We are committed to protecting the privacy of every individual and organisation with whom we interact. We recognise our responsibility to ensure that Personal Information is handled lawfully, transparently, and with appropriate care.
This Privacy Policy (‘’Policy’’) explains how Gumtree collects, uses, shares, and protects Personal Information in accordance with POPIA.
This Policy applies to:
2.1 ‘’Applicable Law’’ means all South African laws, regulations, directives, codes of practice, and regulatory instruments governing Gumtree;
2.2 “Buyer” means a User who makes use of the Services to acquire and purchase certain Goods and Services made available by Sellers;
2.3 “Child” means a natural person under the age of 18 (eighteen) years old (including the plural “Children”);
2.4 “Consent” means any voluntary, specific and informed expression of will, in terms of which permission is given for the Processing of Personal Information as contemplated in Applicable Law;
2.5 “Cookies” means small text files and similar technologies placed on your device when you use the Platform. They help enable core functionality, enhance security, analyse Platform usage, and support the delivery of relevant content and communications in accordance with this Policy and Applicable Law;
2.6 “Electronic Communications” means communications sent via electronic channels, including but not limited to email, SMS, WhatsApp, in-app messages, push notifications, or similar digital communication methods;
2.7 “Financial Information” means the information provided for payment, billing, or debit order purposes in connection with the Services or paid features made available through the Platform, which may include bank name, account holder name, account type, branch code, payment references, and limited transaction information where required. Financial Information does not include full banking credentials beyond what is reasonably necessary for authorised payment processing;
2.8 “Goods and Services” means any products, items, or services listed, advertised, or otherwise made available by Users through the Platform;
2.9 “Gumtree” means Gumtree South Africa Proprietary Limited situated at 10th Floor Roggebaai Place, 4 Jetty Street, Foreshore, Cape Town, Republic of South Africa, (also referred to as “we”, “us” or “our”);
2.10 “Gumtree Account” means a User account that enables access to certain features of the Platform. Users may browse the Platform without creating an account; however, a Gumtree Account is required in order to post listings or access certain Services.
Certain Services may require a Verified Account, which is a Gumtree Account that has undergone a verification process;
2.11 “Operator” means a person or entity that Processes Personal Information on behalf of Gumtree and strictly in accordance with Gumtree’s documented instructions, in order to support the operation, maintenance, security, analytics, functionality, or improvement of the Platform and Services, as contemplated in POPIA;
2.12 “Personalisation” means the tailoring of content, recommendations, advertisements, or communications based on User behaviour, preferences, interactions, or inferred interests;
2.13 “Personal Information’’ means information as generally described in section 1 of POPIA. For the purposes of this Policy, Personal Information includes, but is not limited to, a person’s name, contact details, identification number, demographic information, residential address, Financial Information, communication preferences, and any other information that can reasonably be used to identify that person or that relates to their interaction with Gumtree;
2.14 “Platform” means the Website and mobile application operated by Gumtree through which Users may post listings, advertise Goods and Services, communicate with one another, engage in marketplace interactions, and access the Services made available by Gumtree;
2.15 ‘’POPIA’’ means the Protection of Personal Information Act, No. 4 of 2013 and the regulations thereto, as amended from time to time;
2.16.2 dissemination by means of transmission, distribution or making available in any other form by; or
2.16.3 merging, linking, blocking, degradation, erasure or destruction.
