Privacy

Privacy Policy

Privacy notice. Last updated: 25 June 2026. This policy works with the POPIA Notice and explains how DealExchange handles buyer, broker, seller, billing and marketplace operations data.

Information we collect

• Buyer enquiries and alerts: name, email, phone, budget, timeline, funding position, criteria and messages.
• Broker/seller intake: contact details, company details, mandate status, sector, asking range and confidentiality instructions.
• Broker portal: account details, organisation details, FFC/registration/VAT evidence where supplied, listings, leads, billing history and audit records.
• Operational records: notification events, audit logs, rate limit counters, payment references, webhook ids and last four card digits where Paystack is enabled.
• Browser storage: saved listing slugs, storage notice acknowledgement and anonymous first party analytics events. Private token query strings are not stored.

Why we use it

We use personal information to respond to enquiries, match buyer demand to reviewed mandates, moderate listings, prevent duplicate or unauthorised listings, operate broker/admin portals, protect the platform from abuse, comply with law, and improve the marketplace.

Operators and integrations

DealExchange uses Cloudflare for hosting, D1 database, R2 media storage, Turnstile and security infrastructure. Email may be sent through Resend or Cloudflare Email. Hosted checkout for paid broker products is processed by Paystack with verified webhooks; DealExchange does not store card PANs.

Advertising and AdSense status

DealExchange does not load Google AdSense code and does not use third party advertising cookies in the current configuration. AdSense may only be activated later on buying guide pages after owner approval, Google account approval, consent handling, cookie wording and privacy wording have all been confirmed.

If AdSense is activated later, Google and its partners may use cookies or similar technologies for ad delivery, measurement and personalisation where allowed by law and consent choices. Marketplace transaction pages, enquiry forms, buyer criteria forms, seller intake, broker registration, broker workspace, pricing and legal pages remain forbidden ad routes.

Sharing

Buyer details are shared with a broker only after a qualified enquiry is appropriate for a specific mandate. Broker confidential duplicate evidence is not shared with competing brokers. We do not sell personal information.

Cross border processing

Cloudflare, Resend and Paystack may process information outside South Africa. DealExchange relies on providers that commit to appropriate contractual and technical safeguards.

Retention

Buyer alerts are kept while active and reviewed at least every 24 months; enquiries and deal records are kept for up to 36 months after last activity or longer where required for disputes; payment and invoice records are kept for tax and accounting periods; audit and security logs are retained as needed for integrity and incident response, then deleted or anonymised.

Your choices and rights

You may request access, correction, objection, deletion or unsubscribe through the contact workflows. Use the DealExchange contact workflow so your request is stored in the desk queue and routed to the right process.. Some records may be retained where required for legal, security, tax, dispute or audit reasons, but we will minimise or anonymise where appropriate.

Security boundary

Do not submit confidential documents, full financial packs, staff records, ID documents, bank statements or customer lists through public website forms. Those should only be shared through an approved secure process.