Skip to content
September 23, 2026

Landlord Records Without Leaking Tenant IDs

Landlord Records Without Leaking Tenant IDs

A student house runs on names, rooms, phone numbers and dates. It does not need identity numbers in every caption. ManjeProp’s PropertyCare desk is built so you can run tickets, meters, bookings and invoices without scattering ID documents through notes, URLs and exports.

This is an operations habit, not a lecture on statutes. POPIA still applies to what you keep. The safest record is the thinnest one that still lets you find the room.

What you actually need on a working row

For a ticket: property, unit, category, urgency, a phone that rings, a description, photos of the fault.

For a booking: unit, dates, a contact name, a phone, a status.

For a utility reading: meter, date, digits, a photo of the dial.

For an invoice: the person who must pay, the lines, the bank reference when it is paid.

None of those fields require a copy of a smart ID, a passport page or a student card number pasted into the notes. If a lease file must hold an identity document, that file lives in a controlled place with a retention rule. It does not live in a ticket comment so that “staff can see who it is.”

Where IDs leak without anyone meaning to

  • Photo of a fault that also shows an ID book on the desk
  • Meter photo with a lease first page in the same upload
  • WhatsApp export dropped onto a shared drive
  • Owner CSV emailed to a personal Gmail
  • UTM tags on a public link that include a name, a unit or a phone
  • Filenames like Thabo-ID-Room4.jpg
  • AI or OCR fields into which someone pasted a whole onboarding pack

If a key, an ID or a meter photo was published on the public site, treat it as an incident: unpublish, keep the evidence, tell the person who acts as Information Officer.

Naming that still works

Use the property name the site already uses, the unit label, and the booking or ticket reference. “16 Saunders, Room 2, TCK-1042” will get a plumber to the door. “ID 900101…” will get you a complaint.

Staff notes should read like a handover, not a dossier: “Mother will attend viewing Saturday. Use the number on the enquiry.” When someone leaves, you remove their login. You keep the business record. You do not keep their identity number in the repair history “for next time.”

Exports and URLs

Owner reports can include personal data. Encrypt them. Do not drop them into a WhatsApp group with contractors. Export nothing to a shared drive that contains phones, IDs or banking.

Never put a tenant name, unit number, phone or meter number in a tracking tag. Marketing links, if you ever switch Build Resources on, sit on care notes, not on a tenant record.

The public site should not expose /manage/ data. Listings show a room, a price the owner stands behind, and an enquiry form. They do not show who lived there last.

Contractors and access

Send a contractor the address, the unit, the fault reference and a meeting time. If they need ID to enter an estate, that is a gate rule for the visit, not a reason to file a scan on the repair. Do not text a photo of the tenant’s ID “so security knows the face.”

Keys are numbered and logged. They are not photographed next to a name and posted to a story.

What tenants can do

When you upload to Report a fault, photograph the leak, not your documents. We already ask for your name and a WhatsApp number. That is enough to call you back. If a staff member ever asks you to send an ID on the fault form, ask them to use the proper onboarding channel instead.

Parents sending an enquiry for a Durban room should use properties. Do not attach a child’s ID to a first message about availability.

A monthly sweep

Once a month, scan Notes and ticket comments for identity data that does not belong. Remove it from the operational record. If you needed it for the lease, confirm it is in the lease file, not in six other places.

The honest path to later bookkeeping tools is the same habit: clean operational data, no names in URLs, invoices marked paid from the bank, repairs costed as operations. You do not get to a tidy Sage or Xero conversation by hiding ID numbers in every caption.

If a record is wrong or a photo went to the wrong place, phone +27 60 313 6961. If something in the house is broken, send the fault, not your documents.