2.16.4 For the purposes of this definition, "Process" has a corresponding meaning.
2.17 “Responsible Party” means a public or private body or any other person which alone or in conjunction with others, determines the purpose of and means for Processing Personal Information;
2.18 “Seller” means a User who lists, advertises, or otherwise makes Goods and Services available through the Platform;
2.19 “Services” means the digital marketplace services and related functionality made available by Gumtree through the Platform, including enabling Users to:
2.19.1 post and view listings;
2.19.2 communicate with one another;
2.19.3 promote Goods and Services;
2.19.4 transact and conclude independent agreements;
2.19.5 arrange payment, delivery, insurance or related services through approved Third Party Providers;
2.19.6 manage and facilitate refunds, returns, and dispute resolution processes between Buyers and Sellers; and
2.19.7 access additional features, products, promotions, or services provided by Third Party Providers through or in connection with the Platform;
2.20 ‘’Special Personal Information’’ means Personal Information as defined in section 26 of POPIA including information relating to a person’s race or ethnic origin, religious or philosophical beliefs, political persuasion, trade union membership, health, sex life, biometric information, or criminal behaviour;
2.21 ‘’Third Party Provider’’ means an independent external entity that provides its own products or services through or in connection with the Platform and that determines the purposes and means of Processing Personal Information in relation to those products or services;
2.22 “User” means any person who accesses or uses the Platform or Services, whether as a visitor, registered account holder, Buyer, or Seller;
2.23 “Verified Account” means a User account where certain information provided by the User has been checked and confirmed by Gumtree in accordance with its verification process. Verification relates only to the specific information checked and does not constitute an endorsement or guarantee of the User;
2.24 “Website” means Gumtree’s main website found at https://www.gumtree.co.za/;
2.25 “you” and/ or “your” means any individual who accesses, browses, registers for, posts listings on, responds to listings on, communicates through, or otherwise interacts with the Platform and whose Personal Information is Processed in accordance with this Policy.
3.1.1 Gumtree collects and Processes only the Personal Information that is reasonably necessary to operate and administer the Platform, enable Users to post, browse, and respond to listings, communicate with one another, receive support, and receive relevant service-related or marketing communications.
3.1.2 Personal Information may also be Processed for related and compatible purposes, including Personalisation of content and Electronic Communications, where permitted by Applicable Law.
Gumtree Processes Personal Information only to the extent that it is adequate, relevant, and not excessive for the specific purpose for which it is collected, or for a purpose that is compatible with the original purpose, as contemplated in POPIA.
Category | Examples of Personal Information |
Identity | Full name, username or profile name, and where required for verification or account integrity, date of birth or limited identification information. |
Contact details | Email address, mobile number, alternative contact number, or other contact details provided when registering, responding to listings, making enquiries, or receiving Electronic Communications. |
Address details | Residential and/or postal address, where provided by you or required for listing purposes, verification, delivery, billing, dispute resolution, or support. |
Business or organisation-related information (where applicable) | Company name, business contact details or listing information. |
Financial Information (where applicable) | Payment-related information required when you pay for certain Gumtree features or Services, including limited billing details, transaction references, payment status information, and records relating to fees paid to Gumtree. Payment Processing may be carried out by authorised payment service providers appointed by Gumtree as Operators. |
Account and profile information | Account credentials, profile settings, preferences, listing history, saved searches, and User-generated content associated with your Gumtree Account. |
Listing and transaction-related information | Information you provide when posting an advert, replying to an advert, communicating with other Users, or engaging in transaction-based interactions on the Platform, including transaction-related content and records. |
Interaction and engagement history | Records of your interaction with the Platform and engagement with listings, content, and Gumtree communications, including listings viewed, searches performed, enquiries made, responses received, and limited engagement events relevant to the delivery and improvement of communications and services. |
Marketing and communication data | Records relating to Electronic Communications sent to or received by you, including delivery status, engagement information such as opens, clicks, bounces, unsubscribe actions, and your communication preferences and opt-out status. |
Behavioural and inferred information | Information derived from your interaction with the Platform and with Gumtree communications, such as general engagement preferences, response patterns, and content interaction history, used to improve the relevance of content and communications in accordance with Applicable Law. |
Credit-related and enrichment information (where applicable) | Information obtained from authorised credit information providers or similar lawful sources to update, verify, or enhance existing User data, including credit profile indicators or eligibility-related attributes used for analytics, segmentation, or identification of Users who may be eligible for certain services offered by Third Party Providers. |
Technical and device information (limited) | IP address, device type, browser type, operating system, timestamps, log data, and similar technical information required for security, fraud prevention, Platform stability, analytics, and auditability. |
Location information (where enabled) | General location information derived from device settings, IP address, or similar technologies, where you have enabled location services or permitted such Processing through your device or browser settings. |
Support and correspondence records | Records of communications with Gumtree support teams, including emails, messages, call records, and issue resolution history. |
3.6.1 Gumtree uses Cookies and similar technologies to support the operation of the Platform, enhance functionality, analyse usage, and deliver relevant content and Electronic Communications.
