Privacy Policy

RiskScope is a South African digital risk assessment platform operated by RiskScope (Pty) Ltd. We provide SME digital risk assessments, risk summary reports, and full insurer-ready reports to brokers, insurers, and business owners across South Africa. Registered address: South Africa Email: support@riskscope.co.za Phone: +27 62 711 6472 Website: www.riskscope.co.za

When you use RiskScope, we may collect the following information: • Business details: business name, trading name, business description, and occupancy classification • Contact information: email address and phone number • Risk assessment data: answers to all questions in the SME Digital Risk Assessment form, including property details, security measures, fire protection equipment, operations, and claims history • Site photographs: photos uploaded as evidence during the assessment • Payment information: processed entirely by PayFast. RiskScope does not receive, store, or process card details • Usage data: browser type, IP address, pages visited, and time spent on the platform (collected via standard web analytics)

We use the information you provide solely for the following purposes: • To generate your free risk summary report • To generate your full insurer-ready paid report • To deliver your report to the email address you provided • To respond to enquiries and callback requests submitted through our website • To process and verify payment via PayFast • To improve the accuracy and quality of our risk assessment and scoring engine • To comply with applicable South African law We do not use your information for unsolicited marketing without your consent.

RiskScope takes data security seriously: • All data transmitted between your device and our platform is encrypted in transit using SSL/TLS (HTTPS) • Payment processing is handled by PayFast, a PCI DSS compliant third-party payment gateway; RiskScope never sees, stores, or processes your card details • Assessment data is stored on secure, access-controlled cloud infrastructure • Access to submission data is restricted to authorised RiskScope personnel only • We do not store credit or debit card information at any point

We do not sell, rent, or trade your personal information to third parties. To deliver our services, we work with a small number of carefully selected third-party service providers covering form processing, cloud hosting, email delivery, and payment processing (including PayFast for payment processing). All providers operate under contractual data protection obligations and are bound by applicable privacy legislation. We do not disclose the identities of our other technology partners publicly. If you require further information about our data processing arrangements for compliance or due diligence purposes, please contact us directly at support@riskscope.co.za.

We retain your assessment submission data for a period of 24 months from the date of submission. After this period, submission data is deleted unless we are required by law to retain it for longer. You may request deletion of your data at any time by contacting us at support@riskscope.co.za. We will action your request within 14 business days.

Under the Protection of Personal Information Act (POPIA), you have the right to: • Access the personal information we hold about you • Request correction of inaccurate information • Request deletion of your information • Object to the processing of your information • Lodge a complaint with the Information Regulator of South Africa To exercise any of these rights, contact us at support@riskscope.co.za.

Our website uses standard cookies to improve your browsing experience and analyse website traffic. These cookies do not collect personally identifiable information. You may disable cookies in your browser settings, although this may affect the functionality of certain features.

Our website may contain links to third-party websites including our online assessment form provider and PayFast (payment). We are not responsible for the privacy practices or content of these third-party sites. We encourage you to read their privacy policies before submitting any information.

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically. Continued use of RiskScope after any changes constitutes your acceptance of the updated policy.

If you have any questions about this Privacy Policy or how we handle your data, please contact us: Email: support@riskscope.co.za Phone: +27 62 711 6472 Website: www.riskscope.co.za