POPIA & Data Protection Statement

This statement applies to the processing of personal information by Veridion Capital Management (Pty) Ltd in connection with the provision of investment management services to South African residents and the operation of the Veridion Capital Management platform. It is issued in accordance with the Protection of Personal Information Act, 2013 (POPIA).

The responsible party for the purposes of POPIA is Veridion Capital Management (Pty) Ltd, registered at 1 Sandton Drive, Sandton, Johannesburg, 2196, South Africa.

Information Officer: D. Mokoena

Contact: privacy@veridioncapital.com / +27 10 500 1201

We process personal information in compliance with the eight conditions for lawful processing set out in POPIA:

• Accountability: We take responsibility for ensuring that personal information we hold is protected in accordance with POPIA.
• Processing limitation: Personal information is processed only for the purposes for which it was collected, or for compatible purposes permitted by POPIA.
• Purpose specification: The purpose of collection is communicated at the time of collection and documented in our records.
• Further processing limitation: Personal information is not further processed in a manner incompatible with the original purpose.
• Information quality: We take reasonable steps to ensure personal information is complete, accurate, and kept up to date.
• Openness: We maintain this statement and associated privacy documentation to inform data subjects of our processing activities.
• Security safeguards: Appropriate security measures are implemented to protect personal information against loss, damage, or unauthorised access.
• Data subject participation: Data subjects may request access to their personal information and may request correction of inaccurate or incomplete information.

We do not intentionally collect special personal information (as defined in POPIA) unless it is strictly necessary for compliance purposes and only where a lawful basis for processing exists under POPIA.

As a data subject, you have the right to:

• Request access to personal information we hold about you
• Request correction of inaccurate or incomplete personal information
• Request deletion of personal information in certain circumstances
• Object to the processing of your personal information
• Lodge a complaint with the Information Regulator of South Africa

Appropriate technical and organisational measures are in place to protect personal information from loss, unauthorised access, and disclosure. Investor documents are delivered through expiring signed access links. Platform access is restricted to authenticated users.

If you believe your POPIA rights have been infringed, you may submit a complaint to the Information Regulator of South Africa at www.inforegulator.org.za.