PRIVACY POLICY

Last Updated: December 02, 2024

This Privacy Policy (hereinafter referred to as the "Privacy Notice") outlines the manner in which Office Harbour (referred to as "we," "us," or "our") collects, uses, stores, and shares (collectively, "processes") your personal information when you engage with our services ("Services"). These Services include but are not limited to: Accessing our website at https://officeharbour.com or any related website that references this Privacy Notice. Downloading and using our mobile application (Office Harbour), Facebook application (Office Harbour App), or any other application that references this Privacy Notice. Utilizing our Services, which focus on connecting businesses with bespoke, flexible office solutions tailored to their unique needs. With a global perspective, we specialize in providing prime office locations for corporate clients, ensuring seamless transitions during business expansions or relocations. Interacting with us in any related capacity, including through sales, marketing, or events. If you have questions or concerns about this Privacy Notice or your personal data, please contact us at legal@officeharbour.com. By using our Services, you acknowledge and agree to the terms outlined in this Privacy Notice. If you do not agree with these terms, you must refrain from using our Services.

SUMMARY OF KEY POINTS

This section highlights the main aspects of our Privacy Notice. For more details, please refer to the specific sections using the links or the table of contents below. What personal information do we process? The personal information we process depends on your interactions with us and our Services, including the choices you make and the products or features you use. Learn more. Do we process sensitive personal information? We do not process sensitive personal information, such as details about your racial or ethnic origins, sexual orientation, or religious beliefs. Do we collect any information from third parties? Yes, we may collect data from public databases, marketing partners, social media platforms, and other external sources. Learn more. How do we process your information? Your personal information is processed to deliver, improve, and administer our Services, communicate with you, ensure security and fraud prevention, and comply with legal requirements. We process your data only when there is a valid legal basis to do so. Learn more. When and with whom do we share personal information? We may share your personal information in specific situations and with certain categories of third parties. Learn more. How do we keep your information safe? We implement organizational and technical measures to safeguard your data. However, no system can guarantee complete security against unauthorized access or breaches. Learn more. What are your rights? Depending on your geographic location, applicable laws may grant you specific rights regarding your personal information. Learn more. How do you exercise your rights? You can exercise your rights by submitting a data subject access request or by contacting us directly. We will respond to your request in accordance with applicable data protection laws. For a detailed explanation of our data practices, please review the full Privacy Notice.

TABLE OF CONTENTS

• What Information Do We Collect?
• How Do We Process Your Information?
• What Legal Bases Do We Rely on to Process Your Personal Information?
• When and With Whom Do We Share Your Personal Information?
• Do We Use Cookies and Other Tracking Technologies?
• Do We Offer Artificial Intelligence-Based Products?
• How Do We Handle Your Social Logins?
• Is Your Information Transferred Internationally?
• How Long Do We Keep Your Information?
• How Do We Keep Your Information Safe?
• Do We Collect Information from Minors?
• What Are Your Privacy Rights?
• Controls for Do-Not-Track Features
• Do United States Residents Have Specific Privacy Rights?
• Do Other Regions Have Specific Privacy Rights?
• Do We Make Updates to This Notice?
• How Can You Contact Us About This Notice?
• How Can You Review, Update, or Delete the Data We Collect from You?

1. WHAT INFORMATION DO WE COLLECT?

Personal Information You Provide to Us Summary: We collect personal information that you voluntarily provide. We collect personal information that you choose to disclose when you register for our services, express an interest in obtaining information about us or our products and services, participate in activities on our platform, or otherwise interact with us. Personal Information Provided by You The specific types of personal information we collect depend on your interactions with us, the features and services you utilize, and the preferences you set. This may include, but is not limited to: Names Phone numbers Email addresses Mailing addresses Job titles Usernames Passwords Contact or authentication data Contact preferences Billing addresses Debit/credit card numbers User location data Company name Customer requirements Social media links IP addresses Browser information Sensitive Information: We do not process sensitive personal information. Social Media Login Data: You may register using your social media account credentials (e.g., Facebook, X, or other platforms). When you choose this option, we collect certain information from the social media provider as described in the section titled 'HOW DO WE HANDLE YOUR SOCIAL LOGINS?' Application Data: If you use our application(s), we may collect the following information, provided you grant the necessary permissions: Geolocation Information: With your consent, we may collect and process your device's location data to deliver location-based services. You can revoke these permissions through your device settings. Mobile Device Access: We may request access to features on your mobile device (e.g., calendar, social media accounts, or storage) to enhance your experience. These permissions can also be managed through your device settings. Mobile Device Data: We automatically collect information about your device, such as model, operating system, and unique identifiers. This data is used for analytics, troubleshooting, and service enhancement. Push Notifications: We may send you notifications about your account or features of our application(s). You can manage these preferences in your device's settings. All personal information you provide must be accurate, complete, and up-to-date. You are responsible for informing us of any changes to your personal information. Information Automatically Collected Summary: Certain information, such as your IP address and device characteristics, is collected automatically. When you use our services, we automatically collect non-identifiable information related to your device and usage patterns. This may include: Internet Protocol (IP) address Browser and device characteristics Operating system Language preferences Referring URLs Device name and country Usage data (e.g., timestamps, pages viewed, features used) This data is used to enhance the security and functionality of our services and for internal analytics purposes. We may also use cookies and similar technologies to gather information. For more details, please refer to our Cookie Policy. The information we automatically collect includes: Log and Usage Data: This encompasses diagnostic, usage, and performance information logged during your interaction with our services. It may include IP addresses, browser settings, and activity data. Device Data: Details about the device used to access our services, such as model, IP address, browser type, and system configuration. Location Data: Depending on your device settings, we may collect precise or imprecise location data. You can disable this feature in your device settings. Information Collected from Other Sources Summary: We may obtain information about you from external sources, such as public databases and social media platforms. To improve our services and enhance our marketing efforts, we may gather data from external sources, including: Public databases Marketing partners Social media platforms Joint marketing partners Data providers This may include details like mailing addresses, job titles, email addresses, phone numbers, user behavior data, social media profiles, and other relevant information for targeted marketing purposes. If you interact with us through a social media account, we may collect personal information, such as your name, email address, and profile details. The scope of this collection depends on your privacy settings on the respective platform. Please note that the use of your information by the social media platform is subject to its privacy policies, not ours. Facebook Application Data When you interact with our Facebook application(s), we may access certain basic account information, such as your name, email address, gender, birthday, and profile picture, as well as other permissions you choose to grant (e.g., friends, likes, check-ins). You can manage these permissions through Facebook settings. For further details, refer to the Facebook Permissions Reference.

2. HOW DO WE PROCESS YOUR INFORMATION?

Summary: We process your information to provide, enhance, and manage our Services, communicate with you, ensure security and prevent fraud, and comply with legal obligations. In some cases, we may also process your information for purposes explicitly consented to by you. We handle your personal information for various purposes, depending on your interaction with our Services. These include: Account Creation and Authentication: We process your information to facilitate the creation of accounts, authenticate your identity, and manage user accounts to ensure they function properly. Service Delivery: Your information may be processed to deliver the services you request. User Support and Inquiries: We process your information to address your inquiries, resolve issues, and provide support related to our Services. Administrative Communications: Your information may be used to send you updates about our products and services, changes to our terms and policies, or other administrative information. Order Fulfillment: We process your information to handle orders, payments, returns, and exchanges made through our Services. User-to-User Communications: If you use features that facilitate communication with other users, we may process your information to enable these interactions. Feedback Requests: Your information may be processed to request feedback or to follow up regarding your use of our Services. Marketing and Promotional Communications: We may use the personal information you provide for marketing purposes, in accordance with your preferences. You can opt out of marketing emails at any time. (See the section "WHAT ARE YOUR PRIVACY RIGHTS?" for more details.) Targeted Advertising: We may process your information to deliver personalized content and advertisements tailored to your interests, location, and other factors. (For more details, see our Cookie Notice.) Service Security and Fraud Prevention: We process your information as part of our efforts to secure our Services, including monitoring and preventing fraudulent activity. Usage Analysis: Your information may be processed to identify trends and gain insights into how our Services are used, helping us improve functionality and user experience. Marketing Campaign Effectiveness: We process your information to assess and optimize the relevance and success of our marketing and promotional campaigns. Protection of Vital Interests: In cases where necessary, we may process your information to protect an individual’s vital interests, such as preventing harm. Third-Party Communication: We may share user data with third parties when necessary, as permitted by applicable laws, or as outlined in this Privacy Policy.

3. LEGAL BASES FOR PROCESSING YOUR INFORMATION

In Summary: We process your personal information only when it is lawful, necessary, and supported by a valid legal basis under applicable laws. This includes processing with your consent, to comply with legal obligations, to fulfill contractual obligations, to protect your rights, or to advance legitimate business interests. For Individuals in the EU and UK: If you are located in the European Union or the United Kingdom, we are required by the General Data Protection Regulation (GDPR) and the UK GDPR to identify the legal bases upon which we process your personal information. These include: Consent: We may process your personal information if you have explicitly consented to a specific purpose. You may withdraw your consent at any time. For details on how to withdraw your consent, please refer to [our consent withdrawal process]. Performance of a Contract: We may process your personal information as necessary to fulfill our contractual obligations to you, including providing our services or taking steps at your request prior to entering into a contract. Legitimate Interests: Processing may occur when it is necessary to pursue our legitimate business interests, provided these interests do not override your rights and freedoms. Examples include: Sending information about promotions, discounts, and special offers for our products or services; Developing and displaying personalized advertising content; Analyzing service usage to improve user engagement and satisfaction; Supporting our marketing initiatives; Identifying and preventing fraudulent activities; Enhancing user experience through improved understanding of product usage. Compliance with Legal Obligations: We may process your information to meet our legal obligations, including cooperating with law enforcement or regulatory authorities, exercising or defending legal claims, or fulfilling disclosure requirements during legal proceedings. Vital Interests: Your personal information may be processed to protect your vital interests or the vital interests of others, such as in situations involving imminent threats to personal safety. For Individuals in Canada: If you are located in Canada, we may process your personal information under the following circumstances: Consent: We may process your information based on your express or implied consent for specific purposes. You can withdraw your consent at any time. Without Consent (in Limited Cases): In exceptional situations, we may process your information without your consent where permitted by law, including: If the collection is clearly in your interests and obtaining consent is not feasible in a timely manner; For purposes of fraud detection, prevention, or investigation; During business transactions, subject to certain conditions; To assess or settle insurance claims, including the use of witness statements; For identifying injured, ill, or deceased individuals and communicating with next of kin; If there are reasonable grounds to believe you may be the victim of financial abuse; If seeking consent could compromise the availability or accuracy of information needed to investigate legal or contractual violations; When disclosure is required under a subpoena, warrant, or court order; For information created in the course of employment, business, or professional activities, consistent with its original purpose; If the collection is for journalistic, artistic, or literary purposes; If the information is publicly available as specified by regulations. By adhering to these legal bases, we ensure that your personal information is processed in compliance with the highest standards of privacy and applicable law.

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In Short: Your personal information may be shared in specific circumstances as described in this section and with the following categories of third parties. Vendors, Consultants, and Other Third-Party Service Providers We may share your personal information with third-party vendors, service providers, contractors, or agents (collectively referred to as "third parties") who perform services on our behalf or assist us in delivering our services. These third parties require access to certain personal information to carry out their tasks. To safeguard your personal information, we have entered into contractual agreements with these third parties, which strictly limit their use of your data. Specifically, these agreements ensure: Third parties may only process your personal information per our explicit instructions. They are prohibited from sharing your personal information with any organization other than us. They are obligated to protect your personal information and retain it only for the duration specified by us. The categories of third parties with whom we may share your personal information include, but are not limited to: User Account Registration & Authentication Services Cloud Computing Services Sales & Marketing Tools Data Storage Service Providers Finance & Accounting Tools Data Analytics Services Website Hosting Service Providers Real Estate Companies Additional Circumstances for Sharing Personal Information Business Transfers: Your personal information may be shared or transferred as part of any merger, sale of company assets, financing, or acquisition of all or part of our business by another entity. Google Maps Platform APIs: We may share your personal information with certain Google Maps Platform APIs (e.g., Google Maps API, Places API). These APIs utilize GPS, Wi-Fi, and cell tower data to estimate your location and enhance the accuracy of location-based services. This information may be stored on your device ("cached"). You retain the right to revoke your consent at any time by contacting us using the details provided at the end of this document. Affiliates: We may share your personal information with our affiliates, including our parent company, subsidiaries, joint venture partners, or other entities under common control. All affiliates are contractually required to adhere to the provisions of this Privacy Notice. Business Partners: Your personal information may be shared with our business partners to offer you products, services, or promotions that may interest you.

