1. Introduction

Eido Capital (Pty) Ltd (“Eido Capital”, “we”, “us”, or “our”) is committed to protecting the privacy and confidentiality of personal information.

This Privacy Policy explains how we collect, use, store, and protect personal information in accordance with the Protection of Personal Information Act (“POPIA”).

By accessing our website or submitting information to us, you agree to the terms of this Privacy Policy.

2. Scope of This Policy

This policy applies to:

• Website visitors
• Prospective clients
• Existing clients
• Referrers and affiliates
• Any individual or entity who provides personal information to Eido Capital

3. Information We Collect

We may collect and process the following categories of information:

3.1 Personal Information

• Full name and surname
• Identity or registration number
• Contact details (telephone, email)
• Physical or business address

3.2 Financial and Transaction Information

• Details relating to funding requirements
• Asset information (vehicles, property, or claims)
• Supporting documentation provided during application

3.3 Technical Information

• IP address
• Browser type and device information
• Website usage data

4. How We Collect Information

Information may be collected through:

• Online application forms
• Direct communication (email, telephone, WhatsApp)
• Supporting documents submitted by clients
• Third parties involved in a transaction (e.g. attorneys, agents), where applicable

5. Purpose of Processing

We process personal information strictly for legitimate business purposes, including:

• Assessing and structuring funding applications
• Verifying identity and transaction details
• Communicating with clients and relevant third parties
• Complying with legal and regulatory obligations
• Maintaining internal records and risk management processes

We do not collect or process information beyond what is necessary for these purposes.

6. Lawful Basis for Processing

Personal information is processed where:

• It is necessary for the performance of a contract or potential contract
• It is required to comply with legal obligations
• It is necessary for legitimate business interests, including risk assessment and fraud prevention
• The data subject has provided consent, where applicable

7. Sharing of Information

We do not sell or distribute personal information.

Information may be shared only where necessary, including with:

• Attorneys involved in a transaction
• Valuers, verification agents, or professional advisors
• Regulatory or legal authorities, where required
• Service providers assisting with processing or administration

All third parties are required to treat information confidentially and in accordance with applicable law.

8. Cross-Border Transfers

Personal information may be stored or processed outside South Africa through third-party cloud and service providers. These providers are located in jurisdictions that may have different data protection laws to those of South Africa.

Where this occurs, we implement appropriate safeguards to ensure that information is protected to a standard consistent with POPIA.

9. Data Retention

We retain personal information only for as long as necessary:

• To fulfil the purpose for which it was collected
• To comply with legal, regulatory, and record-keeping obligations
• To manage risk and enforce agreements

Thereafter, information is securely deleted or anonymised.

10. Information Security

We implement appropriate technical and organisational measures to protect personal information, including:

• Secure storage systems
• Controlled access to information
• Confidentiality obligations for staff and service providers

While reasonable steps are taken, no system can be guaranteed to be completely secure.

11. Your Rights

In terms of POPIA, you have the right to:

• Access your personal information
• Request correction or deletion of inaccurate information
• Object to processing under certain circumstances
• Withdraw consent where processing is based on consent

Requests can be submitted using the contact details set out in Section 15 below. If you are not satisfied with our response, you may lodge a complaint with the Information Regulator of South Africa at inforeg@justice.gov.za.

12. Data Breach Notification

In the event of a security compromise affecting personal information, Eido Capital will take all reasonable steps to notify affected data subjects and the Information Regulator where required by law. Notification will be provided as soon as reasonably practicable following discovery of the breach, and will include details of the nature of the compromise and the steps being taken to address it.

13. Cookies and Website Usage

Our website uses cookies and similar tracking technologies to enhance user experience and to analyse website traffic and usage patterns. The information collected through these technologies is used for internal analytics purposes only.

Cookies may collect information such as the pages you visit, time spent on the site, browser type, and referring URLs. This information is processed in aggregate and is not used to identify individual visitors.

You may control or disable cookie settings through your browser preferences. Please note that disabling cookies may affect certain features or functionality of our website.

14. Updates to This Policy

This Privacy Policy may be updated from time to time to reflect changes in our operations or applicable law.

The latest version will always be available on our website. Continued use of our website or services following any update constitutes acceptance of the revised policy.

15. Contact Details

For any privacy-related queries, requests, or complaints, please contact our Information Officer: