy requests may be sent to ralston@tigerafrica.com. The Information Officer is Ralston Smith and may be contacted at ralston@tigerafrica.com. Any regulator-issued registration reference will be maintained in the controlled compliance record and disclosed where legally required.

Information processed

SWD may process account identifiers, contact details, authentication events, encrypted second-factor material, organisation and authority evidence, listing and property information, uploaded documents, enquiries, viewing requests, non-binding offers, support and fraud reports, subscription and invoice references, device and security telemetry, consent and legal-acceptance records, and privacy-request evidence.

Stripe processes payment-card details in its embedded component. SWD does not receive complete card details. SWD records provider identifiers, payment status, entitlement, invoice, refund, dispute and reconciliation information needed to operate billing.

Purposes and grounds

Information is processed to create and secure accounts, provide requested marketplace functions, verify authority, moderate content, communicate service events, administer subscriptions, prevent fraud, meet legal duties, respond to rights requests, maintain audit evidence and improve reliability.

Depending on the purpose and applicable law, SWD relies on performance of a contract or steps requested before a contract, compliance with legal obligations, protection of legitimate interests that do not override the rights of the data subject, and consent where consent is legally required. Special or sensitive information is processed only where an applicable lawful basis and safeguard exists.

Optional marketing or non-essential analytics consent is separate from contractual acceptance and privacy-notice acknowledgement. Refusing optional consent does not disable core service functions.

Collection and recipients

Information comes from users, authorised organisation representatives, service interactions, security telemetry and approved providers. SWD may disclose the minimum necessary information to counterparties selected by a user, authorised organisation members, infrastructure and communications providers, payment providers, professional advisers, regulators, courts and law-enforcement bodies where lawful.

The approved subprocessor schedule is the production provider inventory approved for this release, including Google Cloud and Firebase for infrastructure and identity, Stripe for payment processing, and Resend for transactional email, together with any replacement provider added through the controlled change process. Providers may not use SWD information for unrelated purposes under their applicable contracts.

International transfers

SWD uses approved hosting and service providers in Google Cloud africa-south1 for primary SWD application workloads, together with the processing locations necessarily used by approved subprocessors under their applicable safeguards. Cross-border transfers are permitted only where SWD has a lawful transfer basis and reasonable safeguards appropriate to the information and recipient, including applicable contractual protections, adequate legal protection or another mechanism permitted by law.

Retention

SWD retains each category only for its approved operational, security, legal, tax, accounting, dispute and evidence period. The controlling retention schedule is the versioned SWD privacy and records-retention configuration. Records are retained only for the operational, security, accounting, tax, dispute, fraud-prevention or legal-hold period applicable to the category and are then deleted, de-identified or placed beyond ordinary operational use.. When retention ends, information is deleted, de-identified or placed beyond operational use unless preservation is legally required.

Security

Controls include encryption, restricted service identities, tenant isolation, append-only audit evidence, malware scanning, rate limits, session revocation, least-privilege provider credentials, backups and monitored incident handling. No system is risk-free. SWD will handle security compromises and notifications under the approved incident process and applicable law.

Rights

Subject to applicable law, a person may ask whether SWD holds their information, request access or correction, object to certain processing, request deletion or restriction, withdraw consent where consent is the basis, and complain to the Information Regulator. Identity verification and lawful limitations may apply.

Requests may be sent to ralston@tigerafrica.com. SWD records the request, verifies authority, prevents cross-tenant disclosure and communicates the outcome. A complaint may also be made to the Information Regulator.

Children and automated decisions

SWD is not directed to children and does not knowingly permit a child to open a transactional account without an approved lawful process. SWD does not knowingly permit a minor to create an independent transactional account. Any service involving a minor requires a lawful, age-appropriate process and verified authority of a parent, guardian or other person legally authorised to act.. SWD does not make a solely automated decision with legal or similarly significant effect unless the approved notice and safeguards say otherwise.

Updates

Material changes are versioned. Where renewed acknowledgement or consent is required, SWD records the document version, hash, effective time, user, method and interface version before the affected function proceeds.