Privacy Policy

Effective Date: 3 April 2026

Your information is safe with us

Thank you for visiting our website. We respect and protect the privacy of our users. This privacy policy tells you how we collect and use information.

1. Introduction and purpose of policy

Bow and Arc (Pty) Ltd is committed to managing personal information in accordance with the Protection of Personal Information Act (POPIA) and other applicable privacy laws in South Africa.

We take protecting your privacy seriously and we want to be open and transparent with you about how we handle your personal information.

This document sets out how we manage your personal information and is referred to as our Privacy Policy.

In this Privacy Policy, "we", "us" and "our" refers to Bow and Arc (Pty) Ltd and "you" and "your" refers to any individual about whom we collect personal information.

Our Privacy Policy explains how we collect, hold, store, process, use and disclose personal information (including personal information we collect, and personal information submitted to us, whether offline or online).

Other terms and conditions may also apply, such as collection notices and privacy statements which may be provided to you at the time your personal information is collected.

2. What is personal information?

2.1 Personal Information

Personal information is defined under POPIA as information relating to an identifiable, living, natural person, and where it is applicable, an identifiable, existing juristic person.

In this Privacy Policy, whenever we use the term "personal information", we are referring to this legal definition.

Some examples of personal information include: your contact details such as name, date of birth and address; internet (IP) addresses; and photographs.

Personal information does not include aggregated or de-identified data.

2.2 Special Personal Information

Special personal information includes information about an individual's: religious or philosophical beliefs, race or ethnic origin, trade union membership, political persuasion, health or sex life, or biometric information.

Bow and Arc is required to obtain your consent before it collects any special personal information from you. It will only be collected if it is strictly required for us to carry out our functions and/or activities.

3. What information we collect and how we collect it

Normally we collect your personal information from you directly, however on occasion, we may also collect personal information about you from other people and organisations.

In summary, we may collect your personal information when you:

• Enquire about a property (including directly with us or through real estate agencies or websites)

• Purchase or lease a property with us

• Subscribe to our newsletter

• Attend one of our events or open homes

• Interact with us (including when you visit one of our premises, visit our website, or contact us via social media, phone or online)

• Apply for a position with us

We may also collect and receive information from third parties such as real estate agencies, and other organisations with whom we have an affiliation, to respond to any enquiries you may make with respect to our developments.

4. Why do we collect, store and use your personal information?

We collect personal information that is necessary to provide you with our services, and to carry out our business.

The purpose for which we usually collect, store, and use your personal information depends on how you interact with us, but may include:

• To provide you with services you have acquired or inquired about and manage our relationship with you

• To administer, manage and communicate with you about existing services we are providing to you

• To improve our services and your experience with us

• To assess your suitability for a position with us, and manage your working relationship with us

• To create de-identified or aggregate data sets

Unless specifically authorised by you, we do not provide personal information to third parties for independent marketing purposes.

5. Why do we share your personal information?

We may share your information with third parties:

• For the reasons for which we collect, store and use that information

• For other purposes explained at the time we collect your personal information

• Where we are otherwise allowed or required to do so under law

Some of the third parties we may share your information with include:

• Our partners, suppliers and entities we do business with

• Our service providers and advisors

• Government and law enforcement agencies to comply with our legislative or regulatory obligations

6. Do we share your personal information overseas?

We generally only collect personal information in South Africa. However, we may share some personal information with our external service providers located overseas (such as cloud hosting providers).

We only ever share your personal information outside South Africa where we are permitted to do so under POPIA. This means we will take reasonable steps to ensure your personal information is treated securely and is subject to similar data protection laws.

7. Do we use or share your personal information for direct marketing?

When you provide your personal information to us, we may use that personal information to send you direct marketing communications to keep you informed about products and services offered by Bow and Arc.

We will only send these communications in accordance with applicable privacy and marketing laws, and only where you have consented or are an existing client.

You are always in control of the direct marketing communications which you receive and can opt-out at any time by following the relevant unsubscribe instructions in the communication or by contacting us.

8. How we store and protect your personal information

We are committed to protecting your personal information and ensuring that we securely store any personal information we collect in accordance with POPIA.

We take all reasonable steps to ensure that any personal information we collect, use or disclose is accurate, complete, up-to-date and stored in a secure environment protected from misuse, interference, loss, and unauthorised access.

We store electronic records in secure databases, using trusted third-party storage providers. We will only keep your personal information for as long as is necessary for the purposes set out in this Privacy Policy.

In the unlikely event of a reportable data breach, we will notify you and the Information Regulator in accordance with our obligations under POPIA.

9. How you can access or seek correction of your personal information

You are entitled to request access to your personal information that we hold. To do so, please contact us using the details set out in Section 11.

If you consider any personal information we have about you is inaccurate, out-of-date, incomplete, irrelevant or misleading, you are entitled to request correction of the information by contacting us.

10. How you can make an enquiry or complaint

If you have any questions or concerns, please contact us using the details set out below.

We will acknowledge receipt of your complaint within a week and will respond to your complaint within 30 business days from when we receive it.

If you are not satisfied with our response to a complaint, you are entitled to make a complaint to the Information Regulator (South Africa).

Website: inforegulator.org.za | Email: POPIAComplaints@inforegulator.org.za

11. How you can contact us

If you have any questions about our Privacy Policy, or about the ways we handle your personal information, please contact us:

Email: hello@bowandarc.co.za

Bow and Arc (Pty) Ltd

Lynnwood Bridge Bloukrans Building

5th Floor 0081

Pretoria

South Africa