Privacy Notice

This privacy notice for Rainmaker Marketing ("we," "us," or "our") describes how and why we may collect, store, use, and share ("process") your information when you use our services ("Services") or services provided by any property development that we market.

This notice applies when you:

• Visit our website at https://www.rainmakermarketing.co.za, or any website or social media platform associated with a development or developer that is developed, designed, hosted, and/or managed by us and contains a link to this privacy notice.
• Engage with us through related channels, such as social media, sales, marketing, or events.
• Use any listing or reservation platform, unit availability portal, registration system, payment flow, or other digital service we build or manage for a development partner.

Email: privacy@rainmakermarketing.co.za

Postal address: Rainmaker Marketing, First Floor, Innova Haus, Marine Walk, 1 Salta Boulevard, Jabu Ngcobo Drive, Umdloti, KwaZulu-Natal 4320, South Africa

1. Summary of Key Points

This summary provides key points from our privacy notice, but you can find out more details about any of these topics below.

Consent for future communications

By agreeing to this Privacy Notice, you expressly consent to receive future communications from Rainmaker Marketing and its development partners regarding updates, products, services, offers, and other marketing messages that we believe may be of interest to you. We may communicate with you through various channels, including email, telephone, text messaging, and postal mail, subject to your indicated preferences and applicable laws.

You have the right to withdraw your consent at any time. To opt out, follow the unsubscribe instructions contained in communications or contact privacy@rainmakermarketing.co.za.

Key questions

• What personal information do we process? We may process personal information depending on how you interact with us, the Services, the choices you make, and the products and features you use.
• Do we process any sensitive personal information? We may process sensitive personal information when necessary with your consent or as otherwise permitted by applicable law.
• Do we receive any information from third parties? We may receive information from public databases, marketing partners, social media platforms, and other outside sources.
• How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent.
• In what situations and with which types of parties do we share personal information? We may share information in specific situations and with specific categories of third parties.
• How do we keep your information safe? We have organisational and technical measures in place, but no system is 100% secure.
• What are your rights? Depending on where you are located geographically, applicable privacy law may provide certain rights regarding your personal information.
• How do you exercise your rights? Contact privacy@rainmakermarketing.co.za.

2. What Information Do We Collect?

2.1 Personal information you disclose to us

In short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide when you register on the Services, express an interest in obtaining information about us or our products and Services, participate in activities on the Services, complete forms, make reservations or payments, or otherwise contact us.

Personal information provided by you may include:

• Names
• Phone numbers
• Email addresses
• Mailing addresses
• Job titles
• Usernames
• Contact preferences
• Contact or authentication data
• Billing addresses

Sensitive information: when necessary, with your consent or as otherwise permitted by applicable law, we may process sensitive personal information including government identifiers, credit worthiness data, and financial data.

Payment data: we may collect data necessary to process your payment if you make purchases, such as your payment instrument number and the security code associated with your payment instrument. All payment data is stored by iKhokha (https://ikhokha.com/). iKhokha terms are available at https://www.ikhokha.com/terms-and-conditions-2021.

All personal information you provide must be true, complete, and accurate, and you must notify us of any changes.

"Personal information" is defined according to POPIA as information that identifies you as an individual or is capable of identifying you. By providing personal information to us, you consent to its processing in accordance with this Privacy Notice.

2.2 Information automatically collected

In short: Some information — such as your IP address and/or browser and device characteristics — is collected automatically when you visit our Services.

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity but may include device and usage information, such as IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use the Services, and other technical information.

Automatically collected information includes:

• Log and usage data (diagnostic, usage, and performance information recorded in log files).
• Device data (device identifiers, browser type, ISP/mobile carrier, operating system, and system configuration).
• Location data (precise or imprecise depending on device settings; you can disable location access but certain features may not work).

2.3 Information collected from other sources

In short: We may collect limited data from public databases, marketing partners, and other outside sources.

We may obtain information about you from sources such as public databases, joint marketing partners, affiliate programs, data providers, and social media platforms. This information may include mailing addresses, job titles, email addresses, phone numbers, intent or behavioural data, IP addresses, social media profiles/URLs, and custom profiles for targeted advertising and event promotion.

3. How Do We Process Your Information?

In short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent.

• Facilitate account creation and authentication and manage user accounts.
• Deliver and facilitate delivery of services to you.
• Respond to user inquiries and provide support.
• Send administrative information (service messages, changes to terms and policies).
• Fulfil and manage orders, payments, returns, and exchanges.
• Request feedback.
• Send marketing and promotional communications (subject to your preferences and applicable law).
• Deliver targeted advertising and personalised content.
• Protect our Services (fraud monitoring and prevention).
• Identify usage trends and improve Services.
• Measure the effectiveness of marketing and promotional campaigns.
• Save or protect an individual's vital interests.

