Website and Early Access Privacy Notice

1. Who is responsible

Onside Software (Pty) Ltd is a private company incorporated in the Republic of South Africa with registration number 2026/551273/07. For the processing described in this notice, Onside is the responsible party or controller, as applicable.

Our business registration address is:

You can contact us about privacy at privacy@workonside.com.

2. Information we handle

When you email us about Early access, we may receive:

• your name, email address, job title, employer and other business contact details you provide;
• the contents of your message, including the work, project or process you are interested in using Onside for;
• our correspondence with you, meeting or follow-up details, and concise notes needed to assess and manage the prospective relationship; and
• your communication preferences and whether the opportunity is active, declined, inactive or converted into a customer relationship.

When you visit the website, our hosting and network providers may process ordinary request and security data such as your IP address, browser or device type, requested page, date and time, and diagnostic or security events. The current website does not set cookies and does not use analytics, advertising trackers or marketing pixels.

We collect information directly from you and may also receive relevant business contact information from your employer, a colleague who introduces you, or the providers that deliver the website and email communications.

Please do not send sensitive personal information or confidential customer data in an Early access email. If we need more information, we will ask only for what is relevant to the prospective relationship.

3. Why we use it

We use this information to:

• receive and respond to your request;
• assess whether Onside and its Early access programme may fit your organisation's needs;
• manage follow-up conversations, invitations and the prospective business relationship;
• send updates directly related to the Early access request you made;
• operate and secure the website and mailbox, prevent abuse and diagnose faults; and
• comply with law and establish, exercise or defend legal rights.

Providing this information is voluntary. If you do not provide contact details and enough information about your request, we may be unable to respond or assess Early access fit.

Where applicable law requires a justification for processing, we rely on your request or consent, steps you ask us to take before a possible business relationship, our legitimate interests in responding to prospective customers and operating a secure business website, and our legal obligations. You may ask us to stop Early access updates at any time.

We do not sell or rent this personal information, use it for cross-context behavioural advertising, or use it to make solely automated decisions that have legal or similarly significant effects.

4. Who receives it

Access within Onside is limited to authorised personnel who need the information for the purposes described in this notice. We may disclose only what is necessary to:

• providers that host or secure the website, deliver email, or supply the working tools used for this process;
• professional advisers who owe appropriate duties of confidentiality; and
• regulators, courts, law-enforcement bodies or other parties when disclosure is required by law or reasonably necessary to protect legal rights.

Our providers may process personal information outside South Africa. Where a cross-border transfer occurs, we use a transfer condition permitted by applicable law, including section 72 of the Protection of Personal Information Act 4 of 2013 (POPIA) where it applies.

5. How long we keep it

We retain personal information only for as long as reasonably necessary for the purposes described in this notice:

• while a substantive prospect conversation remains active, we keep the relevant correspondence and information;
• if we decline the opportunity or the conversation becomes inactive, we delete the prospect information 12 months after the last meaningful contact;
• if the prospect becomes a customer, information needed for the customer relationship is handled under the applicable customer and service privacy terms, and redundant prospect information is deleted when no longer needed; and
• we keep a specific record longer only where a legal, contractual, dispute or legal-hold reason applies to that record.

We will delete information earlier in response to a verified request where applicable law requires it. Deletion from service-provider recovery copies may follow the provider's ordinary protected backup-expiry cycle.

6. Your choices and rights

Depending on the law that applies, you may ask us to:

• confirm whether we hold personal information about you and provide access to it;
• correct or update inaccurate or incomplete information;
• delete personal information that we are not required or permitted to keep;
• object to or restrict certain processing; or
• withdraw consent where processing depends on consent.

You may also ask us to stop Early access updates at any time. To make a privacy request, email privacy@workonside.com. For a POPIA or PAIA access request, you may also email paia@workonside.com. We may need to verify your identity and authority before acting on a request.

If you believe your personal information has been handled in breach of POPIA, you may lodge a complaint with South Africa's Information Regulator through its official complaints service at https://inforegulator.org.za/complaints/ or by emailing POPIAComplaints@inforegulator.org.za. You do not have to contact us before exercising a right to complain to a regulator.

7. Security

We use safeguards appropriate to the nature of the information, including using access controls and controlled website, email and business systems. No transmission or storage method is completely secure. Please report a suspected security issue to security@workonside.com.

8. Changes to this notice

We may update this notice when the Early access process, our providers, or the law changes. We will update the date above and provide any additional notice required by law.