Privacy Policy

This Privacy Policy explains how IronYard ("IronYard", "we", "us", "our") collects, uses, shares and protects your personal information when you use the IronYard website, marketplace and related services (the "Platform"). IronYard operates from Johannesburg, South Africa, and is committed to handling personal information in line with the Protection of Personal Information Act, 2013 (POPIA).

1. Who we are

IronYard is a heavy equipment marketplace and brokerage based in Johannesburg. The responsible party for the processing of your personal information under POPIA is IronYard.

Contact: gary.baker@ironyardmail.co.za · WhatsApp: +27 83 356 5855

2. Information we collect

• Account information: name, email, phone number, WhatsApp number, password (hashed), role (buyer, seller, dealer), and team membership.
• Business information (dealers/sellers): company name, registration number, VAT number, website, physical address, areas served and verification documents (CIPC, director ID, proof of address).
• Listing information: machine details, photos, pricing, source/cost information (kept private), and stock history.
• Transactional information: enquiries, leads, quotes, finance applications, communications (email, WhatsApp, calls logged in the CRM), and deal progress.
• Usage information: pages visited, searches, favourites, device/browser data, IP address, and analytics events.
• Marketing preferences: opt-ins for notifications, newsletters and outbound campaigns.

3. How we use your information

• Provide and operate the Platform, including authentication, listings, search and the deal engine.
• Facilitate enquiries, quotes, finance applications and brokerage between buyers, sellers and dealers.
• Verify dealers and sellers and prevent fraud.
• Send transactional emails and WhatsApp messages related to your account, listings, enquiries and deals.
• Send marketing communications where you have opted in (you can opt out at any time).
• Improve the Platform, including AI features (semantic search, listing assistant, lead scoring, shortlist ranking).
• Comply with legal, accounting and regulatory obligations.

4. Legal basis for processing

We process personal information on the basis of (a) your consent, (b) the performance of a contract with you, (c) compliance with a legal obligation, (d) the protection of a legitimate interest, and (e) the pursuit of IronYard's legitimate interests in operating and improving the Platform.

5. Sharing of personal information

• Sellers and dealers may receive limited buyer contact details when a buyer enquires on their listing, strictly to facilitate that transaction.
• Buyers see public seller/dealer information attached to a listing (company name, location, verification status). Raw private buyer details are hidden from standard dealers and CRM users.
• Service providers who help us run the Platform (hosting, database, email delivery, WhatsApp messaging, analytics, AI providers, payment and finance partners). These providers are bound by confidentiality and data-protection obligations.
• Regulators and law enforcement where required by law.

We do not sell your personal information.

6. Cross-border transfers

Some of our service providers may process information outside South Africa. Where this happens, we rely on providers that offer adequate protections consistent with POPIA.

7. Retention

We keep personal information for as long as your account is active and for as long as required to meet our legal, accounting and brokerage record-keeping obligations. When you close your account, associated listings are archived and personal data is removed or anonymised, except where retention is required by law.

8. Security

We apply reasonable technical and organisational measures to protect personal information, including encrypted connections, role-based access control, row-level security on our database, and audit logs. No system is perfectly secure — please use a strong password and keep your credentials private.

9. Your rights

Subject to POPIA, you have the right to:

• Access the personal information we hold about you.
• Request correction or deletion of inaccurate or outdated information.
• Object to processing or withdraw consent for marketing.
• Lodge a complaint with the Information Regulator of South Africa.

To exercise any of these rights, contact gary.baker@ironyardmail.co.za.

10. Cookies and analytics

We use cookies and similar technologies to keep you logged in, remember preferences, measure performance and improve the Platform. You can control cookies through your browser settings.

11. Children

The Platform is intended for users aged 18 and over. We do not knowingly collect personal information from children.

12. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be posted here with an updated "Last updated" date. Continued use of the Platform after the update means you accept the revised policy.

13. Contact us

IronYard, Johannesburg, South Africa.
Email: gary.baker@ironyardmail.co.za
WhatsApp: +27 83 356 5855

See also our Terms & Conditions and the Dealer Brokerage Agreement.