Common use of Privacy Notice Clause in Contracts

Privacy Notice. PROTECTION OF PERSONAL INFORMATION ACT (“POPIA”)‌ We understand that your personal information is important to you and that you may be apprehensive about disclosing it. Your privacy is just as important to us, and we are committed to safeguarding and processing your information in a lawful manner. We also want to make sure that you understand how and for what purpose we process your information. If for any reason you think that your information is not processed in a correct manner, or that your information is being used for a purpose other than that for what it was originally intended, you can contact our Information Officer. You can request access to the information we hold about you at any time and if you think that we have outdated information, please request us to update or correct it. We collect personal information directly from the following data subjects: • Prospective clients who enquire about our financial services • Clients who have appointed the representative as their broker Personal information is collected from you through the completion of the completion of an online application form. This form is completed either electronically or in hard copy. You may also be requested to provide your personal information during your consultation with a representative. We may also collect information about you from other sources such as external third parties and from cookies our website. As an authorized financial services provider, we are obligated in terms of the following legislation to collect your personal information insofar as it relates to the rendering of the relevant financial services to you: • Financial Advisory and Intermediaries Services Act 37 of 2002; • Financial Intelligence Centre Act 38 of 2001; 70 We collect, hold, use and disclose your personal information mainly to provide you with access to the services and products that we provide. We will only process your information for a purpose you would reasonably expect, including: • Complying with the obligations contained in the contract concluded between yourself and the FSP • To confirm, verify and update your details • To comply with any legal and regulatory requirements Some of your information that we hold may include, your first and last name, email address, a home, postal or other physical address, other contact information, inter alia your title, birth date, gender, residency status and your banking details. Failing to provide compulsory information may lead to our organisation’s inability to carry out the functions necessary to perform as an authorised financial services provider. We may need to share your information to third parties provide advice, reports, analyses, products or services that you have requested. Where we share your information, we will take all precautions to ensure that the third party will treat your information with the same level of protection as required by us. • Your employer (where applicable); • The Compliance Officer of the organisation (where applicable) • Analytics and search engine providers assisting in the enhancement of our websites • Information Technology specialists assisting us with data storage, security, processing, analytics, etc • Auditors of the Organisation • Regulatory or governmental authorities such as the Financial Sector Conduct Authority and the Prudential Authority Your information may be hosted on servers managed by a third-party service provider, which may be located outside of South Africa. The third-party service providers are located in: • Israel • Cyprus • Bulgaria We confirm that the level of protection afforded to your personal information by that third country or international organisation is equal to the protection afforded by the POPI Act. As a data subject, you have the right to – • Request that we confirm, free of charge, whether or not, we hold personal information about you • Request that we provide you with a description of the personal information we hold about you, and to explain why and how it is being processed (please complete Annexure A) • Request that we consider your objections to the processing of your personal information (please complete Annexure B) • Lodge a complaint with the Information Regulator (please complete Annexure B). In the event that your personal information has not been processed in accordance with the POPI Act and the principles set out above, you have the right to lodge a complaint with the Information Regulator. For further information regarding the complaints process, please visit the website of the Information Regulator, as indicated below. Alternatively, you may contact the Information Regulator for further assistance: The Information Regulator: Adv Pansy Tlakula Physical Address: JD House, 00 Xxxxxxxx Xxxxxx, Xxxxxxxxxxxx, Xxxxxxxxxxxx, 2001 Email: xxxxxxxxxx.XX@xxxxxxx.xxx.xx Website: xxxxx://xxx.xxxxxxx.xxx.xx/inforeg/index.html 30. DISPUTE RESOLUTION‌ 30.1. Governing Law

Privacy Notice. PROTECTION OF PERSONAL INFORMATION ACT (“POPIA”)‌ This privacy notice explains how we use any personal information we collect about you. We understand collect information about you when you engage us for financial advice, financial planning and investment management services. This information will relate to your personal and financial circumstances. It may also include special categories of personal data such as data about your health, if this is necessary for the provision of our services. We collate this data by note taking and the completion of questionnaires. Audio recordings may also be made of telephone calls and meetings. Information relating to usage of our website is collected using cookies. These are text files placed on your computer to collect standard internet log information and visitor behaviour information. We will use your information collected from the website to personalise your repeat visits to the site. Full details of how cookies work is provided on our website xxx.xxxxxxxxxxx.xx.xx We may need to gather personal information about your close family members and dependants in order to provide our service to you effectively. In such cases it will be your responsibility to ensure that you have the consent of the people concerned to pass their information on to us. We will provide a copy of this privacy notice for them or, where appropriate, ask you to pass the privacy information to them. The primary legal basis that we intend to use for the processing of your data is for the performance of our contract with you. The information that we collect about you is essential for us to be able to carry out the services that you require from us effectively. Without collecting your personal data we would also be unable to fulfil our legal and regulatory obligations. Where special category data of a sensitive nature is required we will obtain your explicit consent to collect and process this information. An example of this is where information is required about your health. We collect information about you in order to provide you with the services for which you engage us. In order to deliver our services to you effectively we may send your details to third parties such as those that we engage for professional compliance, audit or legal services as well as product and platform providers that we use to arrange financial products for you. Where you are also a client of Xxxxx Xxxxxxxx Chartered Accountants, we will supply information needed by them to carry out the services you have engaged them for. We may also be required to forward your data to our regulator, the Financial Conduct Authority when requested. Where third parties are involved in processing your data we have a contract in place with them to ensure that the nature and purpose of the processing is clear, that they are subject to a duty of confidence in processing your data and that they will only act in accordance with our written instructions. Where it is necessary for your personal data to be forwarded to a third party we will use appropriate security measures to protect your personal data in transit. This will include the encryption of data transmitted electronically. To fulfil our obligations in respect of prevention of money-laundering and other financial crime we will send your details to a credit referencing agency for identity verification purposes. The privacy notice of the credit referencing agency we use for this purpose is available at xxx.xxxxxxxxxx.xx.xx/xxxxx-xxxxxxxxxxx/ bureau-privacy-notice This provides information of how they will use and share your personal data. During the course of our relationship with you we will retain personal data which is necessary to provide services to you. We will take all reasonable steps to keep your personal data up to date throughout our relationship. We are also subject to regulatory requirements to retain your data for specified minimum periods. These are, generally: - • Five years for investment business • Three years for insurance business • Indefinitely for pension transfers and opt-out business These are minimum periods, during which we have a legal obligation to retain your records. We reserve the right to retain data for longer where we believe it is in our legitimate interests to do so. You have the right to request deletion of your personal data. We will comply with this request, subject to the restrictions of our regulatory obligations and legitimate interests as noted above. You have the right to request a copy of the information that we hold about you. If you would like a copy of some or all of your personal information, please email or write to us using the contact details noted below. We have an obligation to ensure that your personal information is important accurate and up to you and date. Please ask us to correct or remove any information that you may be apprehensive about disclosing it. Your privacy think is just as important to us, and we are committed to safeguarding and processing your information in a lawful manner. We also want to make sure that you understand how and for what purpose we process your informationincorrect. If for you have any reason you think that your information is not processed in a correct manner, or that your information is being used for a purpose other than that for what it was originally intended, you can contact our Information Officer. You can request access to the information we hold about you at any time and if you think that we have outdated information, please request us to update or correct it. We collect personal information directly from the following data subjects: • Prospective clients who enquire questions about our financial services • Clients who have appointed the representative as their broker Personal information is collected from you through the completion of the completion of an online application form. This form is completed either electronically privacy policy or in hard copy. You may also be requested to provide your personal information during your consultation with a representative. We may also collect information about you from other sources such as external third parties and from cookies our website. As an authorized financial services provider, we are obligated in terms of the following legislation to collect your personal information insofar as it relates to the rendering of the relevant financial services to you: • Financial Advisory and Intermediaries Services Act 37 of 2002; • Financial Intelligence Centre Act 38 of 2001; 70 We collect, hold, use and disclose your personal information mainly to provide you with access to the services and products that we provide. We will only process your information for a purpose you would reasonably expect, including: • Complying with the obligations contained in the contract concluded between yourself and the FSP • To confirm, verify and update your details • To comply with any legal and regulatory requirements Some of your information that we hold may include, your first and last name, email address, a home, postal or other physical address, other contact information, inter alia your title, birth date, gender, residency status and your banking details. Failing to provide compulsory information may lead to our organisation’s inability to carry out the functions necessary to perform as an authorised financial services provider. We may need to share your information to third parties provide advice, reports, analyses, products or services that you have requested. Where we share your information, we will take all precautions to ensure that the third party will treat your information with the same level of protection as required by us. • Your employer (where applicable); • The Compliance Officer of the organisation (where applicable) • Analytics and search engine providers assisting in the enhancement of our websites • Information Technology specialists assisting us with data storage, security, processing, analytics, etc • Auditors of the Organisation • Regulatory or governmental authorities such as the Financial Sector Conduct Authority and the Prudential Authority Your information may be hosted on servers managed by a third-party service provider, which may be located outside of South Africa. The third-party service providers are located in: • Israel • Cyprus • Bulgaria We confirm that the level of protection afforded to your personal information by that third country or international organisation is equal to the protection afforded by the POPI Act. As a data subject, you have the right to – • Request that we confirm, free of charge, whether or not, we hold personal information about you • Request that we provide you with a description of the personal information we hold about you, please contact us by email at xxxxxxxxxxxxxx@xxxxxxxxxxx.xx.xx or write to use to us at Oakley House, Headway Business Park, 0 Xxxxx Xxx Xxxx, Xxxxx XX00 0XX. This is our standard client agreement upon which we intend to rely. This agreement should be read in conjunction with the Services and Costs document and the engagement letter that you will be issued with prior to explain why us commencing work on your behalf. We are authorised and how it regulated by the Financial Conduct Authority (FCA), 00 Xxxxxxxxx Xxxxxx, Xxxxxxxxx, Xxxxxx, X00 0XX. xxx.xxx.xxx.xx. Our firm reference number is being processed (please complete Annexure A) 143390. You can check our details on the Financial Services Register by visiting the FCA’s website xxx.xxx.xxx.xx/xxxxx/xxxxxxx-xxxxxxxxx/ register or by contacting the FCA on 0800 111 6768. As we predominantly recommend our own investment services and solutions our investment advice is Restricted Advice under the rules of our regulator the Financial Conduct Authority. On the occasions where our own investment solutions are not suitable for you we may recommend investment products and services provided by other product providers selected from across the marketplace. We are also able to determine the ongoing suitability of existing investments you may hold and advise you accordingly. We do not provide advice on the following types of investment: - • Request that Unregulated Collective Investment Schemes • Qualified Investor Schemes • Derivatives contracts For insurance and annuities we consider your objections to will make a recommendation after researching the processing whole of the market. In all cases we will carry out an analysis of your personal information (please complete Annexure B) • Lodge a complaint with the Information Regulator (please complete Annexure B). In the event that your personal information has not been processed in accordance with the POPI Act circumstances, needs and the principles set out above, you have the right to lodge a complaint with the Information Regulator. For further information regarding the complaints process, please visit the website of the Information Regulator, as indicated below. Alternatively, you may contact the Information Regulator for further assistance: The Information Regulator: Adv Pansy Tlakula Physical Address: JD House, 00 Xxxxxxxx Xxxxxx, Xxxxxxxxxxxx, Xxxxxxxxxxxx, 2001 Email: xxxxxxxxxx.XX@xxxxxxx.xxx.xx Website: xxxxx://xxx.xxxxxxx.xxx.xx/inforeg/index.html 30. DISPUTE RESOLUTION‌ 30.1. Governing Lawobjectives before making any recommendation.

