EHS GREEN LEAF CONSULTACY CC REGISTRATION NUMBER: 2007/179442/23 PAIA MANUAL In terms of section 51 of the Promotion of Access to Information Act 2 of 2000 (PAIA)

EHS GREEN LEAF CONSULTANCY CC PRIVACY POLICY

1. INTRODUCTION

EHS Green Leaf Consultancy CC respects your privacy and your personal information. This Privacy Policy aims to let you know how EHS Green Leaf Consultancy CC will treat any personal information that we may have about you and how you may access such personal information held. EHS Green Leaf Consultancy CC will take all reasonable measures, in accordance with this Policy, to protect your personal information and to keep it confidential.

2. DEFINITION OF PERSONAL INFORMATION

Personal information is “personal information” as defined in terms of section 1 of the Protection of Personal Information Act 4 of 2013 (“POPIA”). This is information relating to an identifiable, living natural person or existing juristic person. Please refer to POPIA for a detailed definition and various types or categories of personal information.

3. CATEGORIES OF DATA SUBJECTS AND PERSONAL INFORMATION COLLECTED

EHS Green Leaf Consultancy CC only collects general personal information (some of which may be publicly available) and aims to only collect that personal information which is necessary for us to carry out our services and other benefits provided to you. EHS Green Leaf Consultancy CC collects the following personal information:

Clients – such as name, contact details, email, physical and postal addresses, company details, designations, professional experience, work experience (CVs) and qualifications. Client profiles provide for other information to be provided but this is voluntary information that can be provided at the discretion of the client.

Suppliers/Procurement – such as company name, address and contact details, banking details, VAT number and BEE certificate/level information.

Website - such as general website page analytics and usage information through the use of cookies (all such information is un-identifiable information for the purposes of POPIA); as well as in some instances website user (i.e. non-member) name and contact details for access to specific EHS Green Leaf Consultancy CC content/services not freely available to the general public.

Employees – all applicable employee information required to be kept from a labour law perspective and running of the organisation. Such information relates to internal employees and not external clients. As such the rest of this Policy will not cover Employee Information as this is dealt with in EHS Green Leaf Consultancy CC’s internal HR Policies. Furthermore, external parties (unless with applicable court orders or legal reasons) shall not have access to such Employee Information.

4. HOW PERSONAL INFORMATION IS COLLECTED

Your personal information is obtained directly from you either via online forms on our website, email communications, and on occasion telephonically (only under specific circumstances and at your request).

5. PURPOSE FOR COLLECTING PERSONAL INFORMATION

EHS Green Leaf Consultancy CC collects personal information for the following purposes:

a. To provide you with services offered and requested.

b. To understand your specific needs and requirements, service and value offering.

c. To provide you with EHS Green Leaf Consultancy CC’s communications in relation to the services being rendered, and keeping you informed of governance related updates.

d. For health and safety purposes.

e. For statistical, historical and/or reporting purposes.

EHS Green Leaf Consultancy CC will always ask for your permission before it uses your personal information for any purpose not disclosed above or unrelated to the operations/services EHS Green Leaf Consultancy CC and its use in the ordinary course of business.

6. RECIPIENTS OF PERSONAL INFORMATION

The personal information collected is used only by EHS Green Leaf Consultancy CC and its employees in the rendering of its organisational purpose and services. Only in instances where the sharing of personal information to recipients outside of EHS Green Leaf Consultancy CC is necessary in order to fulfil an obligation or service will such information be provided.

7. PROTECTION OF PERSONAL INFORMATION

EHS Green Leaf Consultancy CC values the information that you choose to provide to us and will therefore take reasonable steps to protect your personal information from loss, misuse or unauthorised alteration. EHS Green Leaf Consultancy CC conducts regular security testing of its server and ensures that its employees are trained around protection of personal information to ensure that your personal information is used correctly and protected.

If you wish to object to EHS Green Leaf Consultancy CC processing your personal information, kindly complete Form 1 (Annexure A) in terms of POPIA and send same to Elsabe Paxton at finance@ehsgreenleaf.com Objecting to the processing of your personal information, may result in services being stopped, access or implementation issues and/or other service inefficiencies and communications.

