POPIA

POPIA Notice

Last updated: 20 June 2026. This notice explains how DealExchange processes personal information under the Protection of Personal Information Act, 2013 (POPIA).

Responsible party

DealExchange is the responsible party for personal information processed through this website. Contact: hello@dealexchange.co.za.

What we collect and why (purpose)

• Buyer enquiries: name, email, phone, budget, timeline, funding position and your message, used to qualify your interest and, where appropriate, route a serious enquiry to the mandate broker.
• Broker / seller intake: contact and company details, mandate status, sector, asking range and confidentiality instructions, used to review a mandate before any publication decision.
• Site usage: saved listings and lightweight, first-party analytics events stored in your browser, used to operate and improve the marketplace.

Lawful basis

We process this information to take steps at your request and to pursue our legitimate interest in operating a curated acquisition marketplace, and, where required, with your consent. Providing the information is voluntary, but enquiry and intake forms cannot be actioned without the requested fields.

Who receives it (operators)

Personal information is stored in our database (Cloudflare D1) and infrastructure (Cloudflare). Notification emails may be sent through an email operator (for example Resend or Cloudflare Email). These operators process information on our behalf under appropriate safeguards. We do not sell personal information.

Cross-border processing

Some operators may process data outside South Africa. Where this occurs, we rely on operators that provide a comparable level of protection consistent with POPIA.

Retention

We keep enquiry and mandate records for as long as needed to support the deal process and for legitimate business and legal record-keeping, after which they are deleted or anonymised. You may request earlier deletion (see below).

Your rights

You have the right to access, correct, or request deletion of your personal information, to object to processing, and to lodge a complaint. To exercise any of these, email hello@dealexchange.co.za. We will respond within a reasonable period.

Complaints

You may complain to the Information Regulator (South Africa): inforegulator.org.za, POPIAComplaints@inforegulator.org.za.

Security boundary

Do not send confidential company documents, full financial packs, staff records or customer lists through public website forms. Those are exchanged only through an approved secure process after qualification.