Privacy Notice. PROTECTION OF PERSONAL INFORMATION ACT (“POPIA”)‌ This privacy notice explains how we use any personal information we collect about you. We understand collect information about you when you engage us for financial advice, financial planning and investment management services. This information will relate to your personal and financial circumstances. It may also include special categories of personal data such as data about your health, if this is necessary for the provision of our services. We collate this data by note taking and the completion of questionnaires. Audio recordings may also be made of telephone calls and meetings. Information relating to usage of our website is collected using cookies. These are text files placed on your computer to collect standard internet log information and visitor behaviour information. We will use your information collected from the website to personalise your repeat visits to the site. Full details of how cookies work is provided on our website xxx.xxxxxxxxxxx.xx.xx We may need to gather personal information about your close family members and dependants in order to provide our service to you effectively. In such cases it will be your responsibility to ensure that you have the consent of the people concerned to pass their information on to us. We will provide a copy of this privacy notice for them or, where appropriate, ask you to pass the privacy information to them. The primary legal basis that we intend to use for the processing of your data is for the performance of our contract with you. The information that we collect about you is essential for us to be able to carry out the services that you require from us effectively. Without collecting your personal data we would also be unable to fulfil our legal and regulatory obligations. Where special category data of a sensitive nature is required we will obtain your explicit consent to collect and process this information. An example of this is where information is required about your health. We collect information about you in order to provide you with the services for which you engage us. In order to deliver our services to you effectively we may send your details to third parties such as those that we engage for professional compliance, audit or legal services as well as product and platform providers that we use to arrange financial products for you. Where you are also a client of Xxxxx Xxxxxxxx Chartered Accountants, we will supply information needed by them to carry out the services you have engaged them for. We may also be required to forward your data to our regulator, the Financial Conduct Authority when requested. Where third parties are involved in processing your data we have a contract in place with them to ensure that the nature and purpose of the processing is clear, that they are subject to a duty of confidence in processing your data and that they will only act in accordance with our written instructions. Where it is necessary for your personal data to be forwarded to a third party we will use appropriate security measures to protect your personal data in transit. This will include the encryption of data transmitted electronically. To fulfil our obligations in respect of prevention of money-laundering and other financial crime we will send your details to a credit referencing agency for identity verification purposes. The privacy notice of the credit referencing agency we use for this purpose is available at xxx.xxxxxxxxxx.xx.xx/xxxxx-xxxxxxxxxxx/ bureau-privacy-notice This provides information of how they will use and share your personal data. During the course of our relationship with you we will retain personal data which is necessary to provide services to you. We will take all reasonable steps to keep your personal data up to date throughout our relationship. We are also subject to regulatory requirements to retain your data for specified minimum periods. These are, generally: - • Five years for investment business • Three years for insurance business • Indefinitely for pension transfers and opt-out business These are minimum periods, during which we have a legal obligation to retain your records. We reserve the right to retain data for longer where we believe it is in our legitimate interests to do so. You have the right to request deletion of your personal data. We will comply with this request, subject to the restrictions of our regulatory obligations and legitimate interests as noted above. You have the right to request a copy of the information that we hold about you. If you would like a copy of some or all of your personal information, please email or write to us using the contact details noted below. We have an obligation to ensure that your personal information is important accurate and up to you and date. Please ask us to correct or remove any information that you may be apprehensive about disclosing it. Your privacy think is just as important to us, and we are committed to safeguarding and processing your information in a lawful manner. We also want to make sure that you understand how and for what purpose we process your informationincorrect. If for you have any reason you think that your information is not processed in a correct manner, or that your information is being used for a purpose other than that for what it was originally intended, you can contact our Information Officer. You can request access to the information we hold about you at any time and if you think that we have outdated information, please request us to update or correct it. We collect personal information directly from the following data subjects: • Prospective clients who enquire questions about our financial services • Clients who have appointed the representative as their broker Personal information is collected from you through the completion of the completion of an online application form. This form is completed either electronically privacy policy or in hard copy. You may also be requested to provide your personal information during your consultation with a representative. We may also collect information about you from other sources such as external third parties and from cookies our website. As an authorized financial services provider, we are obligated in terms of the following legislation to collect your personal information insofar as it relates to the rendering of the relevant financial services to you: • Financial Advisory and Intermediaries Services Act 37 of 2002; • Financial Intelligence Centre Act 38 of 2001; 70 We collect, hold, use and disclose your personal information mainly to provide you with access to the services and products that we provide. We will only process your information for a purpose you would reasonably expect, including: • Complying with the obligations contained in the contract concluded between yourself and the FSP • To confirm, verify and update your details • To comply with any legal and regulatory requirements Some of your information that we hold may include, your first and last name, email address, a home, postal or other physical address, other contact information, inter alia your title, birth date, gender, residency status and your banking details. Failing to provide compulsory information may lead to our organisation’s inability to carry out the functions necessary to perform as an authorised financial services provider. We may need to share your information to third parties provide advice, reports, analyses, products or services that you have requested. Where we share your information, we will take all precautions to ensure that the third party will treat your information with the same level of protection as required by us. • Your employer (where applicable); • The Compliance Officer of the organisation (where applicable) • Analytics and search engine providers assisting in the enhancement of our websites • Information Technology specialists assisting us with data storage, security, processing, analytics, etc • Auditors of the Organisation • Regulatory or governmental authorities such as the Financial Sector Conduct Authority and the Prudential Authority Your information may be hosted on servers managed by a third-party service provider, which may be located outside of South Africa. The third-party service providers are located in: • Israel • Cyprus • Bulgaria We confirm that the level of protection afforded to your personal information by that third country or international organisation is equal to the protection afforded by the POPI Act. As a data subject, you have the right to – • Request that we confirm, free of charge, whether or not, we hold personal information about you • Request that we provide you with a description of the personal information we hold about you, please contact us by email at xxxxxxxxxxxxxx@xxxxxxxxxxx.xx.xx or write to use to us at Ironstone Place, Kettering, NN14 1FN. This is our standard client agreement upon which we intend to rely. This agreement should be read in conjunction with the Services and Costs document and the engagement letter that you will be issued with prior to explain why us commencing work on your behalf. We are authorised and how it regulated by the Financial Conduct Authority (FCA), 00 Xxxxxxxxx Xxxxxx, Xxxxxxxxx, Xxxxxx, X00 0XX. xxx.xxx.xxx.xx. Our firm reference number is being processed (please complete Annexure A) 143390. You can check our details on the Financial Services Register by visiting the FCA’s website xxx.xxx.xxx.xx/xxxxx/xxxxxxx-xxxxxxxxx/ register or by contacting the FCA on 0800 111 6768. As we predominantly recommend our own investment services and solutions our investment advice is Restricted Advice under the rules of our regulator the Financial Conduct Authority. On the occasions where our own investment solutions are not suitable for you we may recommend investment products and services provided by other product providers selected from across the marketplace. We are also able to determine the ongoing suitability of existing investments you may hold and advise you accordingly. We do not provide advice on the following types of investment: - • Request that Unregulated Collective Investment Schemes • Qualified Investor Schemes • Derivatives contracts For insurance and annuities we consider your objections to will make a recommendation after researching the processing whole of the market. In all cases we will carry out an analysis of your personal information (please complete Annexure B) • Lodge a complaint with the Information Regulator (please complete Annexure B). In the event that your personal information has not been processed in accordance with the POPI Act circumstances, needs and the principles set out above, you have the right to lodge a complaint with the Information Regulator. For further information regarding the complaints process, please visit the website of the Information Regulator, as indicated below. Alternatively, you may contact the Information Regulator for further assistance: The Information Regulator: Adv Pansy Tlakula Physical Address: JD House, 00 Xxxxxxxx Xxxxxx, Xxxxxxxxxxxx, Xxxxxxxxxxxx, 2001 Email: xxxxxxxxxx.XX@xxxxxxx.xxx.xx Website: xxxxx://xxx.xxxxxxx.xxx.xx/inforeg/index.html 30. DISPUTE RESOLUTION‌ 30.1. Governing Lawobjectives before making any recommendation.

Privacy Notice. PROTECTION OF PERSONAL INFORMATION ACT (“POPIA”)‌ We understand that your personal information is important to you and that you may be apprehensive about disclosing it. Your privacy is just as important to us, and we are committed to safeguarding and processing your information in a lawful manner. We also want to make sure that you understand how and for what purpose we process your information. If for any reason you think that your information is not processed in a correct manner, or that your information is being used for a purpose other than that for what it was originally intended, you can contact our Information Officer. You can request access to the information we hold about you at any time and if you think that we have outdated information, please request us to update or correct it. We collect personal information directly from the following data subjects: • Prospective clients who enquire about our financial services • Clients who have appointed the representative as their broker Personal information is collected from you through the completion of the completion of an online application form. This form is completed either electronically or in hard copy. You may also be requested to provide your personal information during your consultation with a representative. We may also collect information about you from other sources such as external third parties and from cookies our website. As an authorized financial services provider, we are obligated in terms of the following legislation to collect your personal information insofar as it relates to the rendering of the relevant financial services to you: • Financial Advisory and Intermediaries Services Act 37 of 2002; • Financial Intelligence Centre Act 38 of 2001; 70 We collect, hold, use and disclose your personal information mainly to provide you with access to the services and products that we provide. We will only process your information for a purpose you would reasonably expect, including: • Complying with the obligations contained in the contract concluded between yourself and the FSP • To confirm, verify and update your details • To comply with any legal and regulatory requirements Some of your information that we hold may include, your first and last name, email address, a home, postal or other physical address, other contact information, inter alia your title, birth date, gender, residency status and your banking details. Failing to provide compulsory information may lead to our organisation’s inability to carry out the functions necessary to perform as an authorised financial services provider. We may need to share your information to third parties provide advice, reports, analyses, products or services that you have requested. Where we share your information, we will take all precautions to ensure that the third party will treat your information with the same level of protection as required by us. • Your employer (where applicable); • The Compliance Officer of the organisation (where applicable) • Analytics and search engine providers assisting in the enhancement of our websites • Information Technology specialists assisting us with data storage, security, processing, analytics, etc • Auditors of the Organisation • Regulatory or governmental authorities such as the Financial Sector Conduct Authority and the Prudential Authority Your information may be hosted on servers managed by a third-party service provider, which may be located outside of South Africa. The third-party service providers are located in: • Israel • Cyprus • Bulgaria We confirm that the level of protection afforded to your personal information by that third country or international organisation is equal to the protection afforded by the POPI Act. As a data subject, you have the right to – • Request that we confirm, free of charge, whether or not, we hold personal information about you • Request that we provide you with a description of the personal information we hold about you, and to explain why and how it is being processed (please complete Annexure A) • Request that we consider your objections to the processing of your personal information (please complete Annexure B) • Lodge a complaint with the Information Regulator (please complete Annexure B). In the event that your personal information has not been processed in accordance with the POPI Act and the principles set out above, you have the right to lodge a complaint with the Information Regulator. For further information regarding the complaints process, please visit the website of the Information Regulator, as indicated below. Alternatively, you may contact the Information Regulator for further assistance: The Information Regulator: Adv Pansy Tlakula Physical Address: JD House, 00 Xxxxxxxx Xxxxxx, Xxxxxxxxxxxx, Xxxxxxxxxxxx, 2001 0000 Email: xxxxxxxxxx.XX@xxxxxxx.xxx.xx Website: xxxxx://xxx.xxxxxxx.xxx.xx/inforeg/index.html 30. DISPUTE RESOLUTION‌ 30.1. Governing Law

Privacy Notice. PROTECTION OF PERSONAL INFORMATION ACT (“POPIA”)‌ We understand that A. At HSBC, HSBC take the privacy of your personal information is important to you seriously and that you may be apprehensive about disclosing it. Your privacy is just as important to us, and we are committed to safeguarding and processing your information in a lawful manner. We also want to make sure that you understand how and for what purpose we process your information. If for any reason you think ensuring that your information is secure. HSBC ask that you read our Privacy Notice carefully as it explains what information HSBC collect about you, how HSBC will use that information, who HSBC will share it with, the circumstances when HSBC will share it and what steps HSBC will take to make sure it stays private and secure. B. When you use this App, HSBC will collect information about the device the App is installed on (e.g. device identification numbers), and about your accounts with us and associated transactions. C. HSBC will collect this information directly from you, e.g.: when you enter information into the App. HSBC use the above information to deliver the services offered in the App, and HSBC need to process it to perform the obligation in the agreement HSBC entered with you. D. HSBC may also use that information, together with information about your location (country or region, not processed your precise location) and information about your usage of the App (e.g.: how long you spend on particular web pages), for the following purposes. The lawful basis for this usage is that HSBC have a legitimate business interest to improve our products and services to best meet our customers’ needs, and to provide products and services HSBC think are relevant to them. (a) Tailoring the content and the services that you’re offered through the App (b) Understanding how our customers use their accounts (c) Monitoring trends in a correct mannerproduct offerings (d) Developing propositions and products and targeting them appropriately (e) Identifying products and offers which may be of interest to you (f) Improving the App services for you E. The App may store all the above information securely on your device, or that and access it when required. F. HSBC may use other HSBC Group companies, and/or third parties, to provide the App on our behalf. G. For more detail on how HSBC will use your information is being used for a purpose other than that for what it was originally intended, you can contact our Information Officer. You can request access to the information we hold about you at any time and if you think that we have outdated personal information, please request us to update or correct it. We collect personal information directly from the following data subjects: • Prospective clients who enquire about our financial services • Clients who have appointed the representative as their broker Personal information is collected from you through the completion of the completion of an online application form. This form is completed either electronically or in hard copy. You may also be requested to provide your personal information during your consultation with a representative. We may also collect information about you from other sources such as external third parties and from cookies our website. As an authorized financial services provider, we are obligated in terms of the following legislation to collect your personal information insofar as it relates to the rendering of the relevant financial services to you: • Financial Advisory and Intermediaries Services Act 37 of 2002; • Financial Intelligence Centre Act 38 of 2001; 70 We collect, hold, use and disclose your personal information mainly to provide you with access to the services and products that we provide. We will only process your information for a purpose you would reasonably expect, including: • Complying with the obligations contained in the contract concluded between yourself and the FSP • To confirm, verify and update your details • To comply with any legal and regulatory requirements Some of your information that we hold may include, your first and last name, email address, a home, postal or other physical address, other contact information, inter alia your title, birth date, gender, residency status and your banking details. Failing to provide compulsory information may lead refer to our organisation’s inability to carry out the functions necessary to perform as an authorised financial services provider. We may need to share your information to third parties provide advice, reports, analyses, products or services that you have requested. Where we share your information, we will take all precautions to ensure that the third party will treat your information with the same level of protection as required by us. • Your employer (where applicable); • The Compliance Officer of the organisation (where applicable) • Analytics Privacy and search engine providers assisting in the enhancement of our websites • Information Technology specialists assisting us with data storage, security, processing, analytics, etc • Auditors of the Organisation • Regulatory or governmental authorities such as the Financial Sector Conduct Authority and the Prudential Authority Your information may be hosted on servers managed by a third-party service provider, which may be located outside of South Africa. The third-party service providers are located in: • Israel • Cyprus • Bulgaria We confirm that the level of protection afforded to your personal information by that third country or international organisation is equal to the protection afforded by the POPI Act. As a data subject, you have the right to – • Request that we confirm, free of charge, whether or not, we hold personal information about you • Request that we provide you with a description of the personal information we hold about you, and to explain why and how it is being processed (please complete Annexure A) • Request that we consider your objections to the processing of your personal information (please complete Annexure B) • Lodge a complaint with the Information Regulator (please complete Annexure B). In the event that your personal information has not been processed in accordance with the POPI Act and the principles set out above, you have the right to lodge a complaint with the Information Regulator. For further information regarding the complaints process, please visit the website of the Information Regulator, as indicated below. Alternatively, you may contact the Information Regulator for further assistance: The Information Regulator: Adv Pansy Tlakula Physical Address: JD House, 00 Xxxxxxxx Xxxxxx, Xxxxxxxxxxxx, Xxxxxxxxxxxx, 2001 Email: xxxxxxxxxx.XX@xxxxxxx.xxx.xx Website: xxxxx://xxx.xxxxxxx.xxx.xx/inforeg/index.html 30. DISPUTE RESOLUTION‌ 30.1. Governing Lawsecurity at [ xxxxx://xxx.xxxx.xxx.xx/en-tw/privacy-and- security/ ].

