Privacy Policy

Last updated: 01 October 2025

Introduction

This Privacy Policy describes how RareFind SA (Pty) Ltd (“RareFind”, “we”, “us” or “our”) collects, uses, discloses and safeguards your information when you use our website and services. It also explains your rights under South Africa’s Protection of Personal Information Act, 2013 (“POPIA”), and other applicable laws.

By using our website or services, you agree to the terms of this Privacy Policy.

Interpretation and Definitions

Account: a unique account created for you to access our Service.
Company: RareFind SA (Pty) Ltd, Reg. No. [2023/615525/07], registered in South Africa.
Cookies: small files placed on your device to store browsing information.
Country: South Africa.
Device: any device that can access the Service (computer, cellphone, tablet).
Personal Information: information relating to an identifiable person, as defined in POPIA.
Service: the website and services provided by RareFind SA.
Service Provider / Operator: a natural or legal person who processes data on our behalf.
Usage Data: data collected automatically about your use of the Service.
Website: www.rarefind.co.za, accessible from https://www.rarefind.co.za
You / Data Subject: the individual accessing or using our Service, or the legal entity they represent.

Information We Collect

Personal Information you provide:

Name and surname
Email address
Phone number
Physical address (only if you choose to bid, sell, or consign items)
Proof of identity and address (only for Verified Members engaged in auctions/sales)Automatically collected data (Usage Data):
IP address, browser type/version
Pages visited, time/date of visit, time spent
Device and operating system details
Analytics data (Google Analytics 4, Meta Pixel, etc.)
From third parties:
Social media platforms
Payment providers (PayFast)

Tracking Technologies & Cookies

We use cookies and similar technologies to improve your experience. These include essential cookies (required for core site functionality), preference cookies (remember your settings), and analytics cookies (help us understand usage and improve our services).

For detailed information on the cookies we use, their purposes, retention periods, and how you can manage them, please refer to our separate Cookies Policy available on our website.

Change of Purpose:

We will only use your personal information for the purposes described above. If we reasonably need to use it for another compatible purpose, we will explain the legal basis. If we need to use it for an unrelated purpose, we will notify you and explain the legal basis before proceeding.

How We Use Your Personal Information

Marketing Preferences & Opt-out:
You can opt out via the ‘Unsubscribe’ link in our emails, in your account settings, or by emailing privacy@rarefind.co.za. SMS opt-in data and consent are not shared with third parties. You can opt out of SMS by replying STOP.

We process your information to:

Provide and maintain our services
Manage your account and verification status
Complete transactions and deliver products
Contact you regarding your account, purchases, or support requests
Send marketing communications (only with consent; always with opt-out)
Prevent fraud, verify identities, and ensure secure auctions
Improve our website and customer experience
Comply with legal and regulatory obligations

Additional Legal Basis by Purpose (POPIA):

Account setup & access; bidding, selling, fulfilment: Contract
KYC / age verification; tax and accounting: Legal obligation
Security, fraud-prevention, logs, service improvement: Legitimate interests
Marketing by email/SMS: Consent (opt-in, withdraw anytime)
Analytics & product improvement: Legitimate interests (consent where cookies apply)

Legal Basis for Processing (POPIA Conditions)

We process your information in line with POPIA’s conditions:
Accountability
Processing limitation
Purpose specification
Further processing
Information quality
Openness
Security safeguards
Data subject participation

Exercising Your Rights:

We may request information to verify your identity before acting on a request. We aim to respond within 20 business days. No fees apply unless a request is manifestly excessive or repetitive.

Data Subject Rights

You have the right to:

Access your personal information
Request correction, update, or deletion
Object to processing or withdraw consent
Opt-out of direct marketing
Lodge a complaint with the Information Regulator

Sharing of Your Information

We may share information:

With service providers/operators (hosting, payments, courier, analytics, anti-fraud)
With affiliates/business partners
With other users during auctions
During business transfers
When required by law or regulators
With your consent

Cross-Border Transfers

We may transfer information outside South Africa (e.g., cloud hosting, Google, PayFast). We ensure compliance with Section 72 of POPIA, including contractual safeguards, adequacy, or your consent.

Retention of Data

We retain data only as long as necessary:

Account data – 5 years after closure
Transaction records – 5 years (tax/legal)
Support communications – 24 months
Verification/KYC documents – 5 years after last transaction
Analytics data – up to 26 months

After these periods, data is securely deleted or anonymised.

Examples of Safeguards:

We use measures such as TLS encryption in transit, hashed and salted passwords, role-based access controls, and audit logging.

Security Safeguards

We use technical and organisational measures to protect your information. If a data breach occurs, we will notify both you and the Information Regulator without undue delay.

Children’s Privacy

Our services are not directed to children under 18. We do not knowingly process children’s information without parent/guardian consent.

Links to Other Websites

Our website may contain links to third-party sites. We are not responsible for their privacy practices.

Changes to this Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a new ‘Last updated’ date.

PAIA Manual

Our PAIA Manual, explaining how you may request access to records, is available on request from our Information Officer.

Contact Us

Information Officer – RareFind SA (Pty) Ltd
Email: privacy@rarefind.co.za