5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

In Short: We may use cookies and similar technologies to collect, store, and track information about your interactions with our services. We employ cookies and similar tracking technologies (e.g., web beacons and pixels) to collect data during your interactions with our services. These technologies help us maintain the security of our platforms, prevent crashes, resolve technical issues, save your preferences, and improve basic site functionality. We may also allow third parties and service providers to use these tracking technologies on our services for analytics and advertising purposes. These purposes may include managing advertisements, tailoring content to your preferences, and sending reminders, such as abandoned shopping cart notifications (subject to your communication preferences). These third parties may use tracking technologies to provide advertisements based on your interests, which may appear on our services or other websites. To the extent these tracking technologies constitute a "sale" or "sharing" under applicable U.S. state laws (including targeted advertising), you may opt out by following the instructions outlined below in the section titled "DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?" For more information about our use of cookies and how to manage them, please refer to our Cookie Notice. Google Analytics We may share information with Google Analytics to monitor and analyze the use of our services. Google Analytics may use features such as Google Analytics Demographics and Interests Reporting. To opt out of Google Analytics tracking: Visit Google Analytics Opt-Out. Adjust your Ads Settings for desktop or mobile apps. Explore additional opt-out methods at http://optout.networkadvertising.org/ and http://www.networkadvertising.org/mobile-choice. For more details on Google's privacy practices, please see the Google Privacy & Terms.

6. DO WE OFFER ARTIFICIAL INTELLIGENCE-BASED PRODUCTS?

In Short: Yes, we provide products, features, and tools powered by artificial intelligence, machine learning, and related technologies. Provision of AI Products As part of our Services, we offer products, features, and tools powered by artificial intelligence, machine learning, and similar technologies (collectively referred to as “AI Products”). These AI Products are intended to enhance your experience and deliver innovative solutions. Your use of these AI Products is governed by the terms outlined in this Privacy Notice. Use of AI Technologies Our AI Products are made available through third-party service providers (“AI Service Providers”), including but not limited to Google Cloud AI and OpenAI. By using the AI Products, your input, output, and any personal information shared will be processed by these AI Service Providers to facilitate the functionality of the AI Products, as described in the section “WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?” You are prohibited from using the AI Products in any manner that contravenes the terms or policies of any AI Service Provider. AI Product Functions Our AI Products are designed to support and perform the following functions: AI automation AI-powered bots Predictive analytics Data-driven insights Natural language processing Machine learning applications Data Processing and Safeguards All personal information processed through our AI Products is managed in accordance with this Privacy Notice and any applicable agreements with third parties. We implement robust security measures to protect your personal information, ensuring its safety and compliance with legal standards. These measures are intended to provide you with confidence and peace of mind when using our AI Products.

7. HOW DO WE HANDLE YOUR SOCIAL LOGINS?

In Short: If you choose to register or log in to our Services using a social media account, we may access specific information about you. Use of Social Media Logins Our Services allow you to register or log in using credentials from third-party social media platforms, such as Facebook or X (formerly Twitter). When you choose to use social media login options, we may receive certain profile information from the relevant social media provider. The information we receive can vary depending on the provider and your privacy settings but may include: Your name Email address Friends list Profile picture Other information you have chosen to make public on the social media platform For Facebook logins, we may also request access to additional permissions related to your account, such as your friends, check-ins, and likes. You have the option to approve or deny each individual permission. Use and Limitations of Social Media Data The information we receive will only be used for purposes outlined in this Privacy Notice or as otherwise communicated to you during your use of the relevant Services. It is important to note that we do not control and cannot be held responsible for how third-party social media providers handle your personal information. We encourage you to review their privacy notices to understand how they collect, use, and share your data, as well as how you can manage your privacy settings on their platforms.

8. IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?

Summary: Your information may be transferred, stored, and processed in countries outside your own. Our servers are located in South Africa. If you access our Services from a jurisdiction outside South Africa, please be advised that your information may be transferred to, stored at, and processed by us within our facilities and those of third parties with whom we may share personal information (as detailed in the section titled "WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?"), including but not limited to facilities in South Africa, South Korea, and other countries. For residents of the European Economic Area (EEA), the United Kingdom (UK), or Switzerland, please note that the countries to which your personal information may be transferred may not have data protection laws as comprehensive as those in your jurisdiction. Notwithstanding this, we will implement all necessary measures to safeguard your personal information in compliance with this Privacy Notice and applicable legal requirements.

9. HOW LONG DO WE RETAIN YOUR INFORMATION?

Summary: We retain your personal information only as long as necessary to fulfill the purposes described in this Privacy Notice, unless otherwise required by law. We retain personal information only for as long as necessary to achieve the purposes outlined in this Privacy Notice, unless a longer retention period is required or permitted by law (including but not limited to tax, accounting, or other legal obligations). No provision in this Privacy Notice requires us to retain your personal information beyond twelve (12) months following the termination of your account. When there is no ongoing legitimate business need to process your personal information, we will either delete or anonymize the information. If deletion or anonymization is not feasible (e.g., due to the information being stored in backup archives), we will securely store your personal information and restrict it from further processing until it can be safely deleted.

10. HOW DO WE PROTECT YOUR INFORMATION?

Summary: We implement organizational and technical measures to safeguard your personal information, but no system is entirely secure. We have implemented reasonable and appropriate organizational and technical measures to protect the confidentiality, integrity, and security of your personal information. Despite these efforts, it is important to acknowledge that no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security against unauthorized access, cyberattacks, or other malicious actions. While we strive to protect your personal information, you acknowledge and agree that transmission of personal information to and from our Services is undertaken at your own risk. We recommend that you access our Services only in a secure environment.

11. DO WE COLLECT INFORMATION FROM MINORS?

Summary: We do not knowingly collect or market personal information to individuals under 18 years of age. We do not knowingly collect, solicit, or market personal information to individuals under the age of 18. By using our Services, you represent that you are at least 18 years old or that you are the parent or legal guardian of a minor dependent accessing the Services with your consent. If we become aware that we have inadvertently collected personal information from individuals under the age of 18, we will take immediate steps to deactivate the account and delete the associated information from our records. If you have knowledge of any personal information we may have collected from a minor under the age of 18, please contact us at legal@officeharbour.com so that we may address the issue promptly.