4. What Legal Bases Do We Rely On to Process Your Information?

In short: We only process your personal information when we believe it is necessary and we have a valid legal basis under applicable law.

4.1 South Africa (POPIA)

We process your personal information in accordance with POPIA, including obtaining consent where necessary, processing information consistently with the purpose for which it was collected, and ensuring that we have a lawful basis for processing.

4.2 EU/UK (GDPR/UK GDPR)

Where applicable, we may rely on: consent, performance of a contract, legitimate interests, legal obligations, and vital interests.

4.3 Canada (PIPEDA)

Where applicable, we may rely on express or implied consent, and lawful exceptions where processing without consent is permitted.

5. When and With Whom Do We Share Your Personal Information?

In short: We may share information in specific situations and with specific categories of third parties.

We may share your data with third-party vendors, service providers, contractors, or agents who perform services for us and require access to such information. We implement contractual safeguards and require confidentiality and security commitments where appropriate.

Categories of third parties may include:

• Ad networks
• Affiliate marketing programs
• Communication and collaboration tools
• Data analytics services
• Data storage service providers
• Finance and accounting tools
• Payment processors
• Performance monitoring tools
• Retargeting platforms
• Sales and marketing tools
• Social networks
• Testing tools
• User account registration and authentication services
• Website hosting service providers

We may also share personal information in the following situations:

• Business transfers (merger, sale of assets, financing, or acquisition).
• Google Maps Platform APIs (e.g., Maps API, Places API) where relevant; location may be cached on your device.
• Affiliates (required to honour this notice).
• Business partners (to offer certain products, services, or promotions).

6. International Transfers

Your information may be transferred to and processed in countries other than where you live, including where our service providers host systems. Where required, we will implement appropriate safeguards for cross-border transfers and comply with applicable legal requirements.

7. How Long Do We Keep Your Information?

In short: We keep your information for as long as necessary to fulfil the purposes outlined in this notice, unless otherwise required or permitted by law.

We retain personal information for the period necessary to achieve the purpose for which it was collected or subsequently processed, including legal, accounting, audit, fraud prevention, and dispute-resolution requirements. Where required by applicable law, we may restrict further processing or access to retained information.

8. Do We Use Cookies and Other Tracking Technologies?

In short: We may use cookies and other tracking technologies to collect and store your information. You can manage cookies through your browser/device settings and, where implemented, our cookie preferences tools.

9. How Do We Keep Your Information Safe?

We implement appropriate and reasonable technical and organisational security measures designed to protect the security of personal information. However, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure.

Security incident response

If we become aware of a security incident involving personal information, we will take steps to investigate and mitigate the incident. Where required by applicable law, we will notify affected individuals and/or regulators.

10. Do We Collect Information From Minors?

In short: We do not knowingly collect data from or market to children under 18 years of age.

11. What Are Your Privacy Rights?

Under POPIA, you may request access to, correction of, or deletion of your personal information; object to processing; and lodge a complaint with the Information Regulator (South Africa). In other regions (EEA/UK/Switzerland/Canada) you may have additional rights under applicable data protection laws.

12. Controls for Do-Not-Track Features

No uniform technology standard for recognising and implementing DNT signals has been finalised. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online.

13. Region-Specific Rights: South Africa

If you are unsatisfied with how we address a complaint regarding processing of personal information, you can contact the Information Regulator (South Africa):

• General enquiries: enquiries@inforegulator.org.za
• Complaints (POPIA/PAIA Form 5): PAIAComplaints@inforegulator.org.za and POPIAComplaints@inforegulator.org.za

14. Updates to This Notice

We may update this privacy notice from time to time. The updated version will be indicated by an updated "Revised" date and will be effective as soon as it is accessible.

15. How Can You Contact Us About This Notice?

Email privacy@rainmakermarketing.co.za or write to the postal address listed above.

16. How Can You Review, Update, or Delete the Data We Collect From You?

To request access, correction, restriction, objection, or deletion (where applicable), contact privacy@rainmakermarketing.co.za. We may request additional information to verify your identity and will respond in accordance with applicable data protection laws.

17. Additional Disclosures

• Direct marketing under POPIA: We will provide a reasonable opportunity to opt out of direct marketing communications.
• Third-party links: We are not responsible for third-party privacy practices.
• Automated decision-making: Unless expressly stated for a specific Service, we do not make decisions based solely on automated processing that produce legal or similarly significant effects.