XP24

POPIA

Privacy Notice

Version 2 · Effective 22 July 2026

1. Who we are

This website, xp24.app and the XP24 listing application are operated by Quantum Neuro Creations (Pty) Ltd, registration number 2019/559151/07, trading as XP24("we", "us") — a South African technology company, and the responsible party for the personal information described here. Address: 131 Hornbill Crescent, Montana Gardens, Pretoria. Contact: info@xp24.co.za · 082 491 5426. Information Officer: W.K. Pretorius (registered with the Information Regulator), contactable at info@xp24.co.za.

XP24 is an advertising platform, not an estate agency. Where you separately engage property practitioner services, those are provided by Xtreme Properties 24 & Auctioneers (Pty) Ltd, a PPRA-registered estate agency — a separate company that is the responsible party for information you give it in that capacity. See our Terms of Use.

2. What we collect

  • Property enquiries: your name, email, phone number and message.
  • Listing submissions: your name and contact details; the property's details, photos, video and documents you provide.
  • Ownership verification: your South African ID number, your marital status, and whether the property is held by you personally, a trust or a company. Why we need each of these — and why we do not ask for a copy of your ID document — is in section 3.
  • Payments: processed by our payment provider (Dodo Payments) — we receive confirmation, your name and email, never your card number.
  • Browsing: anonymous, aggregate statistics only — no analytics cookies and no profiles. One optional advertising cookie runs only if you allow it (see section 9), and you may change your mind at any time.

We collect personal information directly from you, never buy it from third parties, and do not knowingly collect children's information.

3. Why we use it

  • To respond to your enquiry and connect you with the seller.
  • To verify, list, market and manage your property when you submit one.
  • To confirm you are entitled to sell the property. We use your ID number and name to check you against the registered owner on the public deeds record, and we ask your marital status because a spouse married in community of property must consent to a sale (Matrimonial Property Act s15(2)(a)) and that fact does not appear on any deeds record. This is an anti-fraud and ownership-verification purpose, not a FICA one — we are not an accountable institution. We ask for your ID number, not a copy of your ID document.
  • To keep honest, audit-preserving records of listings, consents and payments.

We never sell personal information and never share it for third-party marketing.

4. Where it is stored

Our systems are hosted with reputable cloud providers whose data centres for our services are in the European Union (database) and on a global content-delivery network (website). The EU provides protection substantially similar to POPIA (section 72). When you submit a listing we record your explicit consent to this arrangement.

5. Who we share it with

  • Service providers that host our systems, deliver our email and process payments — on our instructions only.
  • The seller, when you enquire about a property.
  • Xtreme Properties 24 & Auctioneers, where you ask for property practitioner services.
  • A property-data provider, to check the ownership details you give us against the public deeds record.
  • Regulators and authorities where the law requires it (Information Regulator, PPRA, FIC).

6. How long we keep it

Enquiries are kept while we assist you and for a reasonable period thereafter, then deleted or de-identified. Listings, mandates, consents and payment records are retained as part of our statutory and audit record — withdrawn listings are hidden from the public but preserved (POPIA s14; FICA requires transaction records for at least 5 years).

7. How we protect it

Access is restricted to our small team on secured, authenticated systems. Media and documents live in private storage reachable only through our website. Listing records are append-only and tamper-evident. If a compromise ever occurs we will notify the Information Regulator and affected persons as POPIA section 22 requires.

8. Your rights

You may ask what we hold about you, ask us to correct or delete it (where the law doesn't require us to keep it), object to processing, or withdraw a consent. Email info@xp24.co.zawith the subject "POPIA request". You may also complain to the Information Regulator (South Africa): complaints.IR@inforegulator.org.za · inforegulator.org.za. Our PAIA manual explains how to request access to records we hold.

9. Cookies

By default, only what is technically necessary (e.g. a sign-in cookie for our own team) — no analytics cookies and no tracking. If we run advertising campaigns, we may ask your permission for one optional Meta (Facebook) advertising cookiethat measures which of our adverts brought you here. It loads only if you tap "Allow", declining changes nothing about how the site works, and your choice is remembered either way. You can change or withdraw that permission at any time via Cookie settings at the foot of every page; withdrawing deletes the cookie immediately.

10. Changes

Updated versions are published here with their effective date. Material changes will be highlighted.