POPIA Notice

1. Responsible party

The responsible party for the processing of your personal information is:

4D Grid Energy (Pty) Ltd
Houghton Estate, Johannesburg
Republic of South Africa
Contact: via our contact page

2. Information Officer

In accordance with POPIA and the Promotion of Access to Information Act, 2 of 2000 (PAIA), 4D Grid has designated an Information Officer. The Information Officer can be contacted at our contact page with the subject line "Information Officer — POPIA / PAIA enquiry".

3. Source of personal information

We collect personal information directly from you when you:

• Register an account on the GridSync platform;
• Submit our contact form;
• Interact with us by email or other written correspondence;
• Use the Services (we automatically log technical information for security and operational purposes).

Where you provide us with personal information about third parties (for example, end-users at a Site you manage), you warrant that you have the authority and consent to do so.

4. Purpose of processing

We process personal information to:

• Provide and operate the Services;
• Authenticate users and secure the platform;
• Respond to enquiries and provide customer support;
• Comply with legal and regulatory obligations;
• Improve and develop the Services.

Further detail is provided in our Privacy Policy.

5. Recipients of personal information

Personal information may be shared with operators (processors) acting on our instructions, including cloud hosting, database, email and analytics providers. We may also share personal information with public authorities, regulators or courts where required by law. A full list of categories of recipients is set out in our Privacy Policy.

6. Cross-border transfers

Some of our service providers process personal information outside South Africa. We rely on the safeguards permitted by Section 72 of POPIA, including binding corporate rules, contractual safeguards and the laws of recipient jurisdictions that provide adequate protection.

7. Voluntary or mandatory provision

Provision of certain personal information is mandatory in order to use the Services — for example, an email address is required to create an account. Other information (such as phone number on the contact form) is voluntary. Failure to provide mandatory information may mean we cannot provide the Services to you.

8. Your rights under POPIA

As a data subject, you have the right to:

• Be notified that your personal information is being collected and that it has been accessed or acquired by an unauthorised person;
• Request access to your personal information held by us;
• Request correction or deletion of personal information that is inaccurate, irrelevant, excessive, outdated, incomplete, misleading or obtained unlawfully;
• Object, on reasonable grounds, to the processing of your personal information;
• Object to direct marketing by means of unsolicited electronic communications;
• Withdraw consent where processing is based on consent;
• Submit a complaint to the Information Regulator.

9. How to exercise your rights

To exercise any of these rights, contact our Information Officer at our contact page. We will respond within a reasonable period and in any event within the timeframes prescribed by POPIA and PAIA. Requests for access to records held by 4D Grid may be subject to the procedure and fees set out in our PAIA Manual, which is available on request.

10. Complaints to the Information Regulator

If you believe that we have not handled your personal information in accordance with POPIA, you have the right to lodge a complaint with the Information Regulator:

The Information Regulator (South Africa)
JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
P.O. Box 31533, Braamfontein, Johannesburg, 2017
Tel: 010 023 5200
Email: complaints.IR@justice.gov.za
Website: inforegulator.org.za

11. Security safeguards

We have implemented appropriate, reasonable technical and organisational measures to secure the integrity and confidentiality of personal information, as described in our Privacy Policy. In the event of a security compromise, we will notify the Information Regulator and affected data subjects in accordance with Section 22 of POPIA.

12. Updates

This notice may be updated from time to time. The current version is always posted at this URL.