Privacy Notice

The responsible party for personal information processed through this website is BRIDGE AFRICA (PTY) LTD, registration number 2020/708982/07.

The Information Officer is Birgit L. Thümecke, who may be contacted at info@bridge-africa.co.za.

We may collect personal information that you voluntarily provide when contacting us through this website, including:

• Name
• Email address
• Organisation
• Country or market
• Opportunity type
• Brief description, including any preferred next step you indicate

These correspond to the fields shown on the website forms. We may also collect limited technical information required for the operation and security of the website.

We may use information provided to:

• respond to enquiries
• communicate regarding potential business opportunities
• understand the nature of an enquiry
• operate and improve the website
• comply with applicable legal requirements

We process personal information only where permitted by section 11 of the Protection of Personal Information Act. Depending on the circumstances, this may include your consent, taking steps at your request before entering into a contract, performing a contract, complying with a legal obligation, protecting your legitimate interests, or pursuing the legitimate interests of BridgeAfrica or a third party where those interests do not unjustifiably affect your rights.

BridgeAfrica does not sell personal information.

Information may be processed by service providers necessary to operate the website, communications or related business systems, subject to appropriate safeguards.

Website submissions, administrator account data, authentication data and database backups are stored and processed in Dublin, Ireland, in the European Union.

Personal information submitted through this website therefore leaves South Africa and is processed in the European Union. Access to these records is restricted to authorised BridgeAfrica personnel.

Where information is transferred outside South Africa, BridgeAfrica relies on appropriate safeguards required by applicable law.

The website provides a general enquiry form and an investor access request form. Information submitted through either form is stored securely and reviewed only by named BridgeAfrica administrators. Submitting a form requires you to confirm the consent wording shown on the form, and the version of this Notice in force at that time is recorded with your submission.

When a form is submitted, an internal notification is sent to BridgeAfrica that contains no personal information. Submissions are retained only as described under Retention. Enquiries sent by email are handled in the same way as described here.

The website and its records are hosted on managed cloud infrastructure. Internal notification messages about new submissions are sent through a managed email service and contain only a record reference, the form type, the time and a secure internal link. They contain no name, email address, telephone number or message content.

Notification messages are delivered through the platform's managed email service. Where required for delivery, this may involve processing the message outside South Africa. The content of these messages remains limited as described above, with no name, email address, telephone number or message content.

Access to submitted records is limited to named BridgeAfrica administrators who sign in with a password and an authenticator app. Sessions expire after a period of inactivity, sensitive actions require the administrator to confirm their identity again, and access to records and exports is recorded in an internal audit trail.

Personal information is retained only for as long as reasonably necessary for the purpose for which it was collected or as required by applicable law.

• General enquiries: 24 months
• Investor access requests where no fit is identified: 24 months
• Active relationships: for the duration of the relationship and 5 years after
• Spam or rejected submissions: 90 days

When a retention period ends, the personal fields in the record are irreversibly deidentified automatically. The deletion itself is logged without any personal information.

Subject to applicable law, individuals may:

• request access to the personal information we hold about them
• request the correction or deletion of their personal information
• object to the processing of their personal information
• withdraw consent where consent is the ground for processing
• lodge a complaint with the Information Regulator of South Africa (inforegulator.org.za)

Individuals may also raise questions or concerns regarding how their information is handled, using the contact details below.

For privacy enquiries, or to exercise the rights described above, contact the BridgeAfrica Information Officer at info@bridge-africa.co.za