Privacy Notice. PROTECTION OF PERSONAL INFORMATION ACT (“POPIA”)‌ We understand that your This privacy notice explains how we use any personal information is important to you and that you may be apprehensive we collect about disclosing it. Your privacy is just as important to us, and we are committed to safeguarding and processing your information in a lawful manner. We also want to make sure that you understand how and for what purpose we process your information. If for any reason you think that your information is not processed in a correct manner, or that your information is being used for a purpose other than that for what it was originally intended, you can contact our Information Officer. You can request access to the information we hold about you at any time and if you think that we have outdated information, please request us to update or correct ityou. We collect personal information directly from the following data subjects: • Prospective clients who enquire about our you when you engage us for financial services • Clients who have appointed the representative as their broker Personal information is collected from you through the completion of the completion of an online application formplanning/financial advice/mortgage advice. This form is completed either electronically or in hard copyinformation will relate to your personal and financial circumstances. You It may also be requested to provide include special categories of personal data such as data about your personal information during your consultation with a representativehealth, if this is necessary for the provision of our services. We may also collect information when you voluntarily complete client surveys or provide feedback to us. The primary legal basis that we intend to use for the processing of your data is for the performance of our contract with you. The information that we collect about you is essential for us to be able to carry out the services that you require from other sources such as external third parties us effectively. Without collecting your personal data we’d also be unable to fulfil our legal and from cookies our websiteregulatory obligations. As an authorized financial services provider, we are obligated Where special category data is required we’ll obtain your explicit consent in terms of the following legislation order to collect your personal and process this information. We collect information insofar as it relates to the rendering of the relevant financial services to you: • Financial Advisory and Intermediaries Services Act 37 of 2002; • Financial Intelligence Centre Act 38 of 2001; 70 We collect, hold, use and disclose your personal information mainly about you in order to provide you with access to the services and products that we providefor which you engage us. We will only process won’t share your information for a purpose marketing purposes with other companies. In order to deliver our services to you would reasonably expect, including: • Complying with the obligations contained in the contract concluded between yourself and the FSP • To confirm, verify and update effectively we may send your details • To comply with any legal and regulatory requirements Some of your information that we hold may include, your first and last name, email address, a home, postal or other physical address, other contact information, inter alia your title, birth date, gender, residency status and your banking details. Failing to provide compulsory information may lead to our organisation’s inability to carry out the functions necessary to perform as an authorised financial services provider. We may need to share your information to third parties provide advicesuch as those that we engage for professional compliance, reports, analyses, accountancy or legal services as well as product and platform providers that we use to arrange financial products or services that you have requestedfor you. Where we share third parties are involved in processing your information, we will take all precautions data we’ll have a contract in place with them to ensure that the nature and purpose of the processing is clear, that they are subject to a duty of confidence in processing your data and that they’ll only act in accordance with our written instructions. Where it’s necessary for your personal data to be forwarded to a third party will treat your information with the same level of protection as required by us. • Your employer (where applicable); • The Compliance Officer of the organisation (where applicable) • Analytics and search engine providers assisting in the enhancement of our websites • Information Technology specialists assisting us with data storage, security, processing, analytics, etc • Auditors of the Organisation • Regulatory or governmental authorities such as the Financial Sector Conduct Authority and the Prudential Authority Your information may be hosted on servers managed by a third-party service provider, which may be located outside of South Africa. The third-party service providers are located in: • Israel • Cyprus • Bulgaria We confirm that the level of protection afforded we’ll use appropriate security measures to protect your personal information by that data in transit. To fulfil our obligations in respect of prevention of money-laundering and other financial crime we may send your details to third country or international organisation is equal to the protection afforded by the POPI Act. As a data subject, you have the right to – • Request that we confirm, free of charge, whether or not, we hold personal information about you • Request that we provide you with a description of the personal information we hold about you, and to explain why and how it is being processed (please complete Annexure A) • Request that we consider your objections to the processing of your personal information (please complete Annexure B) • Lodge a complaint with the Information Regulator (please complete Annexure B)party agencies for identity verification purposes. In the event that your adviser is unavailable you might be contacted by a member of their team, who will have access to your information. We will hold personal information has not been processed data (e.g. name, address, date of birth and contact details) in accordance line with the POPI Act our regulatory and the principles legal obligations as set out above, you have the right to lodge by our regulator – currently a complaint with the Information Regulator. For further information regarding the complaints process, please visit the website of the Information Regulator, as indicated below. Alternatively, you may contact the Information Regulator for further assistance: The Information Regulator: Adv Pansy Tlakula Physical Address: JD House, 00 Xxxxxxxx Xxxxxx, Xxxxxxxxxxxx, Xxxxxxxxxxxx, 2001 Email: xxxxxxxxxx.XX@xxxxxxx.xxx.xx Website: xxxxx://xxx.xxxxxxx.xxx.xx/inforeg/index.html 30. DISPUTE RESOLUTION‌ 30.1. Governing Lawminimum of:

Privacy Notice. PROTECTION OF PERSONAL INFORMATION ACT (“POPIA”)‌ This privacy notice explains how we use any personal information we collect about you. What information do we collect about you? We understand that collect information about you when you engage us for financial planning and investment management services. This information will relate to your personal information is important to you and that you may be apprehensive about disclosing itfinancial circumstances. Your privacy is just as important to us, and we are committed to safeguarding and processing your information in a lawful manner. We also want to make sure that you understand how and for what purpose we process your information. If for any reason you think that your information is not processed in a correct manner, or that your information is being used for a purpose other than that for what it was originally intended, you can contact our Information Officer. You can request access to the information we hold about you at any time and if you think that we have outdated information, please request us to update or correct it. We collect personal information directly from the following data subjects: • Prospective clients who enquire about our financial services • Clients who have appointed the representative as their broker Personal information is collected from you through the completion of the completion of an online application form. This form is completed either electronically or in hard copy. You It may also be requested to provide include special categories of personal data such as data about your personal information during your consultation with a representativehealth, if this is necessary for the provision of our services. We may also collect information when you voluntarily complete client surveys or provide feedback to us. Why do we need to collect and use your personal data? The primary legal basis that we intend to use for the processing of your data is for the performance of our contract with you. The information that we collect about you is essential for us to be able to carry out the services that you require from other sources such as external third parties us effectively. Without collecting your personal data we’d also be unable to fulfil our legal and from cookies our websiteregulatory obligations. As an authorized financial services provider, we are obligated Where special category data is required we’ll obtain your explicit consent in terms of the following legislation order to collect your personal and process this information. How will we use the information insofar as it relates to the rendering of the relevant financial services to about you: • Financial Advisory and Intermediaries Services Act 37 of 2002; • Financial Intelligence Centre Act 38 of 2001; 70 ? We collect, hold, use and disclose your personal collect information mainly about you in order to provide you with access to the services and products that for which you engage us. Who might we provide. share your information with? We will only process won’t share your information for a purpose marketing purposes with other companies. In order to deliver our services to you would reasonably expect, including: • Complying with the obligations contained in the contract concluded between yourself and the FSP • To confirm, verify and update effectively we may send your details • to third parties such as those that we engage for professional compliance, accountancy or legal services as well as product and platform providers that we use to arrange financial products for you. Where third parties are involved in processing your data we’ll have a contract in place with them to ensure that the nature and purpose of the processing is clear, that they are subject to a duty of confidence in processing your data and that they’ll only act in accordance with our written instructions. Where it’s necessary for your personal data to be forwarded to a third party we’ll use appropriate security measures to protect your personal data in transit. To fulfil our obligations in respect of prevention of money- laundering and other financial crime we may send your details to third party agencies for identity verification purposes. How long do we keep hold of your information? In principle, your personal data shouldn’t be held for longer than is required under the terms of our contract for services with you. However, we’re subject to regulatory requirements to retain data for specified minimum periods. We also reserve the right to retain data for longer than this due to the possibility that it may be required to defend a future claim against us. You have the right to request deletion of your personal data. We’ll comply with any legal this request, subject to the restrictions of our regulatory obligations and regulatory requirements Some legitimate interests as noted above. How can I access the information you hold about me? You have the right to request a copy of your the information that we hold may include, about you. If you’d like a copy of some or all of your first and last name, email address, a home, postal or other physical address, other contact personal information, inter alia your title, birth date, gender, residency status and your banking detailsplease email or write to us using the contact details noted below. Failing to provide compulsory information may lead to our organisation’s inability to carry out the functions necessary to perform as an authorised financial services provider. We may need to share your information to third parties provide advice, reports, analyses, products or services that you have requested. Where we share your information, we will take all precautions to ensure that the third party will treat your information with the same level of protection as required by us. • Your employer (where applicable); • The Compliance Officer of the organisation (where applicable) • Analytics and search engine providers assisting in the enhancement of our websites • Information Technology specialists assisting us with data storage, security, processing, analytics, etc • Auditors of the Organisation • Regulatory or governmental authorities such as the Financial Sector Conduct Authority and the Prudential Authority Your information may be hosted on servers managed by a third-party service provider, which may be located outside of South Africa. The third-party service providers are located in: • Israel • Cyprus • Bulgaria We confirm that the level of protection afforded to When your personal information data is processed by that third country or international organisation is equal to the protection afforded by the POPI Act. As a data subject, automated means you have the right to – • Request that we confirm, free of charge, whether or not, we hold personal information about you • Request that we provide you with a description of the personal information we hold about you, and ask us to explain why and how it is being processed (please complete Annexure A) • Request that we consider your objections to the processing of move your personal information (please complete Annexure B) • Lodge a complaint with the Information Regulator (please complete Annexure B)data to another organisation for their use. In the event We have an obligation to ensure that your personal information has not been processed in accordance with the POPI Act is accurate and the principles set out above, up to date. Please ask us to correct or remove any information that you have the right think is incorrect. Marketing We’d like to lodge a complaint with the Information Regulatorsend you information about our products and services which may be of interest to you. For further information regarding the complaints process, please visit the website of the Information Regulator, as indicated below. AlternativelyIf you’ve agreed to receive marketing information, you may opt out at a later date. You have a right at any time to stop us from contacting you for marketing purposes. If you no longer wish to be contacted for marketing purposes, please contact the Information Regulator for further assistance: The Information Regulator: Adv Pansy Tlakula Physical Address: JD Houseus by phone, 00 Xxxxxxxx Xxxxxx, Xxxxxxxxxxxx, Xxxxxxxxxxxx, 2001 Email: xxxxxxxxxx.XX@xxxxxxx.xxx.xx Website: xxxxx://xxx.xxxxxxx.xxx.xx/inforeg/index.html 30. DISPUTE RESOLUTION‌ 30.1. Governing Lawemail or post.

