Last updated: September 2026
Iconic Real Estate Agency ("we", "us", "our") operates this website to market properties and provide estate agency, property management, and valuation services in Malawi. This policy explains what information we collect through the site, how we use it, and who we share it with.
1. Information We Collect
We only collect information you actively provide through the site. Depending on how you use it, this may include:
- Contact form: first name, last name, email address, phone or WhatsApp number (optional), enquiry type, and your message.
- Account registration (sign up): full name, email address, and password. If you choose "Sign in with Google" instead, we receive your name, email address, and profile photo from Google.
- Client dashboard: phone number, city, and a profile photo if you choose to upload one, along with a record of properties you save and enquiries you submit while signed in.
- General browsing: pages viewed and basic technical information such as browser type, used only to keep the site running correctly. We do not run third-party analytics or advertising trackers on this site.
2. How We Use Your Information
We use the information above to:
- Respond to enquiries about buying, renting, selling, managing, or valuing property.
- Create and maintain your account, and keep your saved properties and enquiry history in sync when you log in from a different device.
- Contact you by email, phone, or WhatsApp regarding an enquiry you've raised.
- Keep the site secure and prevent automated or bot form submissions.
We do not sell your information, and we do not use it for advertising.
3. Third-Party Services We Use
To run account sign-in, storage, and security features, we rely on the following third-party providers. Each receives only the information necessary for its function:
- Google Firebase (Authentication & Firestore database): stores your account credentials, profile details, saved properties, and enquiries. If you sign in with Google, Firebase handles that exchange directly with your Google account.
- Google reCAPTCHA / Firebase App Check: runs quietly in the background on our forms to confirm submissions come from real visitors rather than automated bots. It does not collect personal details beyond standard bot-detection signals.
- Cloudinary: hosts the property photos displayed on the site. This only involves listing images uploaded by our team, not personal visitor data.
These providers process data under their own privacy policies and security practices, in addition to this one.
4. Cookies & Local Storage
This site uses your browser's local storage, not tracking cookies, to keep a few specific things on your own device:
- A local copy of enquiries and valuation requests you've submitted, so your dashboard loads instantly while it finishes syncing with our database.
- Timestamps of recent form submissions, used only to prevent spam and repeated automated submissions.
- A property you were enquiring about, held briefly if you're redirected to sign in partway through, so you're returned to the same enquiry afterward.
This data stays in your browser. It is not sold or shared with advertisers, and it is not used for tracking or analytics.
5. Data Storage & Security
Account and enquiry data is stored in Firebase, on Google Cloud infrastructure, with access rules restricting who can read or write it. Your own account data is visible only to you and to our admin team, and admin access itself requires a verified admin role, not just a login.
No method of transmission or storage is 100% secure, but we take reasonable, industry-standard steps to protect your information from unauthorized access.
6. Your Rights & Choices
You can:
- Update your profile details (name, phone, city, photo) at any time from your dashboard.
- Remove saved properties or view and manage your enquiries from your dashboard.
- Request that we delete your account and associated data by contacting us directly (see below).
7. Children's Privacy
This site is intended for adults seeking property services and is not directed at children. We do not knowingly collect information from children.
8. Changes to This Policy
We may update this policy as the site's features change. The "Last updated" date at the top of this page reflects the most recent revision.
If you have questions about this policy, or want to exercise any of the rights above, reach us at: