This is the plain-language version. It covers the same facts as the Privacy Policy in fewer words.
It is a summary, not a separate agreement. If anything here reads differently from the Privacy Policy, the Privacy Policy is the one that counts.
Who actually has your stuff
Three parties, and it is worth knowing which is which:
The managing agent runs the residence you applied to. They decide whether you get a bed. Your application is theirs — they are accountable for it, and they are who you contact about it.
The landlord owns the building and receives your details in connection with your accommodation.
Resitec built and hosts the platform the managing agent uses. We store your information for them. We do not decide your application, we do not use your information for our own purposes, and we never show it to a different residence.
What happens to your ID document and data
You upload it so the managing agent can confirm you are who you say you are — accommodation is allocated against a verified person, not a name typed into a form.
It is not published anywhere. It is not publicly reachable. Only the managing agent for the residence you applied to, and the landlord of that residence, can see it. Another residence’s agent cannot.
We keep personal data only for as long as we need it for the reason it was collected — including any legal, accounting, or reporting duties that apply.
How long that is depends on what the data is, how sensitive it is, the risk if it were misused, what we need it for, whether the law requires us to keep it, and whether we can do the same job another way.
We may strip data of anything that identifies you and keep that anonymised version for research or statistics, indefinitely, without further notice.
What we track when you’re just browsing
We count page views and clicks so we can tell which listings are working. That’s it.
We don’t know who you are while you browse. No cookie, nothing stored on your device, and your IP address is not kept — it gets shortened and scrambled into a key that changes daily, purely so one person refreshing twice isn’t counted as two. It cannot be turned back into you.
If you press Accept on the cookie banner, Google Analytics runs too, and that one does use cookies. Press Decline and it doesn’t load at all. The site works either way — declining costs you nothing.
Changing your mind
You can ask to see what’s held about you, have it corrected, have it deleted, or object to it being used at all. You can withdraw consent whenever you like, though during a live application that means it can’t go any further.
For anything about your application, contact the managing agent’s Information Officer — shown on the form before you submit. For anything about browsing or cookies, contact Resitec:
Resitec (Pty) Ltd
42 Barrage Road, Vanderbijlpark, 1912
Email address: dataprotection@resitec.cloud
You’re free to lodge a complaint with the South African Information Regulator, or any relevant European Information Regulator, whenever you like. We’d rather hear from you first though — give us a chance to sort it out before you go to a regulator.
Information Regulator (South Africa) — complaints.IR@justice.gov.za — inforegulator.org.za
The longer version
Everything above, in full, with the section references: Privacy Policy.