12. YOUR PRIVACY RIGHTS

Summary: Your privacy rights may vary depending on your place of residence. If you reside in the United States, European Economic Area (EEA), United Kingdom (UK), Switzerland, Canada, or other jurisdictions with specific data protection laws, you may have enhanced access to and control over your personal information. You may review, modify, or terminate your account at any time, subject to applicable legal provisions in your country, province, or state of residence. Your Rights Under Applicable Laws In certain jurisdictions, such as the EEA, UK, Switzerland, and Canada, data protection laws grant you specific rights, which may include the following: The right to request access to and obtain a copy of your personal information. The right to request the rectification or deletion of your personal information. The right to restrict the processing of your personal information. The right to data portability, where applicable. The right to object to the processing of your personal information under certain conditions. The right not to be subject to decisions based solely on automated processing, including profiling, where applicable. You may exercise these rights by contacting us using the details provided in the "How Can You Contact Us About This Notice?" section below. We will address and respond to your request in accordance with applicable data protection laws. If you are located in the EEA or UK and believe we are processing your personal information unlawfully, you have the right to lodge a complaint with your country’s data protection authority or the UK Information Commissioner’s Office (ICO). If you are located in Switzerland, you may contact the Federal Data Protection and Information Commissioner. Withdrawal of Consent If we rely on your consent for processing your personal information, whether such consent is express or implied under applicable laws, you have the right to withdraw your consent at any time. To withdraw your consent, contact us using the details provided in the "How Can You Contact Us About This Notice?" section below. Please note that withdrawing consent will not affect the lawfulness of processing conducted prior to withdrawal. Additionally, where permitted by applicable law, processing based on lawful grounds other than consent may continue. Marketing and Promotional Communications You have the right to opt out of receiving marketing and promotional communications from us. You can do so by clicking the unsubscribe link in our emails or contacting us via the details provided in the "How Can You Contact Us About This Notice?" section below. Even if you opt out of marketing communications, we may still send you essential service-related messages for purposes such as account administration, responding to service requests, or other legitimate non-marketing purposes. Account Management To review or modify your account information, or to terminate your account, you may: Log in to your account settings and make the necessary updates. If you request account termination, we will deactivate or delete your account and personal information from our active databases. However, we may retain certain information as necessary to prevent fraud, resolve disputes, comply with legal obligations, or enforce our legal terms. Cookies and Similar Technologies Most web browsers are set to accept cookies by default. You may modify your browser settings to reject or remove cookies if you prefer. However, please note that disabling cookies may impact the functionality of certain features or services. For more details, please refer to our Cookie Notice. Questions or Concerns If you have any questions or concerns about your privacy rights, please contact us at legal@officeharbour.com. This statement ensures clarity, maintains legal integrity, and respects privacy rights across applicable jurisdictions.

13. CONTROLS FOR DO-NOT-TRACK FEATURES

Certain web browsers, mobile operating systems, and applications include a "Do-Not-Track" ("DNT") feature or setting that allows users to indicate their preference for privacy by signaling that they do not wish to have their online activities tracked. At present, no uniform technological standard for recognizing and implementing DNT signals has been finalized. Consequently, we do not respond to DNT browser signals or other mechanisms that automatically communicate a user’s preference not to be tracked online. Should a standard for online tracking be adopted that we are legally obligated to follow, we will update this Privacy Notice accordingly to reflect such practices. California law requires us to disclose how we respond to DNT browser signals. Since no consensus exists within the industry or among regulators regarding the recognition of DNT signals, we do not respond to them at this time.

14. PRIVACY RIGHTS OF UNITED STATES RESIDENTS

In Summary: Residents of certain U.S. states, including but not limited to California, Colorado, Connecticut, Florida, Indiana, and Virginia, may have specific rights regarding their personal information. These rights include the ability to access, correct, delete, or obtain a copy of their personal information, as well as the ability to withdraw consent for its processing. Some rights may be subject to limitations under applicable laws. Additional details are provided below. Categories of Personal Information Collected In the preceding twelve (12) months, we have collected the following categories of personal information:

Categories of Personal Information Collected

Category	Examples	Collected
A. Identifiers	Real name, alias, postal address, telephone number, email address, IP address, account name	NO
B. Personal Information (California Customer Records statute)	Name, contact information, education, employment history, financial information	NO
C. Protected Classification Characteristics	Gender, age, race, ethnicity, marital status, national origin	NO
D. Commercial Information	Transaction history, purchase history, payment details	NO
E. Biometric Information	Fingerprints, voiceprints	NO
F. Internet Activity	Browsing history, search history, online behavior	NO
G. Geolocation Data	Device location	NO
H. Audio/Visual Data	Call recordings, video recordings, images	NO
I. Professional Information	Job title, work history, professional qualifications	NO
J. Education Information	Student records, directory information	NO
K. Inferences	Preferences, characteristics, and profiles derived from other data	NO
L. Sensitive Personal Information		NO

We may collect additional personal information when you engage with us in person, online, by phone, or by mail, including for customer support, surveys, contests, or inquiries about our services.

