Privacy Policy

1. Who we are

This Privacy Policy explains how ShezzTRANS Technology Solutions (PTY) Ltd (registration number 2026/353578/07), a company registered in South Africa with its principal place of business in Germiston, Gauteng ("ShezzTRANS", "we", "us"), collects, uses, stores and protects personal information in accordance with the Protection of Personal Information Act 4 of 2013 ("POPIA").

ShezzTRANS is the responsible party for personal information collected through our website, business assessment forms and booking pages.

2. What personal information we collect

When you, as a bond originator, mortgage broker, financial services provider or other business user, complete our lead efficiency assessment, book a discovery call, or contact us, we collect:

• Identity and business contact details — name, business email address, phone number, company name and industry;
• Business performance information you choose to provide — such as monthly enquiry, consultation, application and approval volumes, lead sources, and the operational challenges you select;
• Consent records — the date, time and content of the consent you give us;
• Booking information — appointment details when you book a call with us;
• Technical information — basic usage data generated when you use our website or forms.

We collect this information directly from you. We do not buy personal information from third parties, and we do not perform credit bureau checks.

3. Why we collect it (purpose)

We process personal information for the following purposes:

• To evaluate the lead qualification and conversion efficiency of your business and provide you with an indicative assessment score;
• To schedule and manage discovery calls and consultations;
• To communicate with you about your enquiry, your assessment results and our services;
• To meet our legal and regulatory obligations, including under POPIA and the National Credit Act 34 of 2005 ("NCA").

4. Lawful basis for processing

We process your personal information on the basis of your consent, which you provide before submitting the assessment. You may withdraw your consent at any time by contacting our Information Officer, after which we will stop processing your information unless we are required by law to retain it.

5. Who we share it with

We do not sell personal information. We only share it where necessary for the purposes above:

• Service providers who host and support our systems (such as cloud hosting, email and scheduling providers), under appropriate confidentiality and security arrangements;
• Regulators or authorities where disclosure is required by law.

Some of our service providers may store information on servers located outside South Africa. Where this happens, we ensure the recipient is subject to laws or agreements that provide an adequate level of protection substantially similar to POPIA.

6. How long we keep it

We retain personal information only for as long as necessary to fulfil the purposes above, to comply with legal record-keeping requirements, or to protect our legitimate interests. Assessment records that are no longer required are securely deleted or de-identified.

7. How we protect it

We apply appropriate, reasonable technical and organisational measures to secure personal information, including encrypted connections (HTTPS), access controls and authentication on our systems, restricted access to personal information, and secure hosting environments. While no system can be guaranteed absolutely secure, we review and improve our safeguards on an ongoing basis, and we will notify affected parties and the Information Regulator of any data breach as required by section 22 of POPIA.

We do not use your information to train artificial intelligence models. The information you submit is used solely to generate your assessment results and to provide the Services described in this policy. It is never used to train, improve or modify any AI model, whether our own or a third party's.

8. Your rights

Under POPIA, you have the right to:

• Access — request confirmation of what personal information we hold about you, and a copy of it;
• Correction — request that inaccurate or incomplete information be corrected;
• Deletion — request that your information be deleted or destroyed where we are not required to retain it;
• Objection — object to processing of your information;
• Withdraw consent — at any time, without affecting the lawfulness of processing before withdrawal;
• Complain — lodge a complaint with the Information Regulator of South Africa.

To exercise any of these rights, contact our Information Officer at shirlly@shezztrans.co.za. We will respond within a reasonable time and in accordance with POPIA.

9. Cookies and analytics

Our website uses only the cookies and technical data strictly necessary for it to function. If we introduce analytics or marketing cookies in future, this policy will be updated and, where required, your consent will be requested first.

10. Children

Our services are directed at businesses and adults seeking credit-related and financial services. We do not knowingly process the personal information of children. If you believe a child's information has been submitted to us, please contact the Information Officer so that it can be removed.

11. Changes to this policy

We may update this Privacy Policy from time to time. The current version, with its effective date, will always be published on this page. Material changes will be highlighted on our website.

12. Contact

Questions about this policy or about how your personal information is handled should be directed to:

Shirlly Moloto — Information Officer
ShezzTRANS Technology Solutions (PTY) Ltd
Email: shirlly@shezztrans.co.za
Website: https://shezztrans.co.za