3.6.2 Cookies may be used to:
3.6.2.1 enable core Platform features and security;
3.6.2.2 remember User preferences and settings;
3.6.2.3 analyse how Users interact with the Platform; and
3.6.2.4 support marketing and Personalisation activities, where permitted.
3.6.3 Some Cookies are placed by Gumtree, while others may be placed by authorised Operators acting on Gumtree’s behalf.
3.6.4 You can manage or disable Cookies through your browser or device settings. Further information about the Cookies we use, their purposes, and how you can control them will be made available in Gumtree’s Cookie Policy on the Platform.
Purpose | Description and Lawful Basis |
Platform operation and administration | To operate, maintain, and administer the Platform, including User registration, account management, listing functionality, and Platform security. |
Listings, enquiries, and User interactions | To enable Users to post adverts, browse listings, respond to adverts, communicate with other Users, and manage transaction-related interactions on the Platform. |
User communications and support | To communicate with Users regarding their accounts, listings, enquiries, support requests, complaints, and Platform-related updates. |
Service-related communications | To send administrative, transactional, or service-related Electronic Communications, including confirmations, notices, changes to Gumtree Services, and important Platform information. |
Marketing and promotional communications | To send marketing or promotional Electronic Communications relating to Gumtree services, features, promotions, or content, where permitted by Applicable Law and subject to available opt-out mechanisms, including unsubscribe functionality in communications and account preference management where available. |
Personalisation and relevance | To personalise content, listings, advertisements, and communications based on a User’s interactions with the Platform and Gumtree communications, in order to improve relevance and user experience, in accordance with Applicable Law. Where information from authorised third-party sources is used, Gumtree will do so only for lawful, specific, and defined purposes. |
Analytics and Platform improvement | To analyse usage patterns, engagement trends, and Platform performance to improve functionality, User experience, and Service offerings. |
Data enrichment and eligibility identification | To update and enhance Personal Information using authorised third-party data sources, including credit information providers, to improve data accuracy, support analytics, and identify Users who may be eligible for certain Third Party Provider services. This enrichment may be performed by Gumtree or by Operators acting on Gumtree’s instructions. Any such Processing will only be undertaken where Gumtree has identified an appropriate lawful basis, implemented appropriate safeguards, and ensured that the relevant purpose is adequately disclosed and permitted under Applicable Law. |
Fraud prevention and security | To detect, prevent, and investigate fraud, misuse, security incidents, and other unlawful or harmful activities, and to protect the integrity of the Platform. |
Compliance and legal obligations | To comply with Applicable Law, regulations, codes of conduct, lawful requests from authorities, and to exercise or defend legal rights. |
4.2.1 Gumtree Processes Personal Information on one or more lawful grounds recognised under POPIA, depending on the nature of the interaction.
Lawful Basis | Description |
Contractual necessity | Processing necessary to perform a contract with you or to take steps at your request before entering into a contract. |
Legal obligation | Processing required to comply with Applicable Law or regulatory requirements.
|
Legitimate interests | Processing necessary for Gumtree’s legitimate business interests, provided that such interests are not overridden by your rights and freedoms. |
4.2.2 You may object to Processing based on legitimate interest, including Processing for Direct Marketing purposes, at any time.
4.3.1 You may object to or opt out of marketing communications at any time by using the unsubscribe mechanism included in the communication or, where available, by updating your account preferences on the Platform.
4.3.2 Service-related, transactional, legal, security, or account-operation communications that are necessary for the operation of your account or the provision of services are not subject to marketing opt-out.
4.3.3 Gumtree does not sell Personal Information to third parties for their own marketing purposes, and any Processing for marketing or Personalisation is limited to what is reasonably necessary to achieve the intended purpose.
5.2.1 Gumtree appoints Operators, to support the operation, maintenance, security, analytics, functionality, and improvement of the Platform and Services.
5.2.2 Our Operators Process Personal Information only on Gumtree’s documented instructions and solely for the purposes determined by Gumtree. Operators are contractually prohibited from using Personal Information for their own independent purposes and may Process such information only for the limited purposes authorised by Gumtree.
