POPIA Compliant

Privacy Policy

Learn how Maverick & Max safeguards your personal information and respects your privacy rights under South Africa's Protection of Personal Information Act (POPIA).

Last updated: July 14, 2026 Reading time: 6 mins

1. Introduction

Welcome to the Privacy Policy for Maverick & Max (the "Service", "we", "us", or "our"), a registered South African property services business. We are committed to protecting and respecting your privacy while handling your personal information.

This Privacy Policy explains how we collect, process, secure, and disclose your personal information in accordance with the Protection of Personal Information Act, No. 4 of 2013 ("POPIA"). This policy applies to our client service portals, accompanying mobile software, and all property management applications.

Responsible Party: Under POPIA, Maverick & Max is designated as the "Responsible Party," meaning we determine the purpose and means of processing your personal information.

2. Information We Collect

We limit the collection of personal information to what is strictly necessary to register your account, manage your properties, and deliver our Service. We collect:

Contact Information

Your full name, email address, and mobile phone number.

Account Credentials

Your username and encrypted password used to secure your access to our portals.

We do not collect sensitive personal information (such as racial origin, health status, political opinions, or religious beliefs) unless required by law.

3. Purpose of Processing

In compliance with Condition 3 of POPIA (Purpose Specification), your personal information is processed solely for the following lawful reasons:

  • Account Provision: To create, manage, and authenticate your user account for the Maverick & Max platform and mobile app.
  • Property Operations: To deliver rental management, commercial property management, and sectional title administrative features.
  • Communication: To send service updates, rent notifications, body corporate notices, and direct support responses.
  • Compliance: To satisfy tax, accounting, or statutory legal obligations in South Africa, including Estate Agency Affairs Board requirements.

4. Storage & Firebase

All user profiles, authorization metadata, and portal records are securely stored using Firebase Cloud Firestore, a cloud database service provided by Google.

Firebase host servers are located globally. By registering for our Service, you acknowledge and consent to the transfer of your data outside of South Africa. We ensure that Google Firestore implements security compliance equivalent to or exceeding POPIA requirements, specifically matching international GDPR standards.

Cross-Border Transfer: Under Section 72 of POPIA, transfer of personal information to a foreign country is permitted as Firebase guarantees an adequate level of protection through binding corporate rules and strict privacy agreements.

5. Technical Security

To comply with Condition 7 of POPIA (Security Safeguards), we implement robust technical and organizational measures to prevent unauthorized access, loss, or alteration:

Data Encryption

All data is encrypted in transit using TLS 1.3 and at rest using AES-256 bit encryption via Firebase Firestore.

Strict Security Rules

We configure server-side Firebase Security Rules to ensure users can only read and write their own authenticated data records.

Access Monitoring

System administrators only have access to records on a strict need-to-know basis, and credentials are protected by Multi-Factor Authentication (MFA).

6. Your POPIA Rights

As a data subject in South Africa, you possess statutory rights regarding how we handle your personal information. You can exercise these rights at any time:

Right of Access
You can request confirmation of whether we hold your personal information and obtain a detailed record of the specific files we store about you.
Right to Correction
You have the right to request that we correct or update any of your personal information that is inaccurate, outdated, or incomplete.
Right to Deletion
You may request that we permanently delete your account and wipe your corresponding contact info and credentials from our active database systems.
Right to Object
You may object to the processing of your personal information for direct marketing purposes at any time, which we will immediately respect.

7. Information Officer Details

If you have questions, wish to exercise any of your POPIA rights, or submit a complaint regarding how your personal information is handled, please contact our appointed Information Officer:

Name: Gary Moodley
Email: office@maverickandmax.co.za
Phone: +27 72 311 9729 / +27 31 537 8913
Address: Durban, KwaZulu-Natal, South Africa

If you feel we have not resolved your concern adequately, you have the right to lodge a complaint with the South African Information Regulator:
Website: https://inforegulator.org.za/
Email: POPIAComplaints@inforegulator.org.za