Privacy Policy

Last updated: 13 July 2026

SECTION 1 - INTRODUCTION AND RESPONSIBLE PARTY

This Privacy Policy is issued by BBRG (Pty) Ltd (BBRG, we, us, our), a company incorporated under the laws of the Republic of South Africa, in its capacity as the responsible party as defined in the Protection of Personal Information Act 4 of 2013 (POPIA). This policy explains how we collect, use, store, share and protect the personal information of visitors to bbrg.co.za and users of our property investment education services, in accordance with POPIA and, where applicable, the Promotion of Access to Information Act 2 of 2000 (PAIA).

Information Officer: [INSERT INFORMATION OFFICER FULL NAME, EMAIL AND TELEPHONE NUMBER]. BBRG's Information Officer is registered, or is in the process of being registered, with the Information Regulator of South Africa as required by section 55 of POPIA read with the Regulator's registration requirements.

SECTION 2 - PERSONAL INFORMATION WE COLLECT

Depending on how you interact with our website and services, we may collect: full name, email address, telephone number, property investment goals and financial parameters entered into our Deal Analyser tool, IP address and device or browser data, cookies and similar tracking technologies, and any information you voluntarily submit through our forms, including when booking a consultation call.

SECTION 3 - PURPOSE OF PROCESSING (POPIA SECTION 13)

We process your personal information for the following specified, explicitly defined and lawful purposes only: to provide access to our educational content, courses and the Deal Analyser tool; to respond to enquiries and to schedule consultation calls; to send you marketing communications where you have consented in accordance with section 69 of POPIA; to process payments for courses or services purchased; to comply with our legal and regulatory obligations, including under the Consumer Protection Act 68 of 2008; and to improve our website and service offering.

SECTION 4 - LAWFUL BASIS FOR PROCESSING

We rely on one or more of the following grounds recognised under section 11 of POPIA: your consent; the processing being necessary to conclude or perform a contract to which you are a party; compliance with a legal obligation; or our legitimate interest in operating and improving our business, provided this does not override your interests, rights or freedoms.

SECTION 5 - DIRECT MARKETING (POPIA SECTION 69)

We will not send you direct marketing communications by electronic means unless you are an existing customer whom we have marketed similar products or services to before, or you have given your express consent (opt-in). You may object to the processing of your personal information for direct marketing purposes, or withdraw consent, at any time by using the unsubscribe link in any marketing email or by contacting our Information Officer.

SECTION 6 - SHARING OF PERSONAL INFORMATION AND OPERATORS

We use third-party service providers, including GoHighLevel/LeadConnector (a United States-based platform provider), to host our website, manage customer relationships, deliver email communications and process form submissions. These providers act as operators as defined in POPIA and process personal information only on our instruction and under confidentiality and security obligations consistent with section 21 of POPIA. We do not sell your personal information to third parties.

SECTION 7 - CROSS-BORDER TRANSFER OF PERSONAL INFORMATION (POPIA SECTION 72)

Because certain of our service providers, including our website and email infrastructure, are hosted outside South Africa, your personal information may be transferred to and processed in other countries, including the United States. We only make such transfers where the recipient is subject to a law, binding corporate rules or binding agreement that provides an adequate level of protection substantially similar to POPIA's conditions for lawful processing, or where you have consented to the transfer, or where the transfer is necessary to perform a contract with you.

SECTION 8 - DATA SECURITY (POPIA SECTION 19)

We implement appropriate, reasonable technical and organisational measures to safeguard the integrity and confidentiality of personal information in our possession or under our control, to prevent loss, damage, unauthorised destruction, and unlawful access to or processing of personal information.

SECTION 9 - RETENTION OF PERSONAL INFORMATION

We retain personal information only for as long as necessary to fulfil the purposes described in this policy, or as required or permitted by law, including record-keeping obligations under the Companies Act 71 of 2008 and SARS tax record requirements under the Tax Administration Act 28 of 2011.

SECTION 10 - YOUR RIGHTS AS A DATA SUBJECT (POPIA SECTIONS 23 TO 25)

Subject to POPIA, you have the right to: be notified that your personal information is being collected; access the personal information we hold about you; request correction, destruction or deletion of personal information that is inaccurate, irrelevant, excessive, outdated, incomplete or unlawfully obtained; object, on reasonable grounds, to the processing of your personal information; and lodge a complaint with the Information Regulator if you believe we have processed your personal information unlawfully.

SECTION 11 - COOKIES

Our website uses cookies and similar technologies to operate core functionality and, where you consent, to analyse site usage. You can control cookies through your browser settings.

SECTION 12 - INFORMATION REGULATOR

If you have concerns about how we handle your personal information, you may contact the Information Regulator (South Africa). Complaints email: [email protected]. General enquiries: [email protected]. Website: www.justice.gov.za/inforeg

SECTION 13 - CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The Last updated date at the top of this page indicates when this policy was last revised.

SECTION 14 - CONTACT US

For any questions about this Privacy Policy or to exercise your rights under POPIA, please contact us at [email protected].