Privacy Policy

BridgeGrowth ("we", "us", "our") is committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA) and any other applicable South African privacy legislation. By engaging with our services, visiting our website, or submitting information through our forms, you acknowledge that you have read and understood this Policy.

BridgeGrowth is the trading name of R And L Enterprise (Pty) Ltd (Reg. No: 2015/064399/07), a business support and administration company based in Gauteng, South Africa. We provide services including CIPC company registration, SARS compliance, office administration, and debtors management to South African entrepreneurs and SMEs. Contact: hello@bridgegrowth.co.za | Tel: 076 819 5926

We may collect the following categories of personal information: • Identity information: full name, ID number, company registration number • Contact information: email address, phone number, physical or postal address • Business information: company name, VAT number, financial details relevant to the services we provide • Communication records: emails, WhatsApp messages, and other correspondence • Website usage data: IP address, browser type, pages visited (collected via analytics tools) We only collect information that is necessary for the legitimate purpose for which it is collected.

We use your personal information to: • Provide and manage the services you have engaged us for • Communicate with you regarding your account, enquiries, and service updates • Comply with legal and regulatory obligations (including CIPC, SARS, and other statutory requirements) • Send relevant updates, newsletters, or promotional content (only where you have given consent) • Improve our services and website experience • Manage billing, invoicing, and payments We will not use your personal information for any purpose that is incompatible with the purpose for which it was collected without obtaining your prior consent.

We process your personal information on the following lawful grounds: • Contract performance: processing is necessary to fulfil our service agreement with you • Legal obligation: processing is required to comply with applicable South African laws and regulations • Legitimate interests: processing is necessary for our legitimate business interests, provided these do not override your rights • Consent: where you have given us explicit permission to process your information for a specific purpose

We do not sell, rent, or trade your personal information. We may share your information with: • Regulatory and government bodies: CIPC, SARS, and other statutory bodies as required by law or as part of the services we provide on your behalf • Service providers: trusted third-party suppliers who assist us in delivering our services (e.g., software platforms, communication tools), subject to confidentiality obligations • Professional advisors: accountants, attorneys, or auditors, where necessary • Successors: in the event of a business transfer, merger, or acquisition Any third party with whom we share your information is required to treat it with the same level of care and protection we apply.

We retain your personal information for as long as is necessary to fulfil the purpose for which it was collected, or as required by law. In general: • Client records are retained for a minimum of 5 years after the end of a service relationship, in line with South African statutory requirements • Marketing opt-in data is retained until you withdraw consent • Website analytics data is retained in aggregate form After the applicable retention period, personal information is securely deleted or anonymised.

We take reasonable and appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, destruction, or alteration. These measures include secure data storage, access controls, and encrypted communications. While we take every reasonable precaution, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security.

As a data subject, you have the right to: • Access the personal information we hold about you • Request correction of inaccurate or incomplete information • Request deletion of your personal information (subject to legal retention requirements) • Object to the processing of your personal information • Withdraw consent where processing is based on consent • Lodge a complaint with the Information Regulator of South Africa To exercise any of these rights, please contact us at hello@bridgegrowth.co.za. We will respond within a reasonable timeframe and in accordance with POPIA requirements.

Our website may use cookies and similar technologies to enhance your browsing experience and collect anonymous usage data. You can control cookie settings through your browser. Disabling cookies may affect certain features of the website. We may use third-party analytics tools (such as Google Analytics) to understand how visitors interact with our website. These tools collect data in aggregate and do not identify individual users.

If you are dissatisfied with how we handle your personal information, you have the right to lodge a complaint with the Information Regulator of South Africa: Website: www.inforegulator.org.za Email: inforeg@justice.gov.za

We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page. We encourage you to review this Policy periodically. Continued use of our services after any changes constitutes acceptance of the updated Policy.

For any questions, concerns, or requests relating to this Privacy Policy or your personal information, please contact: BridgeGrowth Email: hello@bridgegrowth.co.za Tel: 076 819 5926 Gauteng, South Africa