Appointed Representative of Liberty Life — Authorised Financial Services Provider

Elias Baloyi Advisory

Privacy & Security Notice

🛡 POPIA Compliant Last Updated: March 2026

Your right to privacy and security is very important to us. Elias Baloyi Advisory (“the Practice”, “we”, “us”, “our”) is an Appointed Representative of Liberty Life, an Authorised Financial Services Provider and registered long-term insurer, which is a subsidiary of the Standard Bank Group.

As a representative of Liberty Life, we are bound by Liberty’s Group-wide privacy and data protection framework. This Notice describes how we, in our capacity as your financial adviser, collect, use, store, share, and protect your personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA) and the broader Liberty Group privacy standards.

For Liberty’s full Group Privacy and Security Notice, please visit www.liberty.co.za/legal.

01

Purpose and Scope of This Notice

This Notice aims to inform you about how we handle your personal information, including how we collect, use, store, share, update, and protect it. We will explain your privacy rights and the legal protections in place.

Where we facilitate the placement of Liberty Life products on your behalf, Liberty Life will act as the responsible party or data controller for the personal information processed in connection with those products. In our capacity as your appointed financial adviser, Elias Baloyi Advisory may also process your personal information to provide you with advice and related services.

Ensuring the privacy, confidentiality, and security of your personal information is a top priority for us. This commitment is crucial to maintaining your trust and meeting your needs effectively.

02

What Personal Information Do We Collect?

Personal information is any information from which you can be identified. The personal information we may collect about you includes:

03

How and With Whom We Collect and Share Personal Information

Collection Methods

We collect your personal information directly from you through in-person meetings, telephone conversations, or online channels such as our website, contact forms, or social media platforms (e.g., Facebook Lead Forms).

Direct Collection

When you engage our advisory services, contact us, or provide information through our website or social media channels, we collect your personal information directly from you.

Third-Party Involvement

To fulfil our responsibilities as an Appointed Representative of Liberty Life, we may collect and share your information with selected third parties. These include:

We collect your personal information for the purposes set out in this Notice or otherwise communicated to you.

04

Why Do We Process Your Personal Information?

We aim to provide you with personalised financial advice and services to meet your needs. We may process your personal information for any of the following reasons:

Contract Requirements

We may process your personal information where it is required to conclude or perform under a client engagement, financial needs analysis, or product application, including:

Lawful Obligations

We may process your personal information to comply with legal and regulatory requirements, including:

Legitimate Interest

We may process your personal information in the regular management of our practice, including:

Consent

In addition to the above, we may process your personal information where you have given us your specific consent. We will not share your personal information with anyone outside our practice or our service providers without your permission, unless:

05

Storage and Retention of Personal Information

We store your personal information as required by law. Specifically:

After the applicable retention period, your personal information will be securely deleted or anonymised.

06

Transfer of Personal Information Across Borders

Sometimes we, or Liberty Life and its service providers, will process your personal information in countries other than South Africa, either to carry out your instructions or for ordinary business purposes. These countries may not have the same level of data protection as South Africa.

In such cases, we will only process your personal information with your consent. Where necessary, we will require the party to whom we transfer your personal information to agree to our privacy principles, associated policies, and practices, in accordance with POPIA Section 72.

For more detail on how Liberty Group processes information across its international operations, please refer to the Liberty Group Privacy and Security Notice at www.liberty.co.za/legal.

07

How Is Your Personal Information Protected?

We are committed to protecting your personal information. We implement all reasonable controls to secure access to your data. When third parties are involved in processing your information, we ensure they are contractually obligated to follow appropriate security practices.

As a representative of Liberty Life, we also benefit from and are bound by Liberty Group’s comprehensive Group-wide policies and procedures dedicated to safeguarding personal information, including encryption methods that align with international standards for all online transactions and interactions.

Please contact us immediately if you suspect any unauthorised access to or use of your personal information.

08

Data Breach Notification

In the event of a data breach involving your personal information, we will:

09

Use of Cookies on Our Website

We use cookie technology on our website. A cookie is a small piece of text saved on your internet browser when you use our website. Cookies make it easier for us to give you a better experience online. You can stop your browser from accepting cookies, but if you do, some parts of our website may not work correctly.