Privacy Notice. PROTECTION OF PERSONAL INFORMATION ACT (“POPIA”)‌ This privacy notice explains how we use any personal information we collect about you. What information do we collect about you? We understand collect information about you when you engage us for financial advice, financial planning and investment management services. This information will relate to your personal and financial circumstances. It may also include special categories of personal data such as data about your health, if this is necessary for the provision of our services. We collate this data by note taking and the completion of questionnaires. Audio recordings may also be made of telephone calls and meetings. Information relating to usage of our website is collected using cookies. These are text files placed on your computer to collect standard internet log information and visitor behaviour information. We will use your information collected from the website to personalise your repeat visits to the site. Full details of how cookies work is provided on our website xxx.xxxxxxxxxxx.xx.xx Information about connected individuals We may need to gather personal information about your close family members and dependants in order to provide our service to you effectively. In such cases it will be your responsibility to ensure that you have the consent of the people concerned to pass their information on to us. We will provide a copy of this privacy notice for them or, where appropriate, ask you to pass the privacy information to them. Why do we need to collect and use your personal data? The primary legal basis that we intend to use for the processing of your data is for the performance of our contract with you. The information that we collect about you is essential for us to be able to carry out the services that you require from us effectively. Without collecting your personal data we would also be unable to fulfil our legal and regulatory obligations. Where special category data of a sensitive nature is required we will obtain your explicit consent to collect and process this information. An example of this is where information is required about your health. How will we use the information about you? We collect information about you in order to provide you with the services for which you engage us. Who may we share your information with? In order to deliver our services to you effectively we may send your details to third parties such as those that we engage for professional compliance, audit or legal services as well as product and platform providers that we use to arrange financial products for you. Where you are also a client of Xxxxx Xxxxxxxx Chartered Accountants, we will supply information needed by them to carry out the services you have engaged them for. We may also be required to forward your data to our regulator, the Financial Conduct Authority when requested. Where third parties are involved in processing your data we have a contract in place with them to ensure that the nature and purpose of the processing is clear, that they are subject to a duty of confidence in processing your data and that they will only act in accordance with our written instructions. Where it is necessary for your personal data to be forwarded to a third party we will use appropriate security measures to protect your personal data in transit. This will include the encryption of data transmitted electronically. To fulfil our obligations in respect of prevention of money-laundering and other financial crime we will send your details to a credit referencing agency for identity verification purposes. The privacy notice of the credit referencing agency we use for this purpose is available at xxx.xxxxxxxxxx.xx.xx/xxxxx-xxxxxxxxxxx/ bureau-privacy-notice This provides information of how they will use and share your personal data. How long do we retain your information? During the course of our relationship with you we will retain personal data which is necessary to provide services to you. We will take all reasonable steps to keep your personal data up to date throughout our relationship. We are also subject to regulatory requirements to retain your data for specified minimum periods. These are, generally: - • Five years for investment business • Three years for insurance business • Indefinitely for pension transfers and opt-out business These are minimum periods, during which we have a legal obligation to retain your records. We reserve the right to retain data for longer where we believe it is in our legitimate interests to do so. You have the right to request deletion of your personal data. We will comply with this request, subject to the restrictions of our regulatory obligations and legitimate interests as noted above. How can I access the information you hold about me? You have the right to request a copy of the information that we hold about you. If you would like a copy of some or all of your personal information, please email or write to us using the contact details noted below. We have an obligation to ensure that your personal information is important accurate and up to you and date. Please ask us to correct or remove any information that you may be apprehensive about disclosing itthink is incorrect. Your privacy is just as important How to us, and we are committed to safeguarding and processing your information in a lawful manner. We also want to make sure that contact us If you understand how and for what purpose we process your information. If for have any reason you think that your information is not processed in a correct manner, or that your information is being used for a purpose other than that for what it was originally intended, you can contact our Information Officer. You can request access to the information we hold about you at any time and if you think that we have outdated information, please request us to update or correct it. We collect personal information directly from the following data subjects: • Prospective clients who enquire questions about our financial services • Clients who have appointed the representative as their broker Personal information is collected from you through the completion of the completion of an online application form. This form is completed either electronically privacy policy or in hard copy. You may also be requested to provide your personal information during your consultation with a representative. We may also collect information about you from other sources such as external third parties and from cookies our website. As an authorized financial services provider, we are obligated in terms of the following legislation to collect your personal information insofar as it relates to the rendering of the relevant financial services to you: • Financial Advisory and Intermediaries Services Act 37 of 2002; • Financial Intelligence Centre Act 38 of 2001; 70 We collect, hold, use and disclose your personal information mainly to provide you with access to the services and products that we provide. We will only process your information for a purpose you would reasonably expect, including: • Complying with the obligations contained in the contract concluded between yourself and the FSP • To confirm, verify and update your details • To comply with any legal and regulatory requirements Some of your information that we hold may include, your first and last name, email address, a home, postal or other physical address, other contact information, inter alia your title, birth date, gender, residency status and your banking details. Failing to provide compulsory information may lead to our organisation’s inability to carry out the functions necessary to perform as an authorised financial services provider. We may need to share your information to third parties provide advice, reports, analyses, products or services that you have requested. Where we share your information, we will take all precautions to ensure that the third party will treat your information with the same level of protection as required by us. • Your employer (where applicable); • The Compliance Officer of the organisation (where applicable) • Analytics and search engine providers assisting in the enhancement of our websites • Information Technology specialists assisting us with data storage, security, processing, analytics, etc • Auditors of the Organisation • Regulatory or governmental authorities such as the Financial Sector Conduct Authority and the Prudential Authority Your information may be hosted on servers managed by a third-party service provider, which may be located outside of South Africa. The third-party service providers are located in: • Israel • Cyprus • Bulgaria We confirm that the level of protection afforded to your personal information by that third country or international organisation is equal to the protection afforded by the POPI Act. As a data subject, you have the right to – • Request that we confirm, free of charge, whether or not, we hold personal information about you • Request that we provide you with a description of the personal information we hold about you, and please contact us by email at xxxxxxxxxxxxxx@xxxxxxxxxxx.xx.xx or write to explain why and how it use to us at Ironstone Place, Kettering, NN14 1FN. This is being processed (please complete Annexure A) • Request that our standard client agreement upon which we consider your objections intend to the processing of your personal information (please complete Annexure B) • Lodge a complaint rely. This agreement should be read in conjunction with the Information Regulator (please complete Annexure B). In the event that your personal information has not been processed in accordance with the POPI Act Services and Costs document and the principles set out above, engagement letter that you have the right will be issued with prior to lodge a complaint with the Information Regulator. For further information regarding the complaints process, please visit the website of the Information Regulator, as indicated below. Alternatively, you may contact the Information Regulator for further assistance: The Information Regulator: Adv Pansy Tlakula Physical Address: JD House, 00 Xxxxxxxx Xxxxxx, Xxxxxxxxxxxx, Xxxxxxxxxxxx, 2001 Email: xxxxxxxxxx.XX@xxxxxxx.xxx.xx Website: xxxxx://xxx.xxxxxxx.xxx.xx/inforeg/index.html 30. DISPUTE RESOLUTION‌ 30.1. Governing Lawus commencing work on your behalf.

Privacy Notice. PROTECTION OF PERSONAL INFORMATION ACT (“POPIA”)‌ We understand that Who looks after your personal information Do you have to give us your personal information Your personal information will be held by Bank of Scotland plc which is important part We may be required by law, or as a consequence of any contractual of the Lloyds Banking Group. More information on the Group can be found at relationship we have, to collect certain personal information. Failure to xxx.xxxxxxxxxxxxxxxxxx.xxx provide this information may prevent or delay us fulfilling these obligations or How we use your personal information performing services. We will use your personal information: What rights you have over your personal information • to provide products and services, manage your relationship with us and The law gives you a number of rights in relation to your personal information comply with any laws or regulations we are subject to (for example the including: laws that prevent financial crime or the regulatory requirements governing • the right to access the personal information we have about you. This the products we offer). includes information from application forms, statements, correspondence • for other purposes including improving our services, exercising our rights and call recordings. in relation to agreements and contracts and identifying products and • the right to get us to correct personal information that is wrong or services that may be of interest. incomplete. To support us with the above we analyse information we know about you and that • in certain circumstances, the right to ask us to stop using or delete your how you may be apprehensive about disclosing it. Your privacy is just as important to ususe our products and services, and we are committed to safeguarding and processing your information in a lawful manner. We also want to make sure that you understand how and for what purpose we process your including some automated decision personal information. If for any reason you think that your information is not processed in a correct manner, or that your information is being used for a purpose other than that for what it was originally intended, you can contact our Information Officermaking. You can request access find out more about how we do this, and in what circumstances • from 25 May 2018 you will have the right to the receive any personal information we hold about you at any time and if you think that can ask us to stop, in our full privacy notice. we have outdated information, please request us to update or correct it. We collect personal information directly from the following data subjects: • Prospective clients who enquire about our financial services • Clients who have appointed the representative as their broker Personal information is collected from you through the completion of the completion of in an online application form. This form is completed either electronically or in hard copy. You may also be requested to provide easily re-usable format when it’s processed Who we share your personal information during with on certain grounds, such as consent or for contractual reasons. You can also Your personal information will be shared within Lloyds Banking Group and other ask us to pass this information on to another organisation. companies that provide services to you or us, so that we and any other companies You can find out more about these rights and how you can exercise them in our in our Group can look after your consultation relationship with a representativeus. By sharing this information it full privacy notice. enables us to better understand our customers’ needs, run accounts and policies, Other individuals you have financial links with and provide products and services efficiently. This processing may include activities which take place outside of the European Economic Area. If this is the We may also collect personal information about other individuals who you case we will ensure appropriate safeguards are in place to protect your personal have a financial link with. This may include people who you have joint accounts information. You can find out more about how we share your personal information or policies with such as your partner/spouse, dependents, beneficiaries or with credit reference agencies below and can access more information about how people you have commercial links to, for example other directors or officers of else we share your information in our full privacy notice. your company. Where we collect your personal information from We will collect this information to assess any applications, provide the services We will collect personal information about you from other a number of sources such as external third parties including: requested and to carry out credit reference and fraud prevention checks. You can find out more about how we process personal information about individuals • information given to us on application forms, when you talk to us in with whom you have a financial link in our full privacy notice. branch, over the phone or through the device you use and when new How we use credit reference agencies services are requested. • from cookies analysis of how you operate our website. As an authorized financial services providerproducts and services, including the In order to process your application we are obligated in terms of the following legislation to collect may supply your personal information insofar frequency, nature, location, origin and recipients of any payments. to credit reference agencies (CRAs) including how you use our products and services and they will give us information about you, such as it relates about your • from or through other organisations (for example card associations, credit financial history. We do this to assess creditworthiness and product suitability, reference agencies, insurance companies, retailers, comparison websites, check your identity, manage your account, trace and recover debts and prevent social media and fraud prevention agencies). criminal activity. • in certain circumstances we may also use information about health or We may also continue to exchange information about you with CRAs on an criminal convictions but we will only do this where allowed by law or if you ongoing basis, including about your settled accounts and any debts not fully give us your consent. repaid on time, information on funds going into the rendering of account, the relevant financial services to you: • Financial Advisory and Intermediaries Services Act 37 of 2002; • Financial Intelligence Centre Act 38 of 2001; 70 We collect, hold, use and disclose your balance on the You can find out more about where we collect personal information mainly about you account and, if you borrow, details of your repayments or whether you repay in from in our full privacy notice. full and on time. CRAs will share your information with other organisations, for example other organisations you ask to provide you with access to the services products and products that we provide. We will only process your information for a purpose you would reasonably expect, including: • Complying with the obligations contained in the contract concluded between yourself and the FSP • To confirm, verify and update your details • To comply with any legal and regulatory requirements Some of your information that we hold may include, your first and last name, email address, a home, postal or other physical address, other contact information, inter alia your title, birth date, gender, residency status and your banking details. Failing to provide compulsory information may lead to our organisation’s inability to carry out the functions necessary to perform as an authorised financial services provider. We may need to share your information to third parties provide advice, reports, analyses, products or services that you have requested. Where we share your information, we will take all precautions to ensure that the third party will treat your information with the same level of protection as required by us. • Your employer (where applicable); • The Compliance Officer of the organisation (where applicable) • Analytics and search engine providers assisting in the enhancement of our websites • Information Technology specialists assisting us with data storage, security, processing, analytics, etc • Auditors of the Organisation • Regulatory or governmental authorities such as the Financial Sector Conduct Authority and the Prudential Authority Your information may be hosted on servers managed by a third-party service provider, which may be located outside of South Africa. The third-party service providers are located in: • Israel • Cyprus • Bulgaria We confirm that the level of protection afforded to your personal information by that third country or international organisation is equal to the protection afforded by the POPI Act. As a data subject, you have the right to – • Request that we confirm, free of charge, whether or not, we hold personal information about you • Request that we provide you with a description of the personal information we hold about you, and to explain why and how it is being processed (please complete Annexure A) • Request that we consider your objections to the processing of your personal information (please complete Annexure B) • Lodge a complaint with the Information Regulator (please complete Annexure B). In the event that your personal information has not been processed in accordance with the POPI Act and the principles set out above, you have the right to lodge a complaint with the Information Regulator. For further information regarding the complaints process, please visit the website of the Information Regulator, as indicated below. Alternatively, you may contact the Information Regulator for further assistance: The Information Regulator: Adv Pansy Tlakula Physical Address: JD House, 00 Xxxxxxxx Xxxxxx, Xxxxxxxxxxxx, Xxxxxxxxxxxx, 2001 Email: xxxxxxxxxx.XX@xxxxxxx.xxx.xx Website: xxxxx://xxx.xxxxxxx.xxx.xx/inforeg/index.html 30. DISPUTE RESOLUTION‌ 30.1. Governing Lawservices.

