Effective Date: 1 April 2021 (Updated for current use)

1. Introduction & Independent Status

Welcome to Company Consultants, a specialised division of Company Partners (Pty) Ltd (Registration Number 2015/082857/07). Company Partners (Pty) Ltd (“the Company”, “we”, “us”) is a premium, independent B2B consultancy. We are a private entity and are NOT affiliated with, nor do we represent, the South African Government, the CIPC, SARS, COIDA, the NHBRC, CIDB, or any other government entity. We offer private facilitation and meticulous application preparation services to streamline your corporate compliance administration.

We respect your right to privacy and are committed to protecting your personal information in strict accordance with the South African Protection of Personal Information Act 4 of 2013 (POPIA) and aligned international data protection standards. This policy explains how we collect, use, share, and protect your data.

2. The Information We Collect

To manage your ongoing compliance needs and deliver our private services, we may collect:

• Identity Information: Names, surnames, identification numbers, and biometric data (where legally required for specific compliance applications).

• Contact Information: Email addresses, telephone numbers, physical and postal addresses.

• Corporate & Financial Information: Company registration numbers, tax numbers, billing details, and specific industry compliance data.

• Technical Data: IP addresses, browser types, device information, and website usage data.

We collect this information directly from you via our online platforms, digital questionnaires, and emails, as well as from publicly accessible external records (such as standard CIPC database searches) and vetted third-party service providers.

3. Why We Handle Your Information

We only handle personal information for clear, lawful business purposes, which include:

• Executing the specific private facilitation services you requested (e.g., facilitating the submission of your administrative applications to CIPC, SARS, COIDA, NHBRC, or other external entities on your behalf).

• Verifying your identity to prevent fraud and comply with FICA requirements.

• Communicating with you regarding your transactions, quotes, and service updates.

• Sending you marketing material regarding our B2B products and services (you may opt out of this at any time).

• Improving our digital platforms and diagnosing technical issues.

4. Sharing Your Information

We do not sell your personal information to third parties. We only share your data with appropriate safeguards when strictly necessary to fulfil our service mandate. This includes sharing with:

• Relevant Statutory Bodies: Assisting with the submission of your required administrative applications to entities like CIPC, SARS, COIDA, CIDB, and the NHBRC to help manage your compliance obligations.

• Service Providers: Trusted third-party contractors, IT support, and secure payment gateways that operate under strict confidentiality agreements.

• Mandated Disclosures: When we are legally obliged to disclose information by law, court order, or legal directive.

5. Data Security, Retention & Cross-Border Transfers

We implement rigorous, commercially reasonable technical and organisational measures to protect your data from unauthorised access, loss, or destruction. This includes secure cloud-based records management, restricted access controls, and cybersecurity protocols.

Where we utilise global cloud infrastructure or software, your data may be securely transferred and stored on servers outside of South Africa. We ensure these international service providers are bound by data protection standards equivalent to POPIA. We will only retain your personal information for as long as is necessary to fulfil the purposes outlined in this policy, or as required by specific South African laws (such as the Companies Act and relevant South African tax legislation).

6. Cookies and Targeted Advertising

Our website uses "cookies" and similar tracking pixels to enhance your browsing experience, streamline sign-ups, and conduct website analytics.

Additionally, we use third-party tracking technologies (such as Google Ads and Microsoft Advertising pixels) for remarketing and targeted advertising. This means third-party vendors may show our advertisements on sites across the internet based on your past visits to our website. By using our site, you consent to our use of these technologies. You can opt out of Google's personalised advertising by visiting Google's Ads Settings, or opt out of third-party vendor cookies via the Network Advertising Initiative opt-out page.

7. Your Rights as a Data Subject

Under POPIA, you retain full control over your personal data. You have the right to:

• Request confirmation of the personal information we hold about you.

• Request access to, correction of, or deletion of your personal information.

• Object to the handling of your personal data on reasonable legal grounds.

• Unsubscribe from direct marketing communications at any time.

To exercise any of these rights, please contact our Information Officer. We will require verification of your identity before fulfilling your request.

8. Contact Details

If you have any questions or concerns regarding this policy, please contact us:

• Information Officer: Ilana Steyn

• Email: info@companyconsultants.co.za

• Phone: 0800 007 269 (Toll-Free)

If you remain dissatisfied with how we handle your personal information, you have the right to lodge a complaint with the relevant South African privacy oversight entity, the Information Regulator:

• Email: popiacomplaints@inforegulator.org.za

• Phone: 010 023 5200

• Website: www.inforegulator.org.za