RAMSONCROSS FOUNDATION PRIVACY POLICY

Effective Date: 03.05.2018

Last Updated: 13.08.2026

Ramsoncross Foundation is:

Registered Name: THE RAMSON CROSS TRUST

Legal Status: NPC

Registration Number: IT000032/2018G

Reference Number: 2433815178

PBO Number: 930063029

Physical Address: 27 vd Linde, HQ, House of Ramson Cross, Block C, Unit 38,

Email: [email protected]

Telephone: 010 822 9380

For purposes of POPIA, Ramsoncross Foundation is the responsible party in respect of personal information that it determines how and why to process.

Our Information Officer can be contacted at:

Information Officer: Antoinette Morris

Email: [email protected]

The personal information we collect depends on how you interact with us. When you make a contribution or join Ripple, we may collect information such as your name, contact details, contribution amount, payment status, transaction information and information required for administration, record-keeping or tax purposes. Where Section 18A receipts are applicable, additional information may be required in order to comply with SARS requirements. When you contact us, enquire about a partnership, subscribe for updates or communicate with the Foundation, we may collect your name, email address, telephone number, organisation, correspondence and any other information you choose to provide. Our website may also collect certain technical information automatically, including your IP address, browser and device information, pages visited, referral information and information collected through cookies or similar technologies. We aim to collect only information that is reasonably necessary for a legitimate purpose.

Contributions made through our website may be processed by an independent third party payment provider.

Payment Provider: Paysoft

The payment provider may collect financial information necessary to process your contribution in accordance with its own privacy and security practices. Where payment information is collected directly by the payment provider, Ramsoncross Foundation does not receive or retain your complete card or banking credentials. We encourage you to review the privacy terms of the applicable payment provider before completing a transaction.

We may process personal information to administer donations and recurring Ripple contributions; provide receipts or transaction confirmations; communicate with contributors; respond to enquiries; manage relationships with partners and organisations; share Foundation and impact updates where appropriate; comply with legal, regulatory, accounting and tax obligations; prevent fraud or misuse; operate, secure and improve our website; and fulfill the charitable and administrative activities of the Foundation. Where required by law, we will obtain your consent before processing your information for a particular purpose. We will not use personal information for a purpose that is materially incompatible with

the reason for which it was originally collected unless permitted by law or authorised by you.

Administrative communications relating to a contribution, payment, receipt, enquiry or active relationship with Ramsoncross may be sent where reasonably necessary. Fundraising, promotional or direct-marketing communications will be managed separately and in accordance with applicable law. Where consent is required, we will ask for it before sending electronic direct marketing. You may unsubscribe from marketing communications at any time by using the unsubscribe facility provided in the communication or by contacting us. Unsubscribing from marketing does not prevent us from sending essential administrative communications relating to an existing contribution, enquiry or legal obligation.

Our website may use cookies and similar technologies to operate correctly, remember preferences, understand how visitors use the website and improve its performance. Some cookies may be necessary for the website to function. Others, such as analytics or advertising cookies, may require your consent depending on how they are used. Where appropriate, visitors will be given the opportunity to manage non-essential

cookies. Third-party platforms used for analytics, website hosting, social-media integration or other functionality may process information in accordance with their own privacy policies. Analytics and tracking platforms currently used: Google Analytics, Paysoft.

We do not sell personal information. We may share information with trusted service providers where reasonably necessary to operate the Foundation, including payment processors, website and hosting providers, technology providers, professional advisers, accountants, auditors and service providers assisting with communications or Foundation administration. We may also disclose information where required by law, regulation, court order or a competent regulatory or law-enforcement authority. Where third parties process personal information on our behalf, we require appropriate confidentiality and data-protection safeguards.

Some technology, hosting, email, analytics or payment service providers may process information outside South Africa. Where personal information is transferred outside South Africa, Ramsoncross Foundation will take reasonable steps to ensure that the transfer complies with POPIA and that appropriate safeguards are in place.

We recognise that generosity is not determined by age. However, children's personal information receives additional protection under South African law. If you are under 18 and are not legally competent to provide the necessary consent yourself, a parent, guardian or other legally competent person must assist you before you provide personal information, join Ripple or make a contribution through the website. We do not knowingly collect or process children's personal information without an appropriate lawful basis and, where required, the consent of a competent person. Children should not submit sensitive personal information through general website forms.

Because our work may involve healthcare, welfare, humanitarian assistance and vulnerable individuals, some interactions with the Foundation may involve sensitive or special personal information. Please do not submit medical information, identity documents, detailed financial information or sensitive information concerning yourself or another person through a general website contact form unless Ramsoncross has specifically requested it and provided an appropriate method for doing so. Where the Foundation is required to process sensitive or special personal information, we will do so only where permitted by law and with appropriate safeguards.

We take reasonable technical and organisational measures designed to protect personal information against loss, misuse, unauthorised access, alteration, disclosure or destruction. Access to personal information is limited to people and service providers who reasonably require it for legitimate Foundation activities. No internet-based system can guarantee absolute security. Where a security compromise involving personal information occurs, Ramsoncross will respond and make notifications as required by applicable law.

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, or for a longer period where retention is required or permitted by law. This may include retention necessary for financial records, tax compliance, Section 18A administration where applicable, transaction records, audit requirements, dispute resolution and legitimate Foundation governance purposes. When information is no longer reasonably required, it will be securely deleted, destroyed, de-identified or otherwise handled in accordance with applicable law.

Subject to POPIA and other applicable law, you may ask us whether we hold personal information about you; request access to your personal information; ask us to correct or update inaccurate information; request deletion or destruction where legally appropriate; object to certain processing; withdraw consent where processing is based on consent; or object to direct marketing. Certain legal or regulatory obligations may prevent us from immediately deleting information even where a request has been made.

To exercise your rights, contact:

We may request reasonable proof of identity before acting on a request in order to protect your information.

If you have a concern about how Ramsoncross Foundation has handled your personal information, we would appreciate the opportunity to address it directly. You may contact our Information Officer at [email protected]

You also have the right to lodge a complaint with the Information Regulator of South Africa in accordance with POPIA.

Our website may contain links to websites or services operated by third parties. Ramsoncross Foundation does not control those third parties and is not responsible for their privacy practices, security or content. We recommend reviewing the applicable privacy policy before providing personal information to a third-party website.

We may update this Privacy Policy where our operations, technology, website functionality or legal obligations change. The current version will be made available on our website together with its effective date.

Questions about this Privacy Policy or the way Ramsoncross Foundation processes personal information may be sent to:

Physical Address: 27 vd Linde, HQ, House of Ramsoncross, Block C, Unit 38,

Email: [email protected]

Telephone: 010 822 9380

Information Officer: Antoinette Morris

Privacy / POPIA Email: [email protected]