Privacy Policy

This Privacy Policy explains how LexNova SA (Pty) Ltd collects, stores, processes and protects your personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA).

We may collect the following personal information: • Full name, email address and contact number • Company name and registration details • Login credentials and usage data • Business and financial data entered for valuation purposes • Valuation project data and report history • Device and browser information for security purposes

Your personal information is used for: • Account management and authentication • Providing valuation services and generating reports • Platform improvement and feature development • Support and communication • Internal analytics and compliance reporting • Legal and regulatory obligations

We implement appropriate technical and organisational security measures including: • SSL/TLS encryption for all data in transit • Encrypted password storage using industry-standard hashing • Secure cloud hosting with access controls • Session-based authentication with secure token management • Limited administrative access on a need-to-know basis • Regular security assessments

We do not sell or share your personal data with third parties unless: • Required by law or court order • You provide explicit written consent • Necessary for the provision of Platform services (e.g., secure hosting, PDF generation) Financial and business data entered for valuation purposes is treated as strictly confidential and is not shared with any third party.

We retain your personal information for as long as your account is active or as needed to provide our services. Upon account closure, we will securely delete your data within a reasonable period, subject to any legal retention requirements under South African law.

Under POPIA, you have the right to: • Request access to your personal data held by us • Request correction or deletion of inaccurate or outdated data • Object to the processing of your personal information • Object to direct marketing communications • Lodge a complaint with the Information Regulator (www.justice.gov.za/inforeg)

Name: Jac de Beer Designation: Director and Information Officer Email: [email protected] Telephone: +27 66 233 9960 Address: Paarl, Western Cape, 7646, South Africa

We may update this Privacy Policy from time to time. Any changes will be posted on the Platform with the revised effective date. Continued use of the Platform after changes constitutes acceptance of the updated policy.