1. We are delighted that you have shown interest in the Company. We take the protection of your Personal Information seriously and want you to feel informed when you are engaging with us.
2. This Policy sets out how we will handle your Personal Information that you give to us or which we collect from third parties.
3. In delivering our products/ carrying out our services, we will use your Personal Information in accordance with this Policy and Applicable law.
4. Our Services are only intended to be used by persons aged 18 years or over.

• “Applicable Laws” means all laws and regulations that the Company is required to comply with;
• “Company/ “our”/ “we”/ “us” means 20Fifty Proprietary Limited, (Registration no. 2019/282387/07), with its address situated At 3rd Floor, 112 Loop Street, Cape Town, 8001 and having its website at https://20fifty.co.za;
• Personal Information includes Personal Information and Special Personal Information, as defined under Applicable Law;
• “Services” includes the provision of the Website, the provision of our products and/or services or when you engage with us or any of our product and/or service offerings, including any instances where your Personal Information is submitted to us directly or through or by a third-party and any supporting or ancillary services related thereto; and
• “Website” includes this/any website and/or any related (and/or enhanced) mobi-sites, software applications, or any other portals specifically made available by the Company; and
• “You”/”your”/”user” means any person who submits Personal Information to the Company or user of our Services including but not limited to: prospective, new or existing customers of the Company and its subsidiaries and any website users or browsers of this or any Company affiliate website and/or any mobi-site, software applications or similar.

1. This Policy will apply whenever you submit Personal Information to the Company, which will include (but is not limited to) when you browse our Website or use our Services.
2. Your continued use of our Services indicates that you (which may include any representative acting on your behalf) have both read and consented to the terms of this Privacy Policy.
3. If you do not agree to any of the provisions of this Policy, then you should not submit any Personal Information to the Company. However, we note that if you do not consent to this Policy, or any parts thereof, we may not be able to provide you with our Services.
4. Whilst we try to balance our legitimate business interests with your reasonable expectation to privacy and to take all reasonable measures to prevent unauthorised access to, or disclosure of your Personal Information, we cannot guarantee that your Personal Information will be 100% secure.

1. What we Collect
   1. We may collect information that allows you to be identified, such as:
      1. your name, age, sex, addresses, e-mail address, identity/registration number, passport number, bank details, financial information and/or electronic identifying data (including the internet address of your domain, cookies, online identifier, web forms, IP addresses, activity logs, unique device identifiers and geo-location data); and/or
      2. records of correspondence or enquiries from you or anyone acting on your behalf;
      3. details of contracts, sales or purchases you carry out with us;
      4. details of transactions you carry out with us;
      5. details of contracts, sales or leases you carry out with us
      6. sensitive and special categories of Personal Information (e.g., images).
   2. Where you provide us with the Personal Information of third-parties you should take steps to inform the third-party that you need to disclose their details to us, identifying us. We will process their Personal Information in accordance with this Policy.
2. How we Collect
   1. You may provide Personal Information to us either directly or indirectly (through an agent or intermediary) or through completing an application form for our products and services or requesting further information about our products and services, whether in writing, through our website, over the telephone or any other means.
   2. We may also collect your Personal Information from your appointed agent, any regulator, or other third party that may hold such information.
3. How we Use Personal Information
   1. We may collect, use, transfer or process your Personal Information:
      1. to provide and perform our Services to you, to notify you of changes to our Services and to improve or evaluate the effectiveness of the Company, its products, services or offerings;
      2. to respond to and comply with your instructions, complaints or requests and to manage your account or our relationship;
      3. to operate, develop and manage our Website/other platforms;
      4. for security (including fraud and crime prevention/reporting), administrative, auditing, operational, marketing and legal or regulatory purposes (which will include complying with any law enforcement agency requests);
      5. for operational, marketing, auditing, legal and record keeping requirements;
      6. complying with Applicable Laws, including lawful requests for information received from local or foreign law enforcement, government and tax collection agencies;
      7. to third parties for reasons set out in this Policy or where it is not unlawful to do so (this may include but is not limited sharing information with credit bureaus and prospective buyers or sellers or our business or assets);
      8. outside of the Republic of South Africa, in accordance with Applicable Law, including for cloud storage and payment purposes and the use of any of our websites;
   2. We may from time to time (and at any time) contact you for market research about services, products and offerings available from the Company or specific affiliates or subsidiaries which we believe may be of interest to you, by email, phone, text or other electronic means, unless you have unsubscribed from receiving such communications. You can unsubscribe from receiving such communications in the communication themselves.
4. Disclosure of Personal Information
   1. Your Personal Information may be disclosed with the Company’s affiliates, subsidiaries, employees, agents, sub-contractors and selected third parties who process the information on our behalf.
   2. We may also disclose your Personal Information to third parties for the purposes of rendering our Services and for the reasons recorded in clause 4.3 above, including any third parties with whom our supplies and services are carried out/provided in conjunction with and/or who are involved in the completion of our supplies and services and who may need to have your Personal Information in order to fulfil your request or the services (e.g. Third party payment platform providers or cloud/Website service providers and technology partners who offer you products).
   3. Wherever these persons are located outside of the country (and your Personal Information may be transferred cross-border) we will adhere to Applicable Laws.
5. Security