5.2.3 Our Operators may, with our authorisation, make use of further sub-processors to support the delivery of their services. In such cases, appropriate contractual safeguards are in place to ensure continued protection of Personal Information.
5.2.4 Gumtree enters into written agreements with Operators requiring appropriate confidentiality, security, and data protection safeguards in accordance with POPIA.
Category of Operator | Purpose of Processing |
Technology and hosting service providers | To host the Platform, store data securely, provide infrastructure, and ensure Platform availability and performance. |
Analytics and performance service providers | To analyse usage, engagement trends, and performance metrics in order to improve functionality, security, and User experience. |
Marketing and communication service providers | To support the delivery of Electronic Communications, including transactional, service-related messages and marketing or promotional communications, (where permitted by Applicable Law). |
Customer support and operational service providers | To assist with customer support, issue resolution, quality assurance, and operational efficiency. |
Payment and billing service providers (where applicable) | To Process payments for paid features or Services offered by Gumtree, manage billing, and maintain transaction records. |
5.4.1 Gumtree may share Personal Information with Third Party Providers where necessary to enable Users to access Services offered by those providers through or in connection with the Platform.
5.4.2 Gumtree may share limited Personal Information with registered credit information providers for the purposes of data verification, enrichment, or eligibility identification, where permitted under Applicable Law.
5.4.3 In such cases, the Third Party Provider acts as an independent Responsible Party, determines the purposes and means of its own Processing, and processes Personal Information in accordance with its own privacy policies and Applicable Law.
5.6.1 Some Operators or Third Party Providers may be located outside of South Africa or may Process Personal Information in other jurisdictions.
5.6.2 Where Personal Information is transferred outside South Africa, including to Operators or Third Party Providers located in other jurisdictions, Gumtree ensures that such transfers are subject to appropriate safeguards that provide a level of protection substantially similar to that required under POPIA. Such safeguards may include:
5.6.2.1 written data protection agreements incorporating contractual data protection clauses;
5.6.2.2 binding confidentiality and security obligations;
5.6.2.3 risk-based assessments of the recipient and processing environment; and
5.6.2.4 implementation of appropriate technical and organisational security measures.
5.6.3 Where applicable, cross-border transfers may also be governed by contractual safeguards aligned with internationally recognised data protection standards.
If Gumtree is involved in a merger, acquisition, restructuring, sale of assets, or similar corporate transaction, Personal Information may be shared with relevant third parties as part of that process, subject to appropriate confidentiality and data protection safeguards.
6.1.1 Gumtree retains Personal Information only for as long as is reasonably necessary to fulfil the purposes for which it was collected or subsequently processed, and to comply with applicable legal, regulatory, audit, or operational requirements.
6.1.2 Retention periods are determined with reference to:
6.1.2.1 the nature and purpose of the Personal Information;
6.1.2.2 the duration of your relationship or interaction with the Platform;
6.1.2.3 applicable legal or regulatory obligations; and
6.1.2.4 Gumtree’s legitimate operational and risk management requirements.
6.1.3 Where Personal Information is no longer required for a lawful purpose, Gumtree securely deletes or de-identifies it so that it can no longer be used to identify you.
6.2.1 Gumtree implements appropriate technical and organisational measures to protect Personal Information against loss, misuse, unauthorised access, disclosure, alteration, or destruction, as required by POPIA.
6.2.2 These measures may include:
6.2.2.1 access controls and role-based permissions;
6.2.2.2 secure hosting and storage environments;
6.2.2.3 encryption and secure transmission protocols, where appropriate;
6.2.2.4 monitoring, logging, and audit controls;
6.2.2.5 staff confidentiality obligations and training; and
6.2.2.6 contractual data protection obligations imposed on Operators and Third Party Providers.
6.2.3 While Gumtree takes reasonable steps to protect Personal Information, no method of transmission or storage is completely secure. Gumtree therefore cannot guarantee absolute security but remains committed to maintaining appropriate safeguards and responding promptly to any identified security risks.
6.2.4 In the event of a security compromise that is reasonably believed to have resulted in the unauthorised access to or acquisition of Personal Information, Gumtree will take appropriate steps to assess and contain the incident and will notify affected individuals and the Information Regulator of South Africa, where required by POPIA.
