Privacy Policy

ImfuyoGrowth (Pty) Ltd ("we", "our", or "us") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you use the ImfuyoGrowth platform ("Platform"). This policy complies with the Protection of Personal Information Act (POPIA) of South Africa and applicable international data protection standards.

We collect the following categories of personal information: Personal Identification: • Full name, email address, phone number • South African ID number or passport number (for KYC verification) • Date of birth Financial Information: • Bank account details (for withdrawal processing only) • Payment card details (processed and stored securely by Stripe — we do not store card numbers) • Transaction and investment history Usage Data: • IP address, device type, browser type • Pages visited, time spent on Platform • Referral codes used and generated Communications: • Messages sent to our support team • Email and SMS communication preferences

We use your personal information to: • Process livestock purchase orders and payments • Credit proceeds and process withdrawal requests to your bank account • Send purchase confirmation emails and SMS notifications • Provide daily sales update notifications • Manage your referral program participation • Verify your identity for compliance with POPIA and anti-money laundering regulations • Improve and personalize your Platform experience • Send transactional communications (order confirmations, payment receipts) • Respond to support queries and resolve disputes • Comply with legal obligations and regulatory requirements We do not use your information for unsolicited marketing without your explicit consent.

We share your personal information only with: Payment Processing: • Stripe Inc. — for secure payment processing. Stripe's privacy policy governs their use of your payment data. Communication Services: • Resend — for transactional email delivery (order confirmations, sales updates) • Twilio — for SMS OTP verification and purchase notifications These service providers are contractually bound to process your data only as instructed by us and in accordance with applicable data protection laws. We do not sell, rent, or trade your personal information to third parties for marketing purposes. We may disclose your information to law enforcement or regulatory authorities if required by South African law.

Your data is stored on secure servers hosted in South Africa and the European Union (via Supabase). We implement the following security measures: • SSL/TLS encryption for all data transmitted between your device and our servers • Bcrypt password hashing — your password is never stored in plain text • Role-based access controls — only authorized staff can access personal data • Regular security audits and vulnerability assessments • Two-factor authentication available for your account Despite these measures, no internet transmission is 100% secure. You are responsible for maintaining the security of your account credentials.

We retain your personal information for as long as your account is active and for a period of 5 years after account closure, as required by South African financial regulations. Transaction records are retained for 7 years in compliance with tax and financial reporting obligations. You may request deletion of your personal data (subject to regulatory retention requirements) by contacting privacy@imfuyogrowth.co.za.

Under the Protection of Personal Information Act (POPIA), you have the right to: • Access — Request a copy of the personal information we hold about you • Correction — Request correction of inaccurate or incomplete data • Deletion — Request deletion of your data (subject to legal retention requirements) • Objection — Object to the processing of your data for specific purposes • Portability — Request your data in a portable, machine-readable format • Complaint — Lodge a complaint with the Information Regulator of South Africa To exercise any of these rights, contact our Information Officer at privacy@imfuyogrowth.co.za or by WhatsApp. We will respond within 30 days.

We use the following types of cookies: Essential Cookies: Required for the Platform to function (session management, authentication). These cannot be disabled. Analytics Cookies: Help us understand how users interact with the Platform (pages visited, time on site). These are anonymized and do not identify you personally. Preference Cookies: Remember your settings and preferences (e.g., language, timezone). You can control cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to use the Platform.

The Platform is not intended for persons under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected data from a minor, please contact us immediately at privacy@imfuyogrowth.co.za and we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or via a notice on the Platform at least 14 days before the changes take effect. Your continued use of the Platform after the effective date of changes constitutes your acceptance of the updated policy.

For privacy-related queries, requests, or complaints: Information Officer: ImfuyoGrowth Privacy Team Email: privacy@imfuyogrowth.co.za WhatsApp: +27 00 000 0000 Address: South Africa Information Regulator of South Africa (for complaints): Website: www.inforegulator.org.za Email: inforeg@justice.gov.za