Estavo Marketing Website Privacy Notice

Effective date: 30 September 2026 · Last updated: 30 September 2026 · Applies to the public marketing/landing website only

Important: This notice applies only to the Estavo public marketing website and its enquiry/contact forms. It does not govern the Estavo Platform or the personal information processed by an estate through the Platform. Platform processing is governed by the separate Estavo Legal & POPIA Pack and applicable estate agreements.

1. Who we are

ESTAVO (Pty) Ltd (formerly registered as K2026782598 (South Africa) (Pty) Ltd)
A registered private company (Pty) Ltd incorporated in the Republic of South Africa under the Companies Act 71 of 2008.
Registration number: 2026/782598/07 (Statutory incorporation deeds / CoR 15.1A filed with CIPC)
Location: Based in Pretoria, South Africa
Founder & Owner: Bryson Mabilo
Information Officer: Lethabo Shaun-Bryson Mabilo (commonly known as Bryson)
Information Officer registration: 2026-068113
Privacy contact: privacy@estavo.co.za

ESTAVO is the current registered company name. K2026782598 (South Africa) (Pty) Ltd was the Company's former registered name.

2. What the landing page collects

The current landing page is designed to collect only information that you choose to enter into the enquiry or booking forms:

• First name
• Surname
• Email address
• Estate name
• Phone number, if you choose to provide it

The form is not intended to collect identity numbers, passwords, payment information, health information, biometric information, criminal-history information or other special personal information.

3. Why we collect it

We use the information you submit to:

• respond to your enquiry or request for information;
• understand which estate or organisation your enquiry relates to;
• communicate with you about the enquiry you initiated; and
• maintain necessary business records relating to that enquiry.

We do not use these submitted details for advertising or a general marketing mailing list under the current website setup.

4. Marketing

ESTAVO does not currently run direct marketing from the landing page.

Submitting the enquiry form does not, by itself, subscribe you to a marketing list. We do not sell your personal information or provide it to third parties for their own direct-marketing purposes.

If ESTAVO introduces direct marketing in future, the applicable POPIA requirements will be assessed and the website notice and collection process will be updated where necessary before the new processing is activated.

5. How the information is collected

The information is collected directly from you when you enter and submit the form.

The landing page is configured so that its actual collection practices match this notice. If analytics, advertising pixels, behavioural tracking, additional cookies, automated profiling or other automatic collection is introduced, this notice must be reviewed and updated before that processing begins.

6. Sharing and service providers

ESTAVO does not sell the information submitted through the landing page.

Where a service provider is technically required to host, transmit, secure or process the form submission, ESTAVO may make the information available to that provider only to the extent necessary for the relevant service and subject to appropriate contractual and legal controls.

Where personal information is processed outside South Africa, ESTAVO will assess and document the applicable POPIA requirements governing the transfer before that processing is relied upon.

7. Security

ESTAVO uses appropriate technical and organisational measures intended to protect personal information against loss, damage, unauthorised access and unlawful processing. Access to submitted enquiries is restricted to persons who need it for the stated purposes.

No security method is completely risk-free. ESTAVO maintains an internal incident-response process for suspected personal-information compromises.

8. Retention

ESTAVO keeps landing-page enquiry information only for as long as reasonably necessary to respond to the enquiry, manage any resulting business relationship, maintain appropriate business records, or comply with a legal obligation.

Where the information is no longer required, ESTAVO will delete, destroy or de-identify it in accordance with its applicable retention and deletion procedures, subject to lawful retention requirements.

9. Your rights

Subject to the conditions and limitations in applicable law, you may request:

• confirmation of whether ESTAVO holds personal information about you;
• access to personal information held about you;
• correction or deletion of inaccurate, irrelevant, excessive, outdated, incomplete, misleading or unlawfully obtained information; and
• to object to processing where POPIA gives you that right.

You may also withdraw consent where consent is the lawful basis for a particular processing activity, subject to applicable law and any consequences of withdrawal.

10. How to contact us

For a privacy request, correction/deletion request, objection or privacy question, contact:

Information Officer: Lethabo Shaun-Bryson Mabilo
Email: privacy@estavo.co.za

Please do not send passwords, identity documents or other unnecessary sensitive information by ordinary email unless ESTAVO specifically requests a secure submission method.

11. Complaints

You may raise a complaint with ESTAVO first using privacy@estavo.co.za. You also have the right to lodge a complaint with the South African Information Regulator through its current official channels:

Information Regulator: https://inforegulator.org.za/

12. Changes to this notice

ESTAVO may update this notice when the landing page, collection practices, legal requirements or business processes change. The effective date shown at the top will be updated when a material revision is published.

13. Legal basis and source framework

ESTAVO processes information submitted through the landing page in accordance with the applicable lawful-processing requirements of POPIA (Protection of Personal Information Act 4 of 2013), including the conditions relating to accountability, processing limitation, purpose specification, further processing, information quality, openness, security safeguards and data-subject participation.