We may collect and process the following information about you:

• Information that you give us: This is information about you that you give to us by filling in forms on the EzyBuilder Platform (or other forms that we ask you to complete), giving us a business card (or similar), while attending one of our events or corresponding with us by telephone, post, email or otherwise.

  When you sign up for an EzyBuilder Platform account, it may include:

  • Name
  • Email
  • Username
  • Profile Picture
  • Address
  • Bank Account Details
  • Company Name and Your Role
  • Company Registration Details

• Information that the EzyBuilder Platform and other systems collect about you:

  • If you visit the EzyBuilder Platform they will automatically connect some information about you and your visit, including the Internet protocol (IP) address used to connect your device to the Internet and some other information such as your browser type and version and the pages on the sites that you visit.
  • The EzyBuilder Platform may also download "cookies" to your device – this is described in our separate Cookie Notice.
  • If you exchange emails, telephone conversations or other electronic communications with our employees and other staff members, our information technology systems will record details of those conversations, sometimes including their content.

• Other information: We may also collect some information from other sources. For example:

  • If we have a business relationship with the organisation that you represent, your colleagues or other business contacts may give us information about you such as your contact details or details of your role in the relationship.
  • We sometimes collect information from third party data providers or publicly available sources for anti-money-laundering, background checking and similar purposes, and to protect our business and comply with our legal and regulatory obligations.

We may use your information for the following purposes:

• To create a user account for you;
• To operate, manage, develop and administer your account for you;
• To send payments to you;
• To send you emails about your account and the Ezy Builder Platform, including emails containing marketing information which we believe you will find relevant and interesting;
• To operate, manage, develop and promote the Ezy Builder Platform and our business and, in particular, our relationship with you or the organisation you represent (if any) and related transactions;
• To protect the security of the Ezy Builder Platform;
• To protect our the Ezy Builder Platform and our business from fraud, money-laundering, breach of confidence, theft of proprietary materials and other financial or business crimes;
• To comply with our legal and regulatory obligations and bring and defend legal claims.

We may from time to time review information about you held in our systems – including the contents of and other information related to your email and other communications with us – for compliance and business-protection purposes as described above. This may include reviews for the purposes of disclosure of information relevant to litigation and/or reviews of records relevant to internal or external regulatory or criminal investigations.

To the extent permitted by applicable law these reviews will be conducted in a reasonable and proportionate way and approved at an appropriate level of management. They may ultimately involve disclosure of your information to governmental agencies and litigation counterparties as described below.

Your emails and other communications may also occasionally be accessed by persons other than the member of staff with whom they are exchanged for ordinary business management purposes (for example, where necessary when a staff member is out of the office or has left Chenosis).

We will only process your personal information as necessary so that we can pursue the purposes described above, and then only where we have concluded that our processing does not prejudice you or your privacy in a way that would override our legitimate interest in pursuing those purposes. In exceptional circumstances we may also be required by law to disclose or otherwise process your personal information.

We will tell you, when we ask you to provide information about yourself, if provision of the requested information is necessary for compliance with a legal obligation or, on the other hand, if it is purely voluntary and there will be no implications if you decline to provide the information. Otherwise you should assume that we need the information for our business or compliance purposes (as described above). If you are uncertain as to Chenosis's need for information that we request from you, please contact the Chenosis representative asking for the information, or Contact Us with your query.

We may disclose personal information about you, where reasonably necessary for the various purposes set out above:

• to the other members of the Chenosis group of companies;
• to your colleagues within the organisation that you represent;
• to service providers who host the EzyBuilder Platform or other information technology systems or otherwise hold or process your information on our behalf, under strict conditions of confidentiality and security – including the third party service providers listed below:
  • AWS - cloud data storage, platform hosting, and mailer service. For more details, visit AWS Privacy Policy;
  • OpenAI - processing user prompts and generating text responses based on user prompts. See OpenAI Privacy Policy and OpenAI Terms of Use for more information; and
  • Google Analytics - a service which enables us to analyse how our users use the EzyBuilder Platform. See Google Privacy Policy for more information;
• to partners who run any events that you sign up to through the EzyBuilder Platform;
• to a person who takes over our business and assets, or relevant parts of them; or
• in exceptional circumstances:
  • to competent regulatory, prosecuting and other governmental agencies, or litigation counterparties, in any country or territory; or
  • where we are required by law to disclose.

These disclosures may involve transferring your personal information overseas. If you are dealing with us within the European Economic Area (or the UK, after it has left the European Economic Area), you should be aware that this may include transfers to countries outside the European Economic Area / UK, which do not have similarly strict data privacy laws. In those cases, where we transfer personal data to other members of the Chenosis group or our service providers, we will ensure that our arrangements with them are governed by appropriate safeguards or agreements on terms approved for this purpose by the European Commission. If you are dealing with us within the Republic of South Africa, you should be aware that this may include transfers to countries outside the Republic of South Africa, which do not have similarly strict data privacy laws. In those cases, where we transfer personal data to other members of the Chenosis group or our service providers, we will ensure that our arrangements with them are governed by appropriate safeguards or agreements on terms compliant with the Protection of Personal Information Act, 2013.

Please Contact Us (see below) if you would like to know whether any such agreements are in place or, if so, to see a copy.

We will delete the information that we hold about you when we no longer need it. Specific information about our record retention policies is available on request. Please Contact Us (see below).

Note that we may retain some limited information about you even when we know that you have left the organisation that you represent, if you represent an organisation, so that we can maintain a continuous relationship with you if and when we are in contact with you again, representing a different organisation.

You may:

• have a right of access to the personal information that we hold about you, and to some related information, under applicable data protection law;
• require any inaccurate personal information to be corrected or deleted;
• have the right to ask us to erase your personal information and to ask us to restrict the processing of your personal information, in certain circumstances;
• object to our use of your personal information for direct marketing purposes at any time and you may have the right to object to our processing of some or all of your personal information (and require them to be deleted) in some other circumstances; and
• have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

If you wish to exercise any of these rights, please Contact Us as set out below.

You can also lodge a complaint about our processing of your personal information with the body regulating data protection in your country, where you live or work, or the location where the data protection issue arose. Where South African data protection law is applicable, please go to https://inforegulator.org.za/contact-us/ for the Information Regulator's contact details.