Privacy Notice. PROTECTION OF PERSONAL INFORMATION ACT (“POPIA”)‌ The CFTC has approved regulations that impose various requirements on financial institutions' treatment of customer information. The regulations require that financial institutions develop privacy policies and disclose these policies to its customers. Interbank FX, LLC considers your privacy one of our utmost concerns. This Privacy Notice outlines our current policies and practices regarding how information about individual customers is collected and used. We understand that will send existing customers an updated Privacy Notice on an annual basis; also should any portion of our current policies and practices change you will be sent a revised Privacy Notice in advance, thus providing you with sufficient notice to respond prior to the effective date of the change. In order to provide you with individualized service, Interbank FX, LLC collects information about you from your personal information is important to you account application and other forms that you may be apprehensive about disclosing it. Your privacy is just as important deliver to us, and we are committed us or to safeguarding and processing your information in a lawful mannerthe firms that clear securities trades on the various domestic securities exchanges. We also want use this information to make sure that you understand how and open an Account for what purpose we you, process your information. If for any reason requests and transactions and to provide you think that your with additional information is not processed in a correct manner, or that your information is being used for a purpose other than that for what it was originally intended, you can contact our Information Officer. You can request access to the information we hold about you at any time and if you think that we have outdated information, please request us to update or correct it. We collect personal information directly from the following data subjects: • Prospective clients who enquire about our financial services • Clients who have appointed the representative as their broker Personal information is collected from you through the completion of the completion of an online application formproducts and services. This form is completed either electronically or in hard copy. You may also be requested In order to service your Account, effect your transactions and mail correspondence to you, we provide your personal information during your consultation with a representativeto other independent firms that specialize in providing these services. We may require these other independent firms to protect the confidentiality of your information and to use the information only for the purpose for which the disclosure is made. In the regular course of our business, we also collect information about your transactions with us and we may receive non-public information about you from other sources such as external third parties and from cookies our websitea consumer reporting agency. As an authorized financial services provider, we are obligated in terms of the following legislation to collect your We do not disclose any nonpublic personal information insofar as it relates about our customers to the rendering other independent firms, organizations or individuals except in furtherance of the relevant financial services our business relationship with you, or if compelled to you: • Financial Advisory and Intermediaries Services Act 37 do so by due process of 2002; • Financial Intelligence Centre Act 38 of 2001; 70 We collectlaw. If you decide at some point to close your Interbank FX, holdLLC Account, use and disclose your personal information mainly to provide you with access to the services and products that we provide. We will only process your information for a purpose you would reasonably expect, including: • Complying with the obligations contained in the contract concluded between yourself and the FSP • To confirm, verify and update your details • To comply with any legal and regulatory requirements Some of your information that we hold may include, your first and last name, email address, a home, postal or other physical address, other contact information, inter alia your title, birth date, gender, residency status and your banking details. Failing to provide compulsory information may lead to our organisation’s inability to carry out the functions necessary to perform as become an authorised financial services provider. We may need to share your information to third parties provide advice, reports, analyses, products or services that you have requested. Where we share your informationinactive customer, we will take all precautions continue to ensure that the third party will treat your information with the same level of protection as required by us. • Your employer (where applicable); • The Compliance Officer of the organisation (where applicable) • Analytics and search engine providers assisting in the enhancement of our websites • Information Technology specialists assisting us with data storage, security, processing, analytics, etc • Auditors of the Organisation • Regulatory or governmental authorities such as the Financial Sector Conduct Authority and the Prudential Authority Your information may be hosted on servers managed by a third-party service provider, which may be located outside of South Africa. The third-party service providers are located in: • Israel • Cyprus • Bulgaria We confirm that the level of protection afforded to your personal information by that third country or international organisation is equal adhere to the protection afforded by the POPI Actprivacy policies and practices described in this Notice. As a data subject, you have the right We restrict access to – • Request that we confirm, free of charge, whether or not, we hold nonpublic personal information about you • Request to those employees who need to know that we information to provide products or services to you. We maintain physical, electronic and procedural safeguards that comply with federal standards to guard your personal information. Should you with a description of have any questions or concerns about this Privacy Notice or the personal information we hold about you, and to explain why and how it is being processed (please complete Annexure A) • Request that we consider your objections to the processing privacy of your personal information (please complete Annexure B) • Lodge a complaint with the Information Regulator (please complete Annexure B). In the event that your personal information has not been processed in accordance with the POPI Act and the principles set out above, you have the right to lodge a complaint with the Information Regulator. For further information regarding the complaints processinformation, please visit the website of the Information Regulator, as indicated below. Alternatively, you may feel free to contact the Information Regulator for further assistance: The Information Regulator: Adv Pansy Tlakula Physical Address: JD HouseCompliance Department at (000) 000-0000, 00 Xxxxxxxx XxxxxxMonday through Friday, Xxxxxxxxxxxx, Xxxxxxxxxxxx, 2001 Email: xxxxxxxxxx.XX@xxxxxxx.xxx.xx Website: xxxxx://xxx.xxxxxxx.xxx.xx/inforeg/index.html 30. DISPUTE RESOLUTION‌ 30.1. Governing Lawbetween the hours of 8:00 a.m. and 5 p.m. Mountain Standard Time.

Privacy Notice. PROTECTION OF PERSONAL INFORMATION ACT (“POPIA”)‌ This privacy notice explains how we use any personal information we collect about you. You will also need to read through Appendix A, which specifically relates to your privacy of information, before signing and confirming your agreement within Appendix A. What Information Do We understand that Collect About You? We collect information about you when you engage for financial planning/financial advice/investment management services. This information will relate to your personal information is important to you and that you may be apprehensive about disclosing itfinancial circumstances. Your privacy is just as important to us, and we are committed to safeguarding and processing your information in a lawful manner. We also want to make sure that you understand how and for what purpose we process your information. If for any reason you think that your information is not processed in a correct manner, or that your information is being used for a purpose other than that for what it was originally intended, you can contact our Information Officer. You can request access to the information we hold about you at any time and if you think that we have outdated information, please request us to update or correct it. We collect personal information directly from the following data subjects: • Prospective clients who enquire about our financial services • Clients who have appointed the representative as their broker Personal information is collected from you through the completion of the completion of an online application form. This form is completed either electronically or in hard copy. You It may also be requested to provide include special catagories of personal data such as data about your personal information during your consultation with a representativehealth, if this is necessasary for the provision of our services. We may also collect information when you voluntaily complete client surveys or provide feedback to us. Information relating to the use of our website is collected using cookies. These are text files placed on your computer to collect standard internet log information and visitor behavior information. We’ll use the information collected from the website to personalise your repeat visits to the site. Information About Connected Individuals We may need to gather personal information about your close family members and dependants in order to provide our ser- vice to you effectively. In such cases it will be your responsibility to ensure you have the consent of the people concerned to pass their information on to us. We’ll provide a copy of this privacy notice for them, or where appropriate, ask you to pass the privacy information on to them. Why Do We Need To Collect And Use Your Personal Data? The primary legal basis that we intend to use for the processing of your data is for the performance of our contract with you. The information we collect about you is essential for us to be able to carry out the services you require from other sources such as external third parties and from cookies our websiteus effectivly. As an authorized financial services provider, we are obligated in terms of the following legislation to collect Without collecting your personal data we’d also be unable to fulfill our legal and regulatory obligations. How Will We Use The Information About You? We collect information insofar as it relates to the rendering of the relevant financial services to you: • Financial Advisory and Intermediaries Services Act 37 of 2002; • Financial Intelligence Centre Act 38 of 2001; 70 We collect, hold, use and disclose your personal information mainly about you in order to provide you with access to the services and products that we provide. We will only process your information for a purpose which you would reasonably expect, including: • Complying with the obligations contained in the contract concluded between yourself and the FSP • To confirm, verify and update your details • To comply with any legal and regulatory requirements Some of your information that we hold may include, your first and last name, email address, a home, postal or other physical address, other contact information, inter alia your title, birth date, gender, residency status and your banking details. Failing to provide compulsory information may lead to our organisation’s inability to carry out the functions necessary to perform as an authorised financial services provider. We may need to share your information to third parties provide advice, reports, analyses, products or services that you have requested. Where we share your information, we will take all precautions to ensure that the third party will treat your information with the same level of protection as required by engage us. • Your employer (where applicable); • The Compliance Officer of the organisation (where applicable) • Analytics and search engine providers assisting in the enhancement of our websites • Information Technology specialists assisting us with data storage, security, processing, analytics, etc • Auditors of the Organisation • Regulatory or governmental authorities such as the Financial Sector Conduct Authority and the Prudential Authority Your information may be hosted on servers managed by a third-party service provider, which may be located outside of South Africa. The third-party service providers are located in: • Israel • Cyprus • Bulgaria We confirm that the level of protection afforded to your personal information by that third country or international organisation is equal to the protection afforded by the POPI Act. As a data subject, you have the right to – • Request that we confirm, free of charge, whether or not, we hold personal information about you • Request that we provide you with a description of the personal information we hold about you, and to explain why and how it is being processed (please complete Annexure A) • Request that we consider your objections to the processing of your personal information (please complete Annexure B) • Lodge a complaint with the Information Regulator (please complete Annexure B). In the event that your personal information has not been processed in accordance with the POPI Act and the principles set out above, you have the right to lodge a complaint with the Information Regulator. For further information regarding the complaints process, please visit the website of the Information Regulator, as indicated below. Alternatively, you may contact the Information Regulator for further assistance: The Information Regulator: Adv Pansy Tlakula Physical Address: JD House, 00 Xxxxxxxx Xxxxxx, Xxxxxxxxxxxx, Xxxxxxxxxxxx, 2001 Email: xxxxxxxxxx.XX@xxxxxxx.xxx.xx Website: xxxxx://xxx.xxxxxxx.xxx.xx/inforeg/index.html 30. DISPUTE RESOLUTION‌ 30.1. Governing Law.

Privacy Notice. PROTECTION OF PERSONAL INFORMATION ACT (“POPIA”)‌ We understand that your This privacy notice explains how we use any personal information is important to you and that you may be apprehensive we collect about disclosing it. Your privacy is just as important to us, and we are committed to safeguarding and processing your information in a lawful manner. We also want to make sure that you understand how and for what purpose we process your information. If for any reason you think that your information is not processed in a correct manner, or that your information is being used for a purpose other than that for what it was originally intended, you can contact our Information Officer. You can request access to the information we hold about you at any time and if you think that we have outdated information, please request us to update or correct ityou. We collect personal information directly from the following data subjects: • Prospective clients who enquire about our you when you engage us for financial services • Clients who have appointed the representative as their broker Personal information is collected from you through the completion of the completion of an online application formplanning advice. This form is completed either electronically or in hard copyinformation will relate to your personal and financial circumstances. You It may also be requested to provide include special categories of personal data such as data about your personal information during your consultation with a representativehealth, if this is necessary for the provision of our services. We may also collect information when you voluntarily complete client surveys or provide feedback to us. Information relating to usage of our website is collected using cookies. These are text files placed on your computer to collect standard internet log information and visitor behaviour information. We’ll use your information collected from the website to personalise your repeat visits to the site We may need to gather personal information about your close family members and dependants in order to provide our service to you effectively. In such cases it will be your responsibility to ensure that you have the consent of the people concerned to pass their information on to us. We’ll provide a copy of this privacy notice for them or, where appropriate, ask you to pass the privacy information to them. The primary legal basis that we intend to use for the processing of your data is for the performance of our contract with you. The information that we collect about you is essential for us to be able to carry out the services that you require from other sources such as external third parties us effectively. Without collecting your personal data we’d also be unable to fulfil our legal and from cookies our websiteregulatory obligations. As an authorized financial services provider, we are obligated Where special category data is required we’ll obtain your explicit consent in terms of the following legislation order to collect your personal and process this information. We collect information insofar as it relates to the rendering of the relevant financial services to you: • Financial Advisory and Intermediaries Services Act 37 of 2002; • Financial Intelligence Centre Act 38 of 2001; 70 We collect, hold, use and disclose your personal information mainly about you in order to provide you with access the services for which you engage us. If you agree, we may email you about other products or services that we think may be of interest to you. In order to deliver our services to you effectively we may send your details to third parties such as those that we engage for professional compliance, accountancy or legal services as well as product and platform providers that we use to arrange financial products for you. Where third parties are involved in processing your data we’ll have a contract in place with them to ensure that the nature and purpose of the processing is clear, that they are subject to a duty of confidence in processing your data and that they’ll only act in accordance with our written instructions. Where it’s necessary for your personal data to be forwarded to a third party we’ll use appropriate security measures to protect your personal data in transit, such as password protection and/or encryption of data to enhance the security of the data during transfer. To fulfil our obligations in respect of prevention of money-laundering and other financial crime we may send your details to third party agencies for identity verification purposes. During the course of our relationship with you we’ll retain personal data which is necessary to provide services to you. We’ll take all reasonable steps to keep your personal data up to date throughout our relationship. We are also subject to regulatory requirements to retain your data for specified minimum periods. These are, generally: • Five years for investment business • Three years for mortgage business • Indefinitely for pension transfers and opt-outs • Three years for insurance business These are minimum periods during which we have a legal obligation to retain your records. In any case, we will not keep your personal data for longer than five years after our relationship with you has ended. We reserve the right to retain data for longer where we believe it's in our legitimate interests to do so. You have the right to request deletion of your personal data. We’ll comply with this request, subject to the services restrictions of our regulatory obligations and products that we providelegitimate interests as noted above. We will only process your information for You have the right to request a purpose you would reasonably expect, including: • Complying with copy of the obligations contained in the contract concluded between yourself and the FSP • To confirm, verify and update your details • To comply with any legal and regulatory requirements Some of your information that we hold may include, your first and last name, email address, about you. If you’d like a home, postal copy of some or other physical address, other contact information, inter alia your title, birth date, gender, residency status and your banking details. Failing to provide compulsory information may lead to our organisation’s inability to carry out the functions necessary to perform as an authorised financial services provider. We may need to share your information to third parties provide advice, reports, analyses, products or services that you have requested. Where we share your information, we will take all precautions to ensure that the third party will treat your information with the same level of protection as required by us. • Your employer (where applicable); • The Compliance Officer of the organisation (where applicable) • Analytics and search engine providers assisting in the enhancement of our websites • Information Technology specialists assisting us with data storage, security, processing, analytics, etc • Auditors of the Organisation • Regulatory or governmental authorities such as the Financial Sector Conduct Authority and the Prudential Authority Your information may be hosted on servers managed by a third-party service provider, which may be located outside of South Africa. The third-party service providers are located in: • Israel • Cyprus • Bulgaria We confirm that the level of protection afforded to your personal information please email or write to us using the contact details noted below. When your personal data is processed by that third country or international organisation is equal to the protection afforded by the POPI Act. As a data subject, automated means you have the right to – • Request that we confirm, free of charge, whether or not, we hold personal information about you • Request that we provide you with a description of the personal information we hold about you, and ask us to explain why and how it is being processed (please complete Annexure A) • Request that we consider your objections to the processing of move your personal information (please complete Annexure B) • Lodge a complaint with the Information Regulator (please complete Annexure B)data to another organisation for their use. In the event We have an obligation to ensure that your personal information has not been processed in accordance with the POPI Act is accurate and the principles set out above, up to date. Please ask us to correct or remove any information that you have the right think is incorrect. We’d like to lodge a complaint with the Information Regulatorsend you information about our products and which may be of interest to you. For further information regarding the complaints process, please visit the website of the Information Regulator, as indicated below. AlternativelyIf you’ve agreed to receive marketing information, you may opt out at a later date. You have a right at any time to stop us from contacting you for marketing purposes. If you no longer wish to be contacted for marketing purposes, please contact the Information Regulator for further assistance: The Information Regulator: Adv Pansy Tlakula Physical Address: JD House, 00 Xxxxxxxx Xxxxxx, Xxxxxxxxxxxx, Xxxxxxxxxxxx, 2001 Email: xxxxxxxxxx.XX@xxxxxxx.xxx.xx Website: xxxxx://xxx.xxxxxxx.xxx.xx/inforeg/index.html 30. DISPUTE RESOLUTION‌ 30.1. Governing Lawus by email or post.

