Legal

Privacy Policy

This policy explains how Onyx Advance (Pty) Ltd collects, uses, and protects personal information through Erf — our property lead-management platform — in line with South Africa’s Protection of Personal Information Act, 2013 (POPIA).

Last updated: 9 July 2026

1. Who we are

Erf is operated by Onyx Advance (Pty) Ltd (registration number 2026/110041/07), a company registered in South Africa, with its address at 12 Jan Hupkes Crescent, Loerie Park, George, Western Cape, 6529.

For any privacy question, or to exercise the rights described below, contact our Information Officer at andre@onyxadvance.co.za.

2. Who this covers

This policy applies to three groups of people:

  • Visitors to our marketing website and anyone who requests a demo.
  • Prospective buyers who register interest through an Erf buyer portal run by a property developer that uses our platform.
  • People who contact a development over WhatsApp, whose messages are handled through Erf’s messaging inbox.

Where a property developer (our client) uses Erf to manage their own leads, that developer is the responsible party for their buyers’ information under POPIA, and Onyx Advance acts as their operator — processing that information on their behalf and under their instruction. For our own website and demo enquiries, Onyx Advance is the responsible party.

3. What we collect

Depending on how you interact with us, we may process:

  • Contact details — name, email address, phone number.
  • Enquiry details — the development you’re interested in, your budget or unit preference, location, and anything you choose to tell us in a form or message.
  • WhatsApp messages — the content of messages you send to a development, your WhatsApp phone number, and your WhatsApp profile name, so that the developer’s team can read and reply to you.
  • Usage & analytics data — pages visited, approximate location (town/city level), device and browser information, and referral source, collected to understand where interest comes from and to improve the product.

4. WhatsApp messaging

Some developments let you enquire over WhatsApp. When you message a development, WhatsApp (operated by Meta) delivers your message to Erf, where it is stored and shown to that development’s sales team in a private inbox so they can respond to you. We use this information solely to handle your enquiry and conversation — never to send you unrelated marketing, and never sold or shared beyond the developer you contacted and the service providers listed below.

Your use of WhatsApp itself is also governed by WhatsApp’s own Privacy Policy.

5. How we use your information

  • To respond to your enquiry and manage your conversation with a development.
  • To let a developer’s sales team follow up with you about a property you showed interest in.
  • To send you service communications you’ve asked for or consented to (for example, launch updates).
  • To understand demand and improve the Erf platform.
  • To meet our legal and regulatory obligations.

We rely on your consent (which you can withdraw at any time), the need to take steps at your request before entering a possible transaction, and our clients’ legitimate interest in managing property enquiries, as our lawful bases for processing.

6. Who we share it with

We do not sell your personal information. We share it only with:

  • The property developer whose portal or WhatsApp number you contacted.
  • Service providers who help us run the platform — our messaging provider (Meta / WhatsApp), email delivery provider (Resend), and analytics (Google Analytics) — each processing data only as needed to provide their service.
  • Authorities, where we are legally required to disclose information.

7. Where your data is stored

Erf is hosted on servers located in South Africa. Some of our service providers (such as WhatsApp/Meta and Google) may process limited data outside South Africa; where that happens, we rely on providers that offer protection consistent with POPIA’s requirements for cross-border transfers.

8. How long we keep it

We keep personal information only as long as needed for the purposes above — typically for as long as you remain an active lead with a development, and thereafter only as required to meet legal, tax, or record-keeping obligations. You can ask us to delete your information at any time (see below).

9. How we protect it

We use appropriate technical and organisational measures to safeguard personal information, including encrypted connections, access controls that limit who can view messages and leads, and encryption of sensitive stored credentials. No system is perfectly secure, but we work to protect your information against loss, misuse, and unauthorised access.

10. Your rights under POPIA

You have the right to:

  • Ask what personal information we hold about you, and get a copy.
  • Ask us to correct or update information that is wrong or out of date.
  • Ask us to delete your information, or to stop processing it.
  • Object to processing, and withdraw any consent you’ve given.
  • Opt out of marketing communications at any time.

To exercise any of these, email andre@onyxadvance.co.za. You also have the right to complain to the Information Regulator of South Africa.

11. Cookies & analytics

Our sites use cookies and similar technologies to keep the product working and to measure how it’s used (via Google Analytics). You can control cookies through your browser settings; blocking some may affect how the site works.

12. Changes to this policy

We may update this policy from time to time. When we do, we’ll change the “last updated” date above, and material changes will be reflected here on this page.

Onyx Advance PTY LTD · Erf CRM · Built in George, South Africa

← Back to site