8. STORAGE OF PERSONAL INFORMATION AND RETENTION THEREOF

Personal information is stored on EHS Green Leaf Consultancy CC’s server located onsite and, in the cloud, which is accessed by EHS Green Leaf Consultancy CC’s internal employees only. Personal information will only be retained for so long as necessary to carry out the function, Services required and/or for historical and statistical use by EHS Green Leaf Consultancy CC.

Personal Information no longer required for the purposes of rendering services to you or after completion of services, will be destroyed. EHS Green Leaf Consultancy CC undertakes to ensure that personal information shall not be stored for longer than 5 years, unless required to do so by law or other regulatory obligations and/or for historical record purposes.

9. LINKS ON EHS Green Leaf Consultancy CC WEBSITE OR EMAIL COMMUNICATIONS

EHS Green Leaf Consultancy CC is not responsible for the content or the privacy policies of websites of other institutions to which it may link you to – mainly for information purposes and access to documents provided by such institutions. The use of other third-party websites and content is at your sole discretion. This Policy applies solely to information collected by EHS Green Leaf Consultancy CC. EHS Green Leaf Consultancy CC is not responsible for any representations or information or warranties or content on any website of any third party (including websites linked to EHS Green Leaf Consultancy CC website). EHS Green Leaf Consultancy CC does not exercise control over third parties' privacy policies, and you should refer to the privacy policy of any third party to see how such party protects your privacy.

10. PERSONAL INFORMATION HELD BY OR DISCLOSED BY YOU TO THIRD PARTIES

If you disclose any personal information to a third party, such as your client, employer or business partner or anyone other than EHS Green Leaf Consultancy CC, you must be aware that EHS Green Leaf Consultancy CC does not regulate or control how that third party uses your personal information. You should always ensure that you read the privacy policy of any third party.

11. CORRECTION OF PERSONAL INFORMATION

It is your responsibility to ensure that the personal information provided to EHS Green Leaf Consultancy CC is true, correct and accurate at all times. You may update and correct your personal information at any time, via email communications to EHS Green Leaf Consultancy CC by sending an e-mail to finance@ehsgreenleaf.com EHS Green Leaf Consultancy CC does not vet or check the information provided to it, and thus will not be held responsible for any incorrect or outdated information we may have and which may be used to provide you with relevant and important communications.

If you would like your Personal Information deleted by EHS Green Leaf Consultancy CC, kindly also use Form 2 (Annexure B) and send same to Elsabe at finance@ehsgreenleaf.com Deleting your Personal Information may impact the services being used, offered or access there to.

12. ACCESS TO PERSONAL INFORMATION HELD BY EHS Green Leaf Consultancy CC

Refer to EHS Green Leaf Consultancy CC’s PAIA Manual for detailed information around your rights to access information held by EHS Green Leaf Consultancy CC and applicable steps to follow.

13. CHANGES TO THIS POLICY

EHS Green Leaf Consultancy CC may change this Policy at any time. The latest version of this policy will be available on the EHS Green Leaf Consultancy CC Web site. If you use this website or any of the services or facilities offered by EHS Green Leaf Consultancy CC after EHS Green Leaf Consultancy CC has displayed a change to this Policy, you will be deemed to have read and agreed to the change.

14. APPLICABLE LAWS

This Policy will be governed by the laws of the Republic of South Africa. Specifically, EHS Green Leaf Consultancy CC undertakes to comply with the provisions of POPIA and the Promotion of Access to Information Act No.2 of 2000 (“PAIA”).

In so far as EHS Green Leaf Consultancy CC collects and uses personal information, EHS Green Leaf Consultancy CC undertakes to uphold and comply with the data protection obligations so far as it applies to EHS Green Leaf Consultancy CC and in a proportionally manner based on the type and amount of information held.

15. JURISDICTION

You consent to the jurisdiction of the South African courts for any dispute which may arise out of this privacy policy.