1. INTRODUCTION

1.1 Meditek Systems (Pty) Ltd is an electronic manufacture and development company based in Cape Town. This Privacy Policy is in place to inform our employees and clients how we collect, store, use, protect, share, and otherwise process personal information, in line with the Protection of Personal Information Act 4 of 2013 (“POPIA” or “the Act”). 1.2 Any use of the terms “us”, “we”, “our” or “Meditek Systems” means Meditek Systems (Pty) Ltd. Any use of the terms “you” or “your” means any person (including a legal person) whose personal information is being processed. 1.3 By submitting any information by electronic or other means (directly to us), you are deemed to have read and understood and agree to accept and be bound by the terms of this Privacy Policy.

2. CONSENT TO PROCESS PERSONAL INFORMATION

2.1 By submitting information to Meditek Systems directly or by electronic means, you hereby expressly consent to us processing your personal information whether electronically or manually and agree that all personal information processed by us may be stored and used for the purposes detailed in this Privacy Policy. 2.2 You are not required to provide any personal information to our offices but may voluntarily choose to do so when engaging our services or if you are an employee. Should you not agree with this Privacy Policy and not consent to the processing of your personal information, we may be unable to offer our services to you or maintain your employment details, as required by law. 2.3 If you provide further information in addition to the minimum information required to process your lease application or as otherwise required, you do so at your own risk, and agree that the information provided is not for the purpose of misrepresentation or impersonation of any other person or entity. 2.4 If you refuse to provide us with any mandatory information (information required to be obtained by us by law or another lawful obligation), we reserve the right to discontinue any business relationship of any kind with you.

3. WHAT TYPES OF PERSONAL INFORMATION DO WE PROCESS?

3.1 When engaging our services or becoming or being employed by us, we may request and collect certain personal information which is required (mandatory) for the proper rendering of our services or fulfilling our legal obligations, which information may but not necessarily, include: 3.1.1 Your name and surname, identity number or date of birth, email, physical address, and contact information; 3.1.2 Information related to your income and expenses; 3.1.3 Your banking details; 3.1.4 Information about your affordability, criminal, and credit history, where necessary.

4. WHEN WILL WE PROCESS YOUR PERSONAL INFORMATION?

4.1 We may process your personal information when: 4.1.1 You send any personal information directly to us or by electronic means; 4.1.2 When you are employed by us; 4.1.3 When engaging our services; 4.1.4 When we are required to do so by law. 4.2 We will only process personal information given to us with your consent, and which is necessary to the meet the legitimate purpose for which the information is required. 4.3 In certain instances, we are required by law, to collect and process your personal information, which laws include but are not limited to: 4.3.1 The Electronic Communications and Transactions Act (ECTA); 4.3.2 The Financial Intelligence Centre Act (FICA); 4.3.3 The National Credit Act. 4.4 Should any applicable laws including but not limited to The National Credit Act, 34 of 2005 require your written consent for the processing of certain personal information by us, such consent will be obtained prior to the processing of such information.

5. HOW DO WE USE YOUR INFORMATION?

5.1 You consent and agree that we may process your personal information for the following purposes: 5.1.1 To enable us to fulfil our obligations in terms of our contractual agreement(s) with you (including employment contracts); 5.1.2 To respond to your enquiries and manage our relationship with you; 5.1.3 To ensure that our records are kept up to date; 5.1.4 To contact you regarding current or new services offered by us (provided it does not amount to direct marketing); 5.1.5 To comply with any applicable laws or legal requirements or for fraud prevention; 5.1.6 Generally, to conduct the business of Meditek Systems (Pty) Ltd.

6. YOUR RESPONSIBILITIES & RIGHTS

6.1 You are responsible for ensuring that the personal information provided to us is both accurate and up to date. Should you send personal information on behalf of someone other than yourself, you warrant that you have their permission to do so and are deemed to have accepted the terms of this Privacy Policy on their behalf. 6.2 You have the right to: 6.2.1 Request that we correct, destroy, delete, or update any of the personal information that we may have processed in accordance with this Privacy Policy, subject to applicable laws. 6.2.2 Request access to or confirmation of any personal information that we hold about you. 6.2.3 Withdraw your consent to our processing of personal information, unless the processing of such information is in compliance with an obligation imposed on us by law or prevents the proper performing of any contractual obligation that we may have with you. 6.2.4 Object to the processing of your personal information by us unless the processing of such information is required by law. 6.3 To ensure that your information is protected, we will require that you verify your identity before accessing your personal information held by us or making any changes or correction to such information. 6.4 Should you no longer want to receive any marketing related emails or other electronic communications from us based on the personal information provided by you, you can opt out from such communications at any time, by contacting our information officer.

