Privacy Policy

Last updated: June 2, 2025

Definitions

Data Subject

has the meaning as defined in POPIA

Information Officer

has the meaning as defined in POPIA

Information Regulator

has the meaning as defined in POPIA

Personal Information

has the meaning as defined in POPIA

POPIA

means the Protection of Personal Information Act, 4 of 2013, as amended from time to time and includes any regulations promulgated thereunder

Processing

means, as defined in POPIA, any operation or activity or any set of operations, whether or not by automatic means, concerning Personal Information, including the collection, receipt, recording, organisation, collation, storage, updating or modification, retrieval, alteration, consultation or use; dissemination by means of transmission, distribution or making available in any other form; or merging, linking, as well as restriction, degradation, erasure or destruction of information

Responsible Party

has the meaning as defined in POPIA

Special Personal Information

has the meaning as defined in POPIA

Summary

We recognise, value and are committed to protecting the privacy of Data Subjects, whose Personal Information we Process ("your" / "you") or which is Processed for or on our behalf, which Processing is related to our business activities or a Data Subject's engagement with us. This Privacy Policy is a simple, plain English summary of: - how and why we collect, hold, use, store, disclose, destroy and protect your Personal Information; - the nature of our business; - our approach to advertising, marketing and security; - the choices available to you regarding our use of your Personal Information and how you can contact us to access, update or correct your Personal Information; object to its Processing; withdraw your consent to its Processing; make a complaint or ask a question.

Introduction

When we engage with you (including as our employee/consultant or third party service provider) or supply services to you, we collect your Information on our own behalf, for those purposes as further detailed in this Privacy Policy. By engaging with us, you are indicating your acceptance of this Privacy Policy.

Information Collection and Use

We collect and process your Personal Information for the following purposes: - To facilitate the provision of services to you - To communicate with you about our services - To comply with legal obligations - To maintain and update our client databases - To detect and prevent fraud or unauthorized access - To inform you about changes to our services - For security, administrative and legal purposes

Special Personal Information

We may process Special Personal Information in certain circumstances, including: - When required for establishing, exercising or defending legal rights - With your explicit consent - Where the information has been made public by you - For compliance with legal obligations

Information Security

We implement appropriate technical and organizational measures to ensure the security of your Personal Information, including: - Secure data storage systems - Encryption of data in transit - Access controls and authentication - Regular security assessments - Staff training on data protection - Physical security measures

Your Rights

You have the right to: - Access your Personal Information - Request correction of your Personal Information - Object to the processing of your Personal Information - Request deletion of your Personal Information - Withdraw consent previously given - Lodge a complaint with the Information Regulator

Contact Information

Information Officer Contact Details: Email: info@saffaglobalally.com Tel: +61 431 032 441 The Information Regulator (South Africa) Address: JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001 Email: PAIAComplaints@inforegulator.org.za / POPIAComplaints@inforegulator.org.za Website: https://justice.gov.za/contact/contact_list.html