   While we cannot ensure or warrant the security of any Personal Information you provide us, we do continue to maintain and improve our security measures over time and in line with legal and technological developments.

6. Retention
   1. We may store your Personal Information directly or on a central or separate database. If the location of the central database is in a country that does not have substantially similar data protection laws, we will take all legally mandatory required steps to ensure that your Personal Information is adequately protected.
   2. We may retain your Personal Information indefinitely, unless you object, in which case we will only retain it if we are permitted or required to do so in terms of Applicable Law. However, generally, we will not retain your information for longer than is necessary or for the periods required by Applicable Law.
7. Access to Your Information
   1. You may request details of personal information which we hold about you under the Promotion of Access to Information Act, 2000 (“PAIA”). Fees to obtain a copy or a description of personal information held about you are prescribed in terms of PAIA. Confirmation of whether or not we hold personal information about you may be requested free of charge. If you would like to obtain a copy of your personal information held by BASF, please review our PAIA Manual located at: https://20fifty.co/paia-manual.

1. As a user/data subject, you have certain rights, including the right:
   1. to access your Personal Information stored and processed by us. This may be done by emailing us at the address referred to in clause 6 below;
   2. to correct/rectify Personal Information that we hold on your behalf, in instances where such Personal Information is incorrect or incomplete;
   3. to erase Personal Information (also known as ‘the right to be forgotten’). In simple terms, this enables you to request the deletion or removal of your information where there is no compelling reason for us to keep using it. This is not a general right to erase; there are exceptions. For example, we have the right to continue using your personal data if such use is necessary for compliance with our legal obligations or for the establishment, exercise or defence of legal claims;
   4. to restrict/suspend processing of Personal Information to only that which is strictly necessary for us to perform our services to you. Please note that this right is limited in certain situations: when we are processing your Personal Information that we collected from you with your consent you can only request restriction on the basis of: (a) inaccuracy of data; (b) where our processing is unlawful and you don’t want your Personal Information erased; (c) you need it for a legal claim; or (d) if we no longer need to use the data for the purposes for which we hold it. When processing is restricted, we can still store your information, but may not use it further;
   5. to complain – if we breach any of the terms of this Privacy Policy, to complain to the requisite data protection authority in South Africa;
   6. to withdraw your consent at any time, if the processing of the Personal Information is based on consent;
   7. to object to processing of Personal Information if such processing is based on legitimate interests; and
   8. to object to the processing of Personal Information for direct marketing purposes.
2. The exercise of these rights is free of charge.