To use or store cookie types that are not required for the functioning of the website, we will obtain your consent first. We use the following types of cookies:

10

Social Media

When you engage with us through our social media channels (e.g., Facebook), your personal information may be processed by the social media platform owner. This processing is outside our control and may occur in a country with different data protection laws. We recommend that you read the privacy terms and conditions of any social media platform before sharing personal information on it.

Our social media accounts are not appropriate forums to discuss your personal financial products or arrangements. We will never ask you to share personal information, account, or policy information on social media platforms. We may, however, ask you to message us privately through one of our official social media channels.

11

How Do We Use Your Personal Information for Marketing?

If you give us permission, we may use your personal information to tell you about products, services, and relevant financial updates from us or Liberty Life that may interest you.

If you no longer wish to be contacted for marketing purposes, you may opt out at any time by:

12

Your Rights Under POPIA

We value your trust and want you to be familiar with your rights. You have the right to:

📋
Right to Be Informed
Be notified that your personal information is being collected or has been accessed by an unauthorised person.
🔍
Right of Access
Access the personal information we hold about you and correct or update it.
✏️
Right to Correction
Request correction or updating of inaccurate or incomplete personal information.
🗑️
Right to Deletion
Request deletion of your personal information where appropriate, subject to legal obligations.
🚫
Right to Object
Object to the processing of your personal information, including for direct marketing purposes.
🤖
Automated Decisions
Not be subject to automated decision-making in respect of a product or service application, except under certain circumstances.
⚖️
Right to Complain
Lodge a complaint with the Information Regulator if you believe your rights have been violated.
📝
Right to Reasons
Request reasons or make a representation if your application for a product or service is refused.

To exercise any of these rights, please contact our Information Officer using the details in Section 13.

13

Right of Access to Information — PAIA Request Procedure

The Promotion of Access to Information Act (PAIA) gives effect to the constitutional right of access to information held by a private body for the exercise or protection of any right.

All Liberty clients are allowed access to their own information without having to use the formal PAIA request procedure. This includes access to policy documents, account information, personal records, and voice recordings. Clients should contact the relevant Liberty call centre or department directly for this purpose.

Any person who wishes to access information that belongs to Liberty or any of its other clients must follow the formal PAIA request procedure below.

Step 1: Complete the prescribed PAIA request form in full. The form is available at inforegulator.org.za/acts/.

Step 2: Where required, deposit the prescribed request fee (R140.00). Use the reference “PAIA” followed by your initials and surname (e.g., PAIA AN Smith) so your payment can be identified.

Step 3: Submit the completed request form and proof of deposit to Liberty’s Group Privacy Officer at the contact details below.

Step 4: Liberty will assess the request, confirm receipt, process it if it meets procedural requirements, and notify you of the decision within 30 days of receipt. If the request is refused, the R140.00 request fee will be refunded.

Step 5: If the request is granted, you will be notified of any payable access fee. The requested information will be released upon confirmation of receipt of that fee.

If you qualify for exemption from payment of any fee, please state the reason for exemption in your request.

All PAIA requests must be directed to:

🏢 Liberty Group Privacy Officer

Group Privacy Officer

PO Box 10499, Johannesburg, 2000

Tel: +27 11 408 2559 / +27 11 408 5027

Email: privacy@liberty.co.za

14

Contact Us & Information Officer

If you have any questions about this Notice, wish to exercise your rights in relation to information held by Elias Baloyi Advisory, or believe we have not adhered to this Notice, please contact our Information Officer:

Information Officer

Elias Baloyi

Email: elias.baloyi@liblink.co.za

Appointed Representative of Liberty Life

Compliance Status

Appointed Representative of

Liberty Life, an Authorised FSP

Regulated under the FAIS Act

🏛 Information Regulator of South Africa

Website: www.inforegulator.org.za

Email: inforeg@justice.gov.za

Tel: 010 023 5207

15

Right to Change This Notice

We may update this Privacy and Security Notice from time to time to reflect changes in our practices, Liberty Life’s requirements, or applicable law. All changes will be published on our website with a revised “Last Updated” date. The latest version will replace all earlier versions.

For queries regarding this Notice, you may also email Liberty Life’s privacy team at privacy@liberty.co.za.