Sources of Personal Information For more details on the sources of personal information we collect, refer to the section "WHAT INFORMATION DO WE COLLECT?" in this Privacy Notice. Use and Sharing of Personal Information Details on how we process and share personal information can be found under "HOW DO WE PROCESS YOUR INFORMATION?" and "WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?" We do not "sell" your personal information as defined under applicable privacy laws. However, we may disclose information to service providers pursuant to written contracts. Your Rights Depending on your state of residence, you may have rights including, but not limited to: Accessing and obtaining a copy of your personal data Correcting inaccuracies in your personal data Deleting your personal data Opting out of targeted advertising or profiling Limiting the use of sensitive personal data Obtaining information on third-party disclosures To exercise these rights, submit a request via email to legal@officeharbour.com or refer to the contact information at the end of this document. Requests must be verified, and you may designate an authorized agent to act on your behalf under applicable laws. Appeals If your request is denied, you have the right to appeal by emailing us at legal@officeharbour.com. We will respond in writing and, if the appeal is denied, provide guidance on how to escalate the matter to your state attorney general. California "Shine the Light" Law Under California Civil Code Section 1798.83, California residents may request information once per year about the personal information disclosed to third parties for direct marketing purposes. To make such a request, please contact us as outlined in the section "HOW CAN YOU CONTACT US ABOUT THIS NOTICE?"

15. DO OTHER REGIONS HAVE SPECIFIC PRIVACY RIGHTS?

In Summary: Depending on your country of residence, you may be entitled to additional privacy rights. Australia and New Zealand We collect and process your personal information in accordance with the obligations and requirements of Australia's Privacy Act 1988 and New Zealand's Privacy Act 2020 (collectively referred to as "Privacy Acts"). This Privacy Notice fulfills the notification requirements outlined in the Privacy Acts, including details regarding: The types of personal information we collect, The sources of such information, The purposes for which the information is used, and The third parties with whom your personal information may be shared. Failure to provide personal information necessary for specific purposes may impact our ability to: Offer you the products or services you request, Respond to your inquiries or assist you, Manage your account with us, or Verify your identity and protect your account. You have the right to request access to, or correction of, your personal information at any time. To make such a request, please refer to the contact information provided in the section titled, ‘HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?’ If you believe we are processing your personal information unlawfully, you may lodge a complaint: For breaches of the Australian Privacy Principles, with the Office of the Australian Information Commissioner (OAIC). For breaches of New Zealand's Privacy Principles, with the Office of the Privacy Commissioner of New Zealand. Republic of South Africa You have the right to access or request correction of your personal information at any time. Such requests may be made by contacting us using the details provided in the section titled, ‘HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?’ If you are dissatisfied with the handling of your complaint regarding our processing of your personal information, you may escalate the matter to the Information Regulator in South Africa. Contact details are as follows: The Information Regulator (South Africa) General inquiries: enquiries@inforegulator.org.za Complaints (complete POPIA/PAIA form 5): PAIAComplaints@inforegulator.org.za & POPIAComplaints@inforegulator.org.za

16. DO WE MAKE UPDATES TO THIS NOTICE?

In Summary: Yes, we may revise this notice to ensure compliance with applicable laws. We reserve the right to update this Privacy Notice periodically. Any changes will be indicated by an updated "Revised" date at the top of this document. In the event of significant updates, we will notify you either by prominently posting a notice of the changes or by directly sending you a notification. We encourage you to review this Privacy Notice regularly to stay informed about how we protect your information.

17. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have any questions or concerns regarding this notice, please contact us via email or post: Email: legal@officeharbour.com Post: Office Harbour 42 Majuba Lane, Morningside, Sandton, 2057, South Africa Sandton, Gauteng 2057 South Africa

18. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

Depending on the laws of your country of residence (or your state of residence in the United States), you may have the right to: Access the personal information we have collected about you, Obtain details on how we have processed your information, Correct any inaccuracies, or Request the deletion of your personal information. You may also have the right to withdraw your consent to our processing of your personal information, subject to legal limitations. These rights may be restricted in certain circumstances by applicable laws. To request access, correction, or deletion of your personal information, or to withdraw consent, please submit a data subject access request using the contact information provided above.