Privacy Notice. PROTECTION OF PERSONAL INFORMATION ACT (“POPIA”)‌ This privacy notice explains how we use any personal information we collect about you. to your personal and financial circumstances. It may also include special categories of personal data such as data about your health, if this is necessary for the provision of our services. We understand collate this data by note taking and the completion of questionnaires. Audio recordings may also be made of telephone calls and meetings. Information relating to usage of our website is collected using cookies. These are text files placed on your computer to collect standard internet log information and visitor behaviour information. We will use your information collected from the website to personalise your repeat visits to the site. Full details of how cookies work is provided on our website xxx.xxxxxxxxxxx.xx.xx to provide our service to you effectively. In such cases it will be your responsibility to ensure that you have the consent of the people concerned to pass their information on to us. We will provide a copy of this privacy notice for them or, where appropriate, ask you to pass the privacy information to them. The primary legal basis that we intend to use for the processing of your data is for the performance of our contract with you. The information that we collect about you is essential for us to be able to carry out the services that you require from us effectively. Without collecting your personal data we would also be unable to fulfil our legal and regulatory obligations. Where special category data of a sensitive nature is required we will obtain your explicit consent to collect and process this information. An example of this is where information is required about your health. providers that we use to arrange financial products for you. Where you are also a client of Xxxxx Xxxxxxxx Chartered Accountants, we will supply information needed by them to carry out the services you have engaged them for. We may also be required to forward your data to our regulator, the Financial Conduct Authority when requested. Where third parties are involved in processing your data we have a contract in place with them to ensure that the nature and purpose of the processing is clear, that they are subject to a duty of confidence in processing your data and that they will only act in accordance with our written instructions. Where it is necessary for your personal data to be forwarded to a third party we will use appropriate security measures to protect your personal data in transit. This will include the encryption of data transmitted electronically. To fulfil our obligations in respect of prevention of money-laundering and other financial crime we will send your details to a credit referencing agency for identity verification purposes. The privacy notice of the credit referencing agency we use for this purpose is available at xxx.xxxxxxxxxx.xx.xx/xxxxx-xxxxxxxxxxx/ bureau-privacy-notice This provides information of how they will use and share your personal data. We are also subject to regulatory requirements to retain your data for specified minimum periods. These are, generally: - • Five years for investment business • Three years for insurance business • Indefinitely for pension transfers and opt-out business These are minimum periods, during which we have a legal obligation to retain your records. We reserve the right to retain data for longer where we believe it is in our legitimate interests to do so. You have the right to request deletion of your personal data. We will comply with this request, subject to the restrictions of our regulatory obligations and legitimate interests as noted above. You have the right to request a copy of the information that we hold about you. If you would like a copy of some or all of your personal information, please email or write to us using the contact details noted below. We have an obligation to ensure that your personal information is important accurate and up to you and date. Please ask us to correct or remove any information that you may be apprehensive about disclosing it. Your privacy think is just as important to us, and we are committed to safeguarding and processing your information in a lawful manner. We also want to make sure that you understand how and for what purpose we process your informationincorrect. If for you have any reason you think that your information is not processed in a correct manner, or that your information is being used for a purpose other than that for what it was originally intended, you can contact our Information Officer. You can request access to the information we hold about you at any time and if you think that we have outdated information, please request us to update or correct it. We collect personal information directly from the following data subjects: • Prospective clients who enquire questions about our financial services • Clients who have appointed the representative as their broker Personal information is collected from you through the completion of the completion of an online application form. This form is completed either electronically privacy policy or in hard copy. You may also be requested to provide your personal information during your consultation with a representative. We may also collect information about you from other sources such as external third parties and from cookies our website. As an authorized financial services provider, we are obligated in terms of the following legislation to collect your personal information insofar as it relates to the rendering of the relevant financial services to you: • Financial Advisory and Intermediaries Services Act 37 of 2002; • Financial Intelligence Centre Act 38 of 2001; 70 We collect, hold, use and disclose your personal information mainly to provide you with access to the services and products that we provide. We will only process your information for a purpose you would reasonably expect, including: • Complying with the obligations contained in the contract concluded between yourself and the FSP • To confirm, verify and update your details • To comply with any legal and regulatory requirements Some of your information that we hold may include, your first and last name, email address, a home, postal or other physical address, other contact information, inter alia your title, birth date, gender, residency status and your banking details. Failing to provide compulsory information may lead to our organisation’s inability to carry out the functions necessary to perform as an authorised financial services provider. We may need to share your information to third parties provide advice, reports, analyses, products or services that you have requested. Where we share your information, we will take all precautions to ensure that the third party will treat your information with the same level of protection as required by us. • Your employer (where applicable); • The Compliance Officer of the organisation (where applicable) • Analytics and search engine providers assisting in the enhancement of our websites • Information Technology specialists assisting us with data storage, security, processing, analytics, etc • Auditors of the Organisation • Regulatory or governmental authorities such as the Financial Sector Conduct Authority and the Prudential Authority Your information may be hosted on servers managed by a third-party service provider, which may be located outside of South Africa. The third-party service providers are located in: • Israel • Cyprus • Bulgaria We confirm that the level of protection afforded to your personal information by that third country or international organisation is equal to the protection afforded by the POPI Act. As a data subject, you have the right to – • Request that we confirm, free of charge, whether or not, we hold personal information about you • Request that we provide you with a description of the personal information we hold about you, please contact us by email at xxxxxxxxxxxxxx@xxxxxxxxxxx.xx.xx or write to use to us at Ironstone Place, Kettering, NN14 1FN. This is our standard client agreement upon which we intend to rely. This agreement should be read in conjunction with the Services and Costs document and the engagement letter that you will be issued with prior to explain why us commencing work on your behalf. We are authorised and how it regulated by the Financial Conduct Authority (FCA), 00 Xxxxxxxxx Xxxxxx, Xxxxxxxxx, Xxxxxx, X00 0XX. xxx.xxx.xxx.xx. Our firm reference number is being processed (please complete Annexure A) 143390. You can check our details on the Financial Services Register by visiting the FCA’s website xxx.xxx.xxx.xx/xxxxx/xxxxxxx-xxxxxxxxx/xxxxxxxx or by contacting the FCA on 0800 111 6768. As we predominantly recommend our own investment services and solutions our investment advice is Restricted Advice under the rules of our regulator the Financial Conduct Authority. On the occasions where our own investment solutions are not suitable for you we may recommend investment products and services provided by other product providers selected from across the marketplace. We are also able to determine the ongoing suitability of existing investments you may hold and advise you accordingly. We do not provide advice on the following types of investment: - • Request that Unregulated Collective Investment Schemes • Qualified Investor Schemes • Derivatives contracts For insurance and annuities we consider your objections to will make a recommendation after researching the processing whole of the market. In all cases we will carry out an analysis of your personal information (please complete Annexure B) • Lodge a complaint with the Information Regulator (please complete Annexure B). In the event that your personal information has not been processed in accordance with the POPI Act circumstances, needs and the principles set out above, you have the right to lodge a complaint with the Information Regulator. For further information regarding the complaints process, please visit the website of the Information Regulator, as indicated below. Alternatively, you may contact the Information Regulator for further assistance: The Information Regulator: Adv Pansy Tlakula Physical Address: JD House, 00 Xxxxxxxx Xxxxxx, Xxxxxxxxxxxx, Xxxxxxxxxxxx, 2001 Email: xxxxxxxxxx.XX@xxxxxxx.xxx.xx Website: xxxxx://xxx.xxxxxxx.xxx.xx/inforeg/index.html 30. DISPUTE RESOLUTION‌ 30.1. Governing Lawobjectives before making any recommendation.

