Privacy Policy

Privacy and Protection of Personal Information (POPI)

for Open Access Energy (Pty) Ltd and its subsidiaries and trading divisions (hereinafter referred to as OA Energy)

1. Introduction

1.1 OA Energy provides a variety of energy technology solutions in the course of which it enters into data transactions which includes the processing, use, disclosure and collection of some Personal Information about its employees, clients, customers, partners and members of the public. It is obligated to comply with POPI.

1.2 OA Energy is committed to processing data, and specifically Personal Information, in an open, transparent and responsive manner.

2. Purpose and Scope

2.1 This Policy applies to OA Energy, all of its subsidiaries, affiliates, business partners, trade divisions and employees, including Operators.

2.2 The purpose of this Policy is to demonstrate OA Energy's commitment to safeguarding the Personal Information of all persons, including juristic persons, with whom it interacts and to ensure that OA Energy and its employees comply with the requirements imposed by POPI.

2.3 In particular, the purpose is to establish an institution wide policy that will provide direction with respect to the manner of compliance, give effect to the right of privacy and at the same time, balance the right to privacy against other rights such as the right of access to information.

2.4 The Policy sets out the objectives and directives on applicable protocols within OA Energy to maintain and uphold to the legal requirements and conditions as set out in Chapter 3 of POPI, including the safeguards pertaining to information transactions and specifically when processing Personal Information.

2.5 OA Energy is resolute in processing data in an open, lawful and transparent way. This Policy sets out the processes and procedures to align OA Energy's business strategy and the applicable national legislation, i.e. POPI, in terms of processing Personal Information when it is collected, stored, used, disclosed and destroyed.

2.6 OA Energy will only Process data for the clear, precise and specific purpose for which it is collected from the Data Subject.

2.7 The Policy has application to all stakeholders. It applies to all employees, service providers and administrators and any person handling Personal Information of customers, suppliers and employees of OA Energy.

2.8 The Policy has application to all information transactions where data is processed, including but not limited to data being exchanged and/or transmitted and which may constitute and/or include Personal Information.

2.10 Data and Personal Information shall only be collected from Data Subjects who have business dealings with OA Energy for, inter alia, administrative needs, conducting of business operations, and for legislative data compliance and risk analysis.

3. Key Definitions

"Consent" means any voluntary, specific and informed expression agreeing to the processing of Personal Information.

"Data Subject" means the person to whom the Personal Information relates and in relation to OA Energy, includes employees, customers, service providers and administrators.

"Amptera" means OA Energy's free solution which enables municipalities and utilities to access smart meters, collect and interpret data, apply tariffs and bill customers in a single interface.

"Energypro" means OA Energy's peer-to-peer wheeling solution that uses smart meter data to enable accurate multilateral wheeling transactions.

"Personal Information" means information that could be used to identify a Data Subject, including names, contact details, identification numbers, and other personal data.

4. Data Processing Principles

OA Energy processes Personal Information in accordance with the following principles:

• Lawfulness, fairness and transparency in processing
• Purpose limitation - data is collected for specific, explicit and legitimate purposes
• Data minimization - only necessary data is collected
• Accuracy - data is kept accurate and up to date
• Storage limitation - data is kept only as long as necessary
• Security - appropriate technical and organizational measures protect data

5. Your Rights

As a Data Subject, you have the right to:

• Access your Personal Information
• Correct or update your Personal Information
• Delete your Personal Information
• Object to processing of your Personal Information
• Withdraw consent where processing is based on consent
• Lodge a complaint with the Information Regulator

6. Contact Information

For any questions regarding this Privacy Policy or to exercise your rights, please contact us:

Open Access Energy (Pty) Ltd
Tyger Lake Unit 511
Tyger Waterfront
Cape Town
7530
Tel: 087 808 8667
Email: info@openaccess.energy

This Privacy Policy is compliant with the Protection of Personal Information Act, 4 of 2013 (POPI) and is effective as of the date of publication. This policy may be updated from time to time to reflect changes in our practices or legal requirements.