6.3.1 Where Personal Information is processed by Operators on Gumtree’s behalf, Gumtree takes reasonable steps to ensure that such Operators implement appropriate technical and organisational security safeguards and Process Personal Information only in accordance with Gumtree’s documented instructions and Applicable Law.
6.3.2 Where Personal Information is shared with Third Party Providers acting as independent Responsible Parties, Gumtree takes reasonable steps to ensure that such sharing is subject to appropriate contractual and security safeguards. Once Personal Information has been lawfully shared with a Third-Party Provider in its independent capacity, that Third-Party Provider is responsible for Processing such Personal Information in accordance with its own privacy practices and applicable law.
7.1 The Platform and Services are not intended for use by Children.
7.2 Gumtree does not knowingly collect or Process Personal Information relating to Children, without appropriate authority or Consent as required by Applicable Law.
7.3 If a parent, guardian, or other responsible person believes that a Child has provided Personal Information to Gumtree without the necessary Consent, they may contact us using the details set out in this Policy. Gumtree will take reasonable steps to investigate and, where appropriate, delete such Personal Information.
8.1.1 You have certain rights in relation to your Personal Information under Applicable Law. The manner in which a request is addressed may depend on the nature of the information, the purpose for which it is processed, and any applicable legal or regulatory obligations.
8.1.2 Subject to Applicable Law, your rights include the right to:
8.1.2.1 request access to the Personal Information we hold about you;
8.1.2.2 request information about how and with whom your Personal Information has been shared;
8.1.2.3 request the correction, update, or deletion of Personal Information that is inaccurate, incomplete, or no longer relevant, where no lawful ground requires us to retain it;
8.1.2.4 object to the Processing of your Personal Information in certain circumstances;
8.1.2.5 lodge a complaint with us or, where applicable, with the relevant regulatory authority regarding our Processing of your Personal Information; and
8.1.2.6 object to the use of your Personal Information for direct marketing purposes or withdraw any marketing-related Consent at any time, without affecting other lawful Processing.
8.2.1 You may exercise your rights by submitting a request to Gumtree using the contact details set out in clause 9. Requests should be made in writing and include sufficient information to allow Gumtree to verify your identity and understand the nature of your request.
8.2.2 Gumtree will consider and respond to requests within a reasonable time and in accordance with POPIA. In certain circumstances, Gumtree may request additional information or decline a request where permitted by Applicable Law.
8.3.1 In addition to the rights described above under POPIA, you may request access to certain records held by Gumtree in accordance with the Promotion of Access to Information Act, No.2 of 2000 (“PAIA”).
8.3.2 Requests made under PAIA are subject to the procedures, requirements, and grounds for refusal set out in PAIA and may attract a prescribed fee.
8.3.3 Further information on how to submit a PAIA request, including the prescribed forms and applicable fees, is set out in Gumtree’s PAIA Manual, accessible here: PAIA Manual.
8.4.1 You have the right to object to the Processing of your Personal Information for direct marketing purposes at any time.
8.4.2 Where you receive marketing or promotional Electronic Communications from Gumtree, you may opt out by using the unsubscribe or opt-out mechanism provided in the communication, adjusting your account preferences where available, or contacting Gumtree directly.
8.4.3 Opting out of marketing communications will not affect service-related or administrative communications that are necessary to operate your account or provide Services to you.
Name of Private Body: | Gumtree South Africa Proprietary Limited |
Information Officer Email address: | |
Physical address: | 10th Floor, Roggebaai Place, 4 Jetty Street, Foreshore, Cape Town, Republic of South Africa |
Name of Body: | Information Regulator South Africa |
Phone number: | 010 023 5200 |
Website: | |
General enquiries: | |
POPIA Complaints: |
10.1 Gumtree may update this Policy from time to time to reflect changes to our practices, Services, legal requirements, or operational needs.
10.2 Where changes are material, Gumtree will take reasonable steps to bring the updated Policy to your attention, including by publishing the revised version on the Platform or through other appropriate communication channels.
10.3 The most current version of this Policy will always be available on the Platform, and continued use of the Platform after an update will be subject to the revised Policy, to the extent permitted by Applicable Law.