7. ACCURACY OF INFORMATION

7.1 We take all reasonable steps to ensure that all information provided to us is secure, responsibly used, correct, and treated confidentially. 7.2 We may from time to time, request that you update and review your personal information to ensure that it is accurate and up to date.

8. DISCLOSURE OF PERSONAL INFORMATION

8.1 We may disclose your personal information in certain instances set out in this Privacy Policy or where we are required to do so by law. 8.2 We will not without your express consent, disclose your personal information to any third party(ies), other than as set or below: 8.2.1 To our third-party service providers who require such information in assisting us with fulfilling our obligations and in respect of the purposes listed in clause 5.1.1 – 5.1.7 above, provided such employees and/or third-party service providers agree to keep such information confidential; 8.2.2 If we have a legal or contractual duty to provide the information to a third party; 8.2.3 If required to do so by law in terms of applicable legislation; 8.2.4 To third-party service providers who may assist us with communication with our clients; 8.2.5 To our service providers contracted under us to assist with business operation, fraud detection and prevention, marketing, and other technology services; 8.2.6 To law enforcement, government officials, fraud detection agencies or other third parties in instances where we believe it is necessary in good faith, to disclose personal information of our users to prevent physical harm or financial loss, to report to support an investigation into suspicious or suspected illegal activity or the violation of this Privacy Policy. 8.3 Should we want to share your personal information for any other reason not listed above, we will not do so without first obtaining your prior consent.

9. SECURITY AND RETENTION

9.1 While we are in possession of your personal information, all necessary measures are in place to ensure that: 9.1.1 Your personal information is treated as strictly confidential, save for the provisions regarding disclosure of personal information as contained in this Privacy Policy; 9.1.2 Your personal information is stored in a secure manner and is protected against unauthorised or unlawful processing, accidental loss, destruction, damage, alteration, disclosure, or unauthorised access; 9.1.3 You are notified as soon as reasonably possible if we become aware of any possible or actual threats to the privacy and confidentiality of your information, any unauthorised access, use or processing of your information; 9.1.4 Upon your written request, personal information held by us is either returned or destroyed save for any information we are required by law to retain. 9.2 Your personal information shall not be retained or stored by us for a period longer than for which it was originally obtained and required, unless we are required to do so by law, or you consent to such information being retained by us for a longer period.

10. AGE OF CONSENT

10.1 By engaging our services, you warrant that you are 18 years of age or older and of full legal capacity. If you are under the age of 18 or if you are not legally permitted to enter into a binding agreement, then you may do so only with the involvement and supervision of your parent or legal guardian. If your parent or legal guardian supervises you and gives his/her consent, then such person agrees to be bound by the terms of this Privacy Policy.

11. CHANGE OF POLICY

11.1 We reserve the right to make changes to and/or update any of the terms in this Privacy Policy at any time. 11.2 If you opt out of receiving electronic updates from us, you accept responsibility for ensuring that you are aware of any changes made to this Privacy Policy, and thereby accept the updated terms. The most recent version of this Privacy Policy will always be available at our offices.

12. DISCLAIMER & INDEMNITY

12.1 The engaging of our services is entirely at your own risk, and you assume full responsibility for any risk to or loss of personal information resulting from the use of our services. 12.2 While we undertake to do all things necessary to protect your rights of privacy and to protect your personal information, we cannot guarantee nor do we accept any liability whatsoever for the unauthorised or unlawful disclosure of your personal information by us or any third parties who are not subject to our control, while such information is in our possession, unless such disclosure is due to our gross negligence. 12.3 Should XXXXXXXX be collecting any personal information on your behalf, you hereby indemnify us against any loss or damage, direct or indirect, that a data subject suffers due to your unauthorised use of such person’s personal information or your non-compliance with POPIA.

13. CONTACT INFORMATION

For more information or to access, correct, amend, delete, or update any personal information or to register a complaint, you may contact our Information Officer Ms Sheena Adolf, at sheena@mediteksystems.co.za