Capital Flow — Privacy Policy

1. Introduction

Capital Flow operates as an affiliate marketing and referral service connecting businesses with funding partners. This Privacy Policy explains how we collect, use, disclose and protect personal information in compliance with the Protection of Personal Information Act, 2013 (POPIA) of South Africa.

2. Information We Collect

We collect the following personal and business information to facilitate referrals to appropriate funding partners:

• Business name and registration details.
• Contact details (names, email addresses, phone numbers).
• Identification information of directors / owners as required for compliance checks.
• Any other information necessary to assess suitability for referral to funding partners.

3. Purpose of Processing

We use your information to:

• Perform initial compliance and requirements screening.
• Facilitate referrals to appropriate funding partners.
• Communicate about referral status and provide customer support.
• Improve our referral matching and service quality.

4. Sharing and Disclosure

As an affiliate referral service, we share personal information with:

• Approved funding partners for the purpose of facilitating funding applications

We do not sell personal information to third parties. Once referred to funding partners, your ongoing relationship and data handling are governed by their respective privacy policies.

6. Cookies and Tracking Technologies

Our website may use cookies and similar tracking technologies to improve user experience, analyze website usage, and for marketing purposes. You can control cookie settings through your browser preferences.

8. Automated Decision Making

We may use automated systems to perform initial compliance screening and match applications with appropriate funding partners. We do not make final funding decisions. All credit and funding decisions are made solely by the funding partners using their own assessment criteria.

9. Data Security and Retention

We implement reasonable technical and organisational measures to protect personal information from unauthorised access, loss or misuse. We retain personal information only for as long as necessary for the purposes set out in this policy and as required by law, typically for a minimum of 5 years for financial records.

10. Data Breach Notification

In the event of a data breach that poses a high risk to your rights and freedoms, we will notify you and the Information Regulator as required by POPIA, typically within 72 hours of becoming aware of the breach.

11. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from minors. If we become aware that we have collected information from a minor, we will take steps to delete it.

12. Your Rights under POPIA

Subject to applicable legal restrictions, you have the right to:

• Request access to the personal information we hold about you.
• Request correction or deletion of inaccurate, irrelevant or excessive personal information.
• Object to processing in certain circumstances.
• Withdraw consent to processing where consent is the lawful basis relied upon (withdrawal will not affect processing that occurred before withdrawal).

To exercise your rights, contact our Data Protection Officer at the contact details below. We will respond within 30 days and may request additional information to verify your identity.

13. Complaints to the Information Regulator

If you are unsatisfied with how we handle your personal information or data subject requests, you have the right to lodge a complaint with the Information Regulator of South Africa.

14. Consent via Form Submission

By submitting any form or providing your information to Capital Flow you explicitly consent to the collection, processing and sharing of your personal and business information as described in this Privacy Policy. Your submission constitutes informed consent in terms of POPIA.

15. Contact

If you have any questions, or wish to exercise your data subject rights, please contact:

Data Protection Officer:
Capital Flow
Email: finance@capitalflow.co.za

Effective date: 7 September 2025