Privacy Notice. PROTECTION OF PERSONAL INFORMATION ACT (“POPIA”)‌ We understand that your This privacy notice explains how we use any personal information is important to you and that you may be apprehensive we collect about disclosing it. Your privacy is just as important to us, and we are committed to safeguarding and processing your information in a lawful manner. We also want to make sure that you understand how and for what purpose we process your information. If for any reason you think that your information is not processed in a correct manner, or that your information is being used for a purpose other than that for what it was originally intended, you can contact our Information Officer. You can request access to the information we hold about you at any time and if you think that we have outdated information, please request us to update or correct ityou. We collect personal information directly from the following data subjects: • Prospective clients who enquire about our you when you engage us for financial services • Clients who have appointed the representative as their broker Personal information is collected from you through the completion of the completion of an online application formplanning advice. This form is completed either electronically or in hard copyinformation will relate to your personal and financial circumstances. You It may also be requested to provide include special categories of personal data such as data about your personal information during your consultation with a representativehealth, if this is necessary for the provision of our services. We may also collect information when you voluntarily complete client surveys or provide feedback to us. Information relating to usage of our website is collected using cookies. These are text files placed on your computer to collect standard internet log informati use your information collected from the website to personalise your repeat visits to the site We may need to gather personal information about your close family members and dependants in order to provide our service to you effectively. In such cases it will be your responsibility to ensure a copy of this privacy notice for them or, where appropriate, ask you to pass the privacy information to them. The primary legal basis that we intend to use for the processing of your data is for the performance of our contract with you. The information that we collect about you is essential for us to be able to carry out the services that you require from other sources such as external third parties and from cookies our websiteus effectively. As an authorized financial services provider, we are obligated in terms of the following legislation to collect Without collecting your personal data Where process this information. We collect information insofar as it relates to the rendering of the relevant financial services to you: • Financial Advisory and Intermediaries Services Act 37 of 2002; • Financial Intelligence Centre Act 38 of 2001; 70 We collect, hold, use and disclose your personal information mainly about you in order to provide you with access to the services and products that for which you engage us. If you agree, we provide. We will only process your information for a purpose may email you would reasonably expect, including: • Complying with the obligations contained in the contract concluded between yourself and the FSP • To confirm, verify and update your details • To comply with any legal and regulatory requirements Some of your information that we hold may include, your first and last name, email address, a home, postal or about other physical address, other contact information, inter alia your title, birth date, gender, residency status and your banking details. Failing to provide compulsory information may lead to our organisation’s inability to carry out the functions necessary to perform as an authorised financial services provider. We may need to share your information to third parties provide advice, reports, analyses, products or services that we think may be of interest to you. In order to deliver our services to you effectively we may send your details to third parties such as those that we engage for professional compliance, accountancy or legal services as well as product and platform providers that we use to arrange financial products for you. ensure that the nature and purpose of the processing is clear, that they are subject to a duty of act in accordance with our written instructions. security measures to protect your personal data in transit, such as password protection and/or encryption of data to enhance the security of the data during transfer. To fulfil our obligations in respect of prevention of money-laundering and other financial crime we may send your details to third party agencies for identity verification purposes. throughout our relationship. We are also subject to regulatory requirements to retain your data for specified minimum periods. These are, generally: Five years for investment business Three years for mortgage business Indefinitely for pension transfers and opt-outs Three years for insurance business These are minimum periods during which we have requesteda legal obligation to retain your records. Where we share your informationIn any case, we will take all precautions not keep your personal data for longer than five years after our relationship with you has ended. We reserve the right to ensure that retain data for longer where we believe it's in our legitimate interests to do so. You have the third party will treat your information with right to requ to the same level of protection as required by us. • Your employer (where applicable); • The Compliance Officer of the organisation (where applicable) • Analytics and search engine providers assisting in the enhancement restrictions of our websites • Information Technology specialists assisting us with data storage, security, processing, analytics, etc • Auditors regulatory obligations and legitimate interests as noted above. You have the right to request a of the Organisation • Regulatory some or governmental authorities such as the Financial Sector Conduct Authority and the Prudential Authority Your information may be hosted on servers managed by a third-party service provider, which may be located outside all of South Africa. The third-party service providers are located in: • Israel • Cyprus • Bulgaria We confirm that the level of protection afforded to your personal information please email or write to us using the contact details noted below. When your personal data is processed by that third country or international organisation is equal to the protection afforded by the POPI Act. As a data subject, automated means you have the right to – • Request that we confirm, free of charge, whether or not, we hold personal information about you • Request that we provide you with a description of the personal information we hold about you, and ask us to explain why and how it is being processed (please complete Annexure A) • Request that we consider your objections to the processing of move your personal information (please complete Annexure B) • Lodge a complaint with the Information Regulator (please complete Annexure B)data to another organisation for their use. In the event We have an obligation to ensure that your personal information has not been processed in accordance with the POPI Act is accurate and the principles set out above, up to date. Please ask us to correct or remove any information that you have the right think is incorrect. agreed to lodge a complaint with the Information Regulator. For further information regarding the complaints process, please visit the website of the Information Regulator, as indicated below. Alternativelyreceive marketing information, you may opt out at a later date. You have a right at any time to stop us from contacting you for marketing purposes. If you no longer wish to be contacted for marketing purposes, please contact the Information Regulator for further assistance: The Information Regulator: Adv Pansy Tlakula Physical Address: JD House, 00 Xxxxxxxx Xxxxxx, Xxxxxxxxxxxx, Xxxxxxxxxxxx, 2001 Email: xxxxxxxxxx.XX@xxxxxxx.xxx.xx Website: xxxxx://xxx.xxxxxxx.xxx.xx/inforeg/index.html 30. DISPUTE RESOLUTION‌ 30.1. Governing Lawus by email or post.

Privacy Notice. PROTECTION OF PERSONAL INFORMATION ACT (“POPIA”)‌ This privacy notice tells you what to expect when Xxxxx Xxxx Financial Planning Ltd collects personal information. It applies to information we collect about you. To enable us to provide the services we have agreed and for other related purposes - including updating and enhancing customer records, analysis for management purposes and statutory returns, crime prevention and legal & regulatory compliance – we may obtain, use, process and disclose personal data about you. We understand may collect and process the following data about you: • Information that your you provide by filing in forms on our site xxx.xxxxxxxxx.xx.xx. • Information that you provide to us by telephone; e-mail or face to face. • If you contact us, we may keep a copy of that correspondence. In many circumstances we will not disclose personal data without consent. However, when we investigate a complaint, for example, we will need to share personal information is important with the organisation concerned and with other relevant bodies. We may share your information with third party service providers such as insurance providers, compliance, and other agents relevant to you and that you may be apprehensive about disclosing itthe business activity. Your privacy is just as important Any email sent to us, including any attachments, may be monitored and used by us for reasons of security and for monitoring compliance with office policy. Email monitoring or blocking software may also be used. Please be aware that you have a responsibility to ensure that any email you send to us is within the bounds of the law. Xxxxx Xxxx Financial Planning Ltd provide a range of Financial Services to Data Subjects. We process data provided by the data subject and other sources in order to deliver the appropriate products and services to Data Subjects. We have to hold the details of the people who have requested the service in order to provide it. However, we only use these details to provide the service the person has requested and for other closely related purposes. For example, we might use information about people who have used our services to carry out a survey to find out if they are committed happy with the level of service they received. When people do subscribe to safeguarding our services, they can cancel their subscription at any time and are given an easy way of doing this. If you agree, we may email you about other products or services that we think may be of interest to you. We will not share your information for marketing purposes with companies outside our group of companies or with other companies. In order to deliver our services to you effectively we may send your details to third parties such as those that we engage for professional compliance, accountancy or legal services as well as product and platform providers that we use to arrange financial products for you. Where third parties are involved in processing your data we’ll have a contract in place with them to ensure that the nature and purpose of the processing is clear, that they are subject to a duty of confidence in processing your data and that they’ll only act in accordance with our written instructions. Where it’s necessary for your personal data to be forwarded to a third party we’ll use appropriate security measures to protect your personal data in transit such as password protection. To fulfil our obligations in respect of prevention of money-laundering and other financial crime we may send your details to third party agencies for identity verification purposes. When we receive a complaint from a person, details of the complaint including the identity of the complainant and any other individuals involved in the complaint, are forwarded to our Compliance Officer for investigation. We will only use the personal information we collect to process the complaint and to check on the level of service we provide. We usually have to disclose the complainant’s identity to whoever the complaint is about. This is inevitable where, for example, the accuracy of a person’s record is in dispute. We usually have to disclose details of the complaint to our professional Indemnity Insurance Broker and Insurer. We may also be required to provide a copy of our file to the Financial Ombudsman Service should an adjudicator be required to consider the complaint case. We are required to disclose to The Financial Conduct Authority (FCA) high level analytics concerning the number and nature of complaints received. This data does not include names or details that identify the specific data subject. Personal information relating to a complaint will be retained indefinitely from closure. It will be retained in a lawful mannersecure environment and access to it will be restricted according to the ‘need to know’ principle. We also want to make sure that Under the General Data Protection Regulations (GDPR) you understand how and for what purpose we process your information. If for any reason you think that your information is not processed in a correct manner, or that your information is being used for a purpose other than that for what it was originally intended, have rights as an individual which you can contact our Information Officer. You can request access exercise in relation to the information we hold about you. Your rights as an individual which you at any time and if you think that we have outdated information, please request us to update or correct it. We collect personal information directly from the following data subjects: • Prospective clients who enquire about our financial services • Clients who have appointed the representative as their broker Personal information is collected from you through the completion of the completion of an online application form. This form is completed either electronically or can exercise in hard copy. You may also be requested to provide your personal information during your consultation with a representative. We may also collect information about you from other sources such as external third parties and from cookies our website. As an authorized financial services provider, we are obligated in terms of the following legislation to collect your personal information insofar as it relates relation to the rendering of the relevant financial services to you: • Financial Advisory and Intermediaries Services Act 37 of 2002; • Financial Intelligence Centre Act 38 of 2001; 70 We collect, hold, use and disclose your personal information mainly to provide you with access to the services and products that we provide. We will only process your information for a purpose you would reasonably expect, including: • Complying with the obligations contained in the contract concluded between yourself and the FSP • To confirm, verify and update your details • To comply with any legal and regulatory requirements Some of your information that we hold may include, your first and last name, email address, a home, postal or other physical address, other contact information, inter alia your title, birth date, gender, residency status and your banking details. Failing to provide compulsory information may lead to our organisation’s inability to carry out the functions necessary to perform as an authorised financial services provider. We may need to share your information to third parties provide advice, reports, analyses, products or services that you have requested. Where we share your information, we will take all precautions to ensure that the third party will treat your information with the same level of protection as required by us. • Your employer (where applicable); • The Compliance Officer of the organisation (where applicable) • Analytics and search engine providers assisting in the enhancement of our websites • Information Technology specialists assisting us with data storage, security, processing, analytics, etc • Auditors of the Organisation • Regulatory or governmental authorities such as the Financial Sector Conduct Authority and the Prudential Authority Your information may be hosted on servers managed by a third-party service provider, which may be located outside of South Africa. The third-party service providers are located in: • Israel • Cyprus • Bulgaria We confirm that the level of protection afforded to your personal information by that third country or international organisation is equal to the protection afforded by the POPI Act. As a data subject, you have the right to – • Request that we confirm, free of charge, whether or not, we hold personal information about you • Request that we provide you with a description of the personal information we hold about you Access to Personal Information (Portability) Data Subjects may submit a Subject Access Request (SAR) - in order to obtain a copy of the personal data that we hold about them in a structured and portable manner. All SAR requests should be sent to: Data Protection Officer: Xxxxx Xxxx, Xxxxx Xxxx Financial Planning Ltd, The Old Forge, 00x Xxxxxx Xxxxxx, Xxxxxxxx, Xxxx, XX00 0XX. Telephone: 00000 000000. Email: xxxxx@xxxxxxxxx.xx.xx  Confirmation of Whether, and Where, the Controller is Processing Personal Data Xxxxx Xxxx Financial Planning Ltd is the Data Controller and a Processor. Xxxxx Xxxx Financial Planning Ltd undertakes data processing within the EEA.  Right of Data Subjects to explain why and how it is being processed Erasure (please complete Annexure ARight to be Forgotten) • Request that we consider your objections Data Subjects may notify Xxxxx Xxxx Financial Planning Ltd if they wish to exercise their right to erasure. Such a withdrawal of Consent does not affect the lawfulness of processing based on consent prior to the withdrawal. Data Subjects that exercise this right will be removed from any marketing or future contact. Xxxxx Xxxx Financial Planning Ltd may retain a copy of any personal data and be retained by the Controller if the processing is necessary for the establishment, exercise or defence of your personal information (please complete Annexure B) • Lodge a complaint with the Information Regulator (please complete Annexure B). In the event that your personal information has not been processed in accordance with the POPI Act and the principles set out above, you have the right to lodge a complaint with the Information Regulator. For further information regarding the complaints process, please visit the website of the Information Regulator, as indicated below. Alternatively, you may contact the Information Regulator for further assistance: The Information Regulator: Adv Pansy Tlakula Physical Address: JD House, 00 Xxxxxxxx Xxxxxx, Xxxxxxxxxxxx, Xxxxxxxxxxxx, 2001 Email: xxxxxxxxxx.XX@xxxxxxx.xxx.xx Website: xxxxx://xxx.xxxxxxx.xxx.xx/inforeg/index.html 30. DISPUTE RESOLUTION‌ 30.1. Governing Lawlegal claims.

