Privacy Statement

Last updated: February 2025

Barberry Holdings (Pty) Ltd ("Barberry", "we", "us" or "our") is committed to protecting your personal information and ensuring that it is collected, used, stored and disclosed in accordance with the Protection of Personal Information Act, 4 of 2013 (POPIA) and all other applicable South African privacy legislation.

This Privacy Statement explains how we collect, use, disclose and safeguard your personal information when you interact with us, including when you visit our website at www.barberry.co.za, contact us via email, or engage with us in a business context.

1. Information We Collect

We may collect the following categories of personal information:

• Identity information — your name, job title, and company name.
• Contact information — email address, telephone number, and physical or postal address.
• Correspondence — emails, messages or other communications you send to us.
• Website usage data — IP address, browser type, pages visited, and time spent on our site (collected via cookies and similar technologies).
• Contractual and operational information — information necessary to fulfil our services and obligations to clients and partners.

2. How We Use Your Information

We use the personal information we collect for the following purposes:

• To respond to enquiries and provide customer support.
• To perform our contractual obligations and deliver our rail and logistics management services.
• To communicate company news, updates, or service information where you have consented.
• To comply with our legal and regulatory obligations.
• To improve our website, services and internal processes.

3. Legal Basis for Processing

We process your personal information on one or more of the following grounds:

• You have given your consent to the processing.
• Processing is necessary for the performance of a contract to which you are a party.
• Processing is required to comply with a legal obligation.
• Processing is in our legitimate business interest, provided this does not override your rights and interests.

4. Sharing of Information

We do not sell, rent or trade your personal information. We may share your information with:

• Service providers — third parties who assist us in operating our business (e.g. IT providers, cloud services), subject to appropriate confidentiality and data processing agreements.
• Regulatory and legal authorities — where required by law, court order, or to protect our rights.
• Group companies — affiliated entities within the Barberry group, where necessary for operational purposes.

5. Email Communication Disclaimer

This notice applies to email communications sent from Barberry Holdings (Pty) Ltd. The information contained in any email and its attachments is intended solely for the use of the individual or entity to whom it is addressed and may contain confidential and/or privileged information.

If you have received an email from us in error, please notify the sender immediately and destroy the original message. Any unauthorised review, use, disclosure or distribution is strictly prohibited.

Barberry Holdings (Pty) Ltd cannot guarantee the security of information transmitted via email and accepts no liability for any loss or damage arising from interception, virus transmission, or unauthorised access.

6. Cookies

Our website may use cookies and similar tracking technologies to enhance your browsing experience and gather usage statistics. You can control cookie settings through your browser preferences. Disabling cookies may affect some website functionality.

7. Data Retention

We retain personal information only for as long as is necessary for the purposes for which it was collected, or as required by law. Once information is no longer required, it is securely deleted or anonymised.

8. Your Rights

Under POPIA and applicable legislation, you have the right to:

• Request access to your personal information held by us.
• Request correction of inaccurate or incomplete information.
• Object to the processing of your personal information.
• Request deletion of your personal information (subject to legal retention obligations).
• Lodge a complaint with the Information Regulator of South Africa.

To exercise any of these rights, please contact our Information Officer using the details below.

9. Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, misuse or alteration. However, no method of transmission over the internet is completely secure and we cannot guarantee absolute security.

10. Changes to This Statement

We may update this Privacy Statement from time to time to reflect changes in legislation or our practices. The updated version will be published on this page with a revised date. We encourage you to review this statement periodically.