1. If, you wish to raise a complaint regarding the processing of your Personal Information then please first reach out to the Company’s designated Information Officer at: dpo@20fifty.co
2. However, if you are still unsatisfied with how we have handled your Personal Information, you can lodge your complaint with the Information Regulator or authority in the applicable and relevant country. We are happy to share further information or guidance in this regard should you need it.
3. The South African Information Regulator’s contact details are set out below.
   The Information Regulator
   Contact Details: Tel: 012 406 4818
   Fax: 086 500 3351
   POPIAComplaints@inforegulator.org.za
   PAIAComplaints@inforegulator.org.za

1. Without derogating from any other limitations of liability or indemnifications agreed to between us, in agreeing to the provisions of this Policy, you hereby unconditionally agree to indemnify us against any liability that may result from the processing of your Personal Information, including any loss, damage or injury arising from any inaccurate or incomplete Personal Information provided to us by the you and/or any third party and/or any unintentional disclosure of your Personal Information to any unauthorised persons.
2. Further, while we use every effort to update the information on the Website regularly, we accept no liability if any information is incorrect or for inaccurate information.

1. Subject to Applicable Law, you may receive and/or subscribe to our newsletters and/or mailers.
2. Where applicable, you may withdraw your consent to receive our newsletters and/or mailers at any time. You may exercise your withdrawal by clicking on the link provided in each e-mailed newsletter or mailers.

When you visit the Company’s Website, even if you do not register and account, we may collect information, such as your IP address, the name of your ISP (Internet Service Provider), your browser, the website from which you visit us, the pages on our Website that you visit and in what sequence, the date and length of your visit, and other information concerning your computer's operating system, language settings, and broad demographic information. This information is aggregated and anonymous data and does not identify you specifically. However, you acknowledge that this data may be able to be used to identify you if it is aggregated with other Personal Information that you supply to us. This information is not shared with third parties and is used only within the Company on a need-to-know basis. Any individually identifiable information related to this data will never be used in any way different to that stated above, without your explicit permission.

1. We use cookies. A cookie is a small piece of information stored on your computer, smart phone or device by the web browser for record-keeping purposes. Tracking technologies also used are beacons, tags, and scripts to collect and track information and to improve and analyse our services.
2. You can view and edit cookies by looking in the cookies’ directory of your browser installation. Permanent cookies are not required for the website to work but may enhance your browsing experience. Likewise, if you do not accept cookies, you may not be able to use some portions of our Services.
3. The following types of cookies are used on the Website:
   1. “Session cookies”: which are used to maintain a so-called 'session state' and only last for the duration of your use of the website. A session cookie expires when you close your browser, or if you have not visited the server for a certain period of time. Session cookies are required for the Platform to function optimally but are not used in any way to identify you personally;
   2. “Permanent cookies”: these cookies permanently store a unique code on your computer or smart device in order to be able to identify you as an individual user. No Personal Information is stored in permanent cookies; and
   3. “Security Cookies”: these cookies are used for security related purposes.

1. The Services available through the website, may contain links to other third-party websites. We are not responsible and take no liability for the acts, content or privacy policies of these third-party websites and advise you to review the privacy policies of those parties
2. We may also use third-party service providers to monitor and analyse user behaviour and the use of our Services, which may include but is not limited to:
   1. Google Analytics: which is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Services. This data is then shared with other Google services and Google may use the collected data to contextualize and personalize the ads of its own advertising network. You can opt-out your activity on the website being made available to Google Analytics by installing the browser plug-in, which is currently available at: https://tools.google.com/dlpage/gaoptout?hl=en. For more information on the privacy practices of Google, please visit the Google Privacy Terms current web page: https://policies.google.com/privacy?hl=en
3. These third parties have access to your Personal Information only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

1. We may amend this Policy and/ or any of the documents incorporated under it by reference from time to time.
2. To the extent permitted by Applicable Law, any such amendment will come into effect and become part of any agreement you have with the Company when notice is given to you of the change by publication on our website and, where appropriate, notified to you by e-mail. It is your responsibility to check the website often.