Privacy Notice. PROTECTION OF PERSONAL INFORMATION ACT This notice explains how Avire Trading Limited (“POPIA”)‌ referred to in this notice as Avire, we or us) collects and uses your personal information in connection with the use of our Services including our Products, Website(s), Hosted Services (including Cloud), Apps, and other services. This privacy notice is to inform you about: • How to contact us. • What personal information is; • How we collect your personal information; • The types of personal information we collect; • How we use your personal information; • The legal basis for processing your personal information; • What will happen if you do not provide the information we request; • How we share your personal information; • How we keep your personal information secure; • When do we transfer your information overseas; • How long we keep your personal information; • Your rights in relation to your personal information; and • How to make complaints in relation to your personal information. The table at the end of this notice provides an overview of the data that we collect, the purposes for which we use that data, the legal basis which permits us to use your information and the rights that you have in relation to your information. We will treat all of your personal information as confidential and in accordance with the Data Protection Legislation and your personal information will only be shared with others in accordance with this privacy notice. We keep this privacy notice up to date, so if there are any changes to the way in which your personal information is used this privacy notice will be updated and we will notify you of the changes. Our contact details are as follows: Address: Avire Trading Ltd, Xxxx 0, Xxx Xxxxxxxxxx, Xxxxxxx Xxxx, Maidenhead SL6 7RJ, United Kingdom Telephone: +00 (0)0000 000000 Avire has appointed a data protection officer who has responsibility for advising Avire on its data protection obligations. You can contact the data protection officer using the contact details above. Personal information is any information that tells us something about an individual. This could include information such as name, contact details, phone number or date of birth. We collect personal information about you from various sources including: • when setting up a SmartView Hub account; • when performing local device set up on XxxxxXxxxxx.xxx • when adding or removing users to a SmartView Hub account; and • from you when using a SmartView Hub account. • Personal and/or business contact details such as employer, name, title, address and email addresses; • Account information (including details of work carried out by you in relation to any installation); • Geo-location information which tells us you carried out work at a particular location and other information obtained through our Cloud Services • IP Adress and Subnet Mask of installed unit on client’s network We use your information for the following purposes: • to conduct checks to authorize an SmartView Hub account; • to administer the Terms of Use for the Cloud Services, • to notify you about other products and services that we offer; • for business management and planning purposes, including accounting and auditing; • to conduct data analysis to provide information useful to our customers, including but not limited to, lift telemetry, usage, and fault diagnosis information • to conduct data analytics studies to review and better understand our customers • to comply with our legal obligations and professional codes; and • to comply with information requests that we receive from regulators and law enforcement authorities or to comply with court orders. Under Data Protection Legislation we are only permitted to use your personal information if we have a legal basis for doing so as set out in the Data Protection Legislation. We rely on the following legal bases to use your information in relation to our Cloud Services: • where we need information to perform the contract we have entered into with you; and • where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests. In more limited circumstances we may also rely on the following legal bases: • Where we need to protect your interests (or someone else’s interests); and • Where it is needed in the public interest or for official purposes. The table at the end of this notice provides more detail about the information that we use, the legal basis that we rely on in each case and your rights. We need some of your personal information in order to perform our contract with you to provide the Cloud Services. For example, we need to know your name so that a profile can be created for an SmartView Hub account. Where information is needed for these purposes if you do not provide it we will not be able to offer our Cloud Services to you. We explain when this is the case at the point where we collect information from you. We share your personal information in the following ways: • Where we use third party services providers who process personal information on our behalf in order to provide services to us. This includes IT systems providers and IT contractors, cloud service providers, and wireless network operators • Where we share your personal information with third parties we ensure that we have appropriate measures in place to safeguard your personal information and to ensure that it is solely used for We will ensure access to personal information is restricted to employees of Avire on a need to know basis. Training will be provided to any of those employees of Avire who need access to your personal information to ensure it is secure at all times. When data is transferred to countries outside of the UK and the European Economic Area those countries may not offer an equivalent level of protection for personal information to the laws in the UK. Where this is the case we will ensure that appropriate safeguards are put in place to protect your personal information. As a general rule we keep your personal information for as long as you retain a user profile on a SmartView Hub Account and for a period of 6 months after your profile is removed. However, where we have statutory obligations to keep personal information for a longer period or where we may need your information for a longer period in case of a legal claim, then the retention period may be longer. Full details of the retention periods that apply to your information are set out in our Data Retention Policy which is available on request. You have a number of rights in relation to your personal information, these include the right to: • be informed about how we use your personal information; • obtain access to your personal information that we hold; • request that your personal information is important to corrected if you and believe it is incorrect, incomplete or inaccurate; • request that you may be apprehensive about disclosing it. Your privacy is just as important to us, and we are committed to safeguarding and processing erase your personal information in a lawful manner. We also want the following circumstances: o if Avire is continuing to make sure that you understand how and process personal data beyond the period when it is necessary to do so for what the purpose we process your information. If for any reason you think that your information is not processed in a correct manner, or that your information is being used for a purpose other than that for what which it was originally intended, collected; o if Avire is relying on consent as the legal basis for processing and you can contact our Information Officer. You can request access withdraw consent; o if Avire is relying on legitimate interest as the legal basis for processing and you object to the information we hold about you at any time this processing and if you think that we have outdated information, please request there is no overriding compelling ground which enables us to update continue with the processing; o if the personal data has been processed unlawfully (i.e. in breach of the requirements of the Data Protection Legislation); or correct it. We collect o if it is necessary to delete the personal data to comply with a legal obligation; • ask us to restrict our data processing activities where you consider that: o personal information directly from the following data subjects: • Prospective clients who enquire about is inaccurate; o our financial services • Clients who have appointed the representative as their broker Personal information is collected from you through the completion of the completion of an online application form. This form is completed either electronically or in hard copy. You may also be requested to provide your personal information during your consultation with a representative. We may also collect information about you from other sources such as external third parties and from cookies our website. As an authorized financial services provider, we are obligated in terms of the following legislation to collect your personal information insofar as it relates to the rendering of the relevant financial services to you: • Financial Advisory and Intermediaries Services Act 37 of 2002; • Financial Intelligence Centre Act 38 of 2001; 70 We collect, hold, use and disclose your personal information mainly to provide you with access to the services and products that we provide. We will only process your information for a purpose you would reasonably expect, including: • Complying with the obligations contained in the contract concluded between yourself and the FSP • To confirm, verify and update your details • To comply with any legal and regulatory requirements Some of your information that we hold may include, your first and last name, email address, a home, postal or other physical address, other contact information, inter alia your title, birth date, gender, residency status and your banking details. Failing to provide compulsory information may lead to our organisation’s inability to carry out the functions necessary to perform as an authorised financial services provider. We may need to share your information to third parties provide advice, reports, analyses, products or services that you have requested. Where we share your information, we will take all precautions to ensure that the third party will treat your information with the same level of protection as required by us. • Your employer (where applicable); • The Compliance Officer of the organisation (where applicable) • Analytics and search engine providers assisting in the enhancement of our websites • Information Technology specialists assisting us with data storage, security, processing, analytics, etc • Auditors of the Organisation • Regulatory or governmental authorities such as the Financial Sector Conduct Authority and the Prudential Authority Your information may be hosted on servers managed by a third-party service provider, which may be located outside of South Africa. The third-party service providers are located in: • Israel • Cyprus • Bulgaria We confirm that the level of protection afforded to your personal information by that third country or international organisation is equal to the protection afforded by the POPI Act. As a data subject, you have the right to – • Request that we confirm, free of charge, whether or not, we hold personal information about you • Request that we provide you with a description of the personal information we hold about you, and to explain why and how it is being processed (please complete Annexure A) • Request that we consider your objections to the processing of your personal information (please complete Annexure B) is unlawful; o where we no longer need the personal information but you require us to keep it to enable you to establish, exercise or defend a legal claim; or o where you have raised an objection to our use of your personal information; • Lodge request a complaint copy of certain personal information that you have provided to us in a commonly used electronic format. This right relates to personal information that you have provided to us that we need in order to perform our agreement with the Information Regulator (please complete Annexure B). In the event that you and personal information where we are relying on consent to process your personal information; • object to our processing of your personal information has where we are relying on legitimate interests or exercise of a public interest task to make the processing lawful. If you raise an objection we will carry out an assessment to determine whether we have an overriding legitimate ground which entitles us to continue to process your personal information; and • not been processed in accordance with the POPI Act and the principles set be subject to automated decisions which produce legal effects or which could have a similarly significant effect on you. If you would like to exercise any of your rights or find out above, you have the right to lodge a complaint with the Information Regulator. For further information regarding the complaints processmore, please visit contact our Data Protection Officer. The table at the website end of this notice provides more detail about the Information Regulatorinformation that we use, as indicated below. Alternatively, you may contact the Information Regulator for further assistance: The Information Regulator: Adv Pansy Tlakula Physical Address: JD House, 00 Xxxxxxxx Xxxxxx, Xxxxxxxxxxxx, Xxxxxxxxxxxx, 2001 Email: xxxxxxxxxx.XX@xxxxxxx.xxx.xx Website: xxxxx://xxx.xxxxxxx.xxx.xx/inforeg/index.html 30. DISPUTE RESOLUTION‌ 30.1. Governing Lawlegal basis that we rely on in each case and your rights.

Privacy Notice. PROTECTION OF PERSONAL INFORMATION ACT (“POPIA”)‌ We understand that your This privacy notice explains how we use any personal information is important to you and that you may be apprehensive we collect about disclosing it. Your privacy is just as important to us, and we are committed to safeguarding and processing your information in a lawful manner. We also want to make sure that you understand how and for what purpose we process your information. If for any reason you think that your information is not processed in a correct manner, or that your information is being used for a purpose other than that for what it was originally intended, you can contact our Information Officer. You can request access to the information we hold about you at any time and if you think that we have outdated information, please request us to update or correct ityou. We collect personal information directly from the following data subjects: • Prospective clients who enquire about our you when you engage us for financial services • Clients who have appointed the representative as their broker Personal information is collected from you through the completion of the completion of an online application formplanning advice. This form is completed either electronically or in hard copyinformation will relate to your personal and financial circumstances. You It may also be requested to provide include special categories of personal data such as data about your personal information during your consultation with a representativehealth, if this is necessary for the provision of our services. We may also collect information when you voluntarily complete client surveys or provide feedback to us. Information relating to usage of our website is collected using cookies. These are text files placed on your computer to collect standard internet log information and visitor behaviour information. We’ll use your information collected from the website to personalise your repeat visits to the site We may need to gather personal information about your close family members and dependants in order to provide our service to you effectively. In such cases it will be your responsibility to ensure that you have the consent of the people concerned to pass their information on to us. We’ll provide a copy of this privacy notice for them or, where appropriate, ask you to pass the privacy information to them. The primary legal basis that we intend to use for the processing of your data is for the performance of our contract with you. The information that we collect about you is essential for us to be able to carry out the services that you require from other sources such as external third parties us effectively. Without collecting your personal data we’d also be unable to fulfil our legal and from cookies our websiteregulatory obligations. As an authorized financial services provider, we are obligated Where special category data is required we’ll obtain your explicit consent in terms of the following legislation order to collect your personal and process this information. We collect information insofar as it relates to the rendering of the relevant financial services to you: • Financial Advisory and Intermediaries Services Act 37 of 2002; • Financial Intelligence Centre Act 38 of 2001; 70 We collect, hold, use and disclose your personal information mainly about you in order to provide you with access the services for which you engage us. If you agree, we may email you about other products or services that we think may be of interest to you. In order to deliver our services to you effectively we may send your details to third parties such as those that we engage for professional compliance, accountancy or legal services as well as product and platform providers that we use to arrange financial products for you. Where third parties are involved in processing your data we’ll have a contract in place with them to ensure that the nature and purpose of the processing is clear, that they are subject to a duty of confidence in processing your data and that they’ll only act in accordance with our written instructions. Where it’s necessary for your personal data to be forwarded to a third party we’ll use appropriate security measures to protect your personal data in transit, such as password protection and/or encryption of data to enhance the security of the data during transfer. To fulfil our obligations in respect of prevention of money-laundering and other financial crime we may send your details to third party agencies for identity verification purposes. During the course of our relationship with you we’ll retain personal data which is necessary to provide services to you. We’ll take all reasonable steps to keep your personal data up to date throughout our relationship. We are also subject to regulatory requirements to retain your data for specified minimum periods. These are, generally: • Five years for investment business • Three years for mortgage business • Indefinitely for pension transfers and opt-outs • Three years for insurance business These are minimum periods during which we have a legal obligation to retain your records. We reserve the right to retain data for longer where we believe it's in our legitimate interests to do so. You have the right to request deletion of your personal data. We’ll comply with this request, subject to the services restrictions of our regulatory obligations and products that we providelegitimate interests as noted above. We will only process your information for You have the right to request a purpose you would reasonably expect, including: • Complying with copy of the obligations contained in the contract concluded between yourself and the FSP • To confirm, verify and update your details • To comply with any legal and regulatory requirements Some of your information that we hold may include, your first and last name, email address, about you. If you’d like a home, postal copy of some or other physical address, other contact information, inter alia your title, birth date, gender, residency status and your banking details. Failing to provide compulsory information may lead to our organisation’s inability to carry out the functions necessary to perform as an authorised financial services provider. We may need to share your information to third parties provide advice, reports, analyses, products or services that you have requested. Where we share your information, we will take all precautions to ensure that the third party will treat your information with the same level of protection as required by us. • Your employer (where applicable); • The Compliance Officer of the organisation (where applicable) • Analytics and search engine providers assisting in the enhancement of our websites • Information Technology specialists assisting us with data storage, security, processing, analytics, etc • Auditors of the Organisation • Regulatory or governmental authorities such as the Financial Sector Conduct Authority and the Prudential Authority Your information may be hosted on servers managed by a third-party service provider, which may be located outside of South Africa. The third-party service providers are located in: • Israel • Cyprus • Bulgaria We confirm that the level of protection afforded to your personal information please email or write to us using the contact details noted below. When your personal data is processed by that third country or international organisation is equal to the protection afforded by the POPI Act. As a data subject, automated means you have the right to – • Request that we confirm, free of charge, whether or not, we hold personal information about you • Request that we provide you with a description of the personal information we hold about you, and ask us to explain why and how it is being processed (please complete Annexure A) • Request that we consider your objections to the processing of move your personal information (please complete Annexure B) • Lodge a complaint with the Information Regulator (please complete Annexure B)data to another organisation for their use. In the event We have an obligation to ensure that your personal information has not been processed in accordance with the POPI Act is accurate and the principles set out above, up to date. Please ask us to correct or remove any information that you have the right think is incorrect. We’d like to lodge a complaint with the Information Regulatorsend you information about our products and which may be of interest to you. For further information regarding the complaints process, please visit the website of the Information Regulator, as indicated below. AlternativelyIf you’ve agreed to receive marketing information, you may opt out at a later date. You have a right at any time to stop us from contacting you for marketing purposes. If you no longer wish to be contacted for marketing purposes, please contact the Information Regulator for further assistance: The Information Regulator: Adv Pansy Tlakula Physical Address: JD House, 00 Xxxxxxxx Xxxxxx, Xxxxxxxxxxxx, Xxxxxxxxxxxx, 2001 Email: xxxxxxxxxx.XX@xxxxxxx.xxx.xx Website: xxxxx://xxx.xxxxxxx.xxx.xx/inforeg/index.html 30. DISPUTE RESOLUTION‌ 30.1. Governing Lawus by email or post.