FIRM REGISTRATION PRIVACY NOTICE
Version: 2026-10-10-registration

Who is responsible for your information?

BridgeFin Solutions (Pty) Ltd, registration number 2024/050037/07, is responsible for the information collected through this firm-registration process. Our address is 15 Riana Street, El Toro Park, Kimberley, South Africa. Contact Nancy, our Information Officer, at nancy@bfsolutions.co.za or 087 148 9516 about your information or your registration.

What we collect and why

We first collect your individual work email so that we can confirm access to that mailbox and help you create your personal portal account. Account security uses a password, an authenticator and recovery codes. Keep these private. BridgeFin staff will not ask you to send your password or verification codes by email or message.

The registration asks for your practice's legal and trading names, business structure, office and contact details, professional and practice verification information, the responsible principal, conveyancing and accounts contacts, your authority to register the practice, and the services in which your practice is interested. Questions and the supporting-document checklist change where your answers make further evidence relevant.

We use this information to identify the practice and its authorised representatives, assess the registration, request missing information, communicate a decision and, if approved, establish the firm's portal access. We keep submitted versions, document reviews, decisions and relevant communications. Technical information, including sign-in and activity records, helps us protect accounts, investigate misuse and maintain an audit history.

Registration is a request to establish a relationship with BridgeFin. It does not approve financing or agree to the terms of an advance. A later funding application has separate information requirements and review. We process registration information to take steps requested by you towards that relationship, pursue legitimate verification and security purposes, and meet legal obligations where they apply. We do not claim that a particular registration question is required by law unless we identify that requirement.

Required information and supporting documents

Registering is voluntary. Required questions and evidence are marked in the form. Without the information needed to verify and assess the practice, we may be unable to complete the registration or activate firm access. Optional information may be omitted. If a required question or document does not apply or is unavailable, use the explanation provided in the form or contact Nancy.

Attach only the supporting evidence requested for the practice, such as its registration, address and professional-verification evidence. Do not attach unrelated client files or unnecessary information about other people. Where you provide a colleague's details, tell them about this notice and ensure you are entitled to provide their information. We receive those details and documents from you and may check relevant practice or professional information against lawful verification sources.

Who can access it?

Authorised BridgeFin staff may access your registration for their assigned work. Service providers supporting the website, email and private document storage process information for those services. Information may also be disclosed where required or authorised by law, or where necessary to obtain professional advice, resolve a dispute or protect legal rights.

Routine email alerts direct you back to the portal. Private reviewer notes and identity-document attachments are not included in customer emails. Ordinary staff inboxes are not synchronised into the portal. This registration information is not submitted to an AI assistant.

Hosting, document storage and international processing

Owlytic in South Africa provides our website and email hosting services under data-processing terms. Supporting documents use private Cloudflare R2 storage restricted to its European Union jurisdiction. This involves transferring documents outside South Africa. The service arrangements require authorised processing, confidentiality and security safeguards. Cloudflare's data-processing terms also address its subprocessors and onward transfers. These contractual protections support the protection of information processed through the service; the EU document setting does not mean that every hosting, email, support or backup operation takes place in the EU.

BridgeFin's Privacy & POPIA policy explains the lawful grounds and safeguards that apply to international processing. Access is restricted, connections are protected and supporting documents are checked before they are made available through the portal. You may ask Nancy for information about the providers and applicable transfer safeguards.

How long we keep information

We keep registration information only for as long as reasonably necessary for the registration and related lawful purposes. We consider whether the registration is incomplete, withdrawn, refused or approved; whether an ongoing relationship requires the information; and any applicable statutory, contractual, audit, fraud-prevention or dispute-related retention need. Supporting documents, communications, security records and recovery copies are included in the retention review. A justified preservation requirement may restrict use and delay deletion. Once information is no longer lawfully required, it must be deleted, destroyed or de-identified in accordance with the applicable retention process. These are the retention criteria in BridgeFin's published Privacy & POPIA policy; there is no single retention period for every record.

Your rights and how to contact us

Subject to applicable law, you may request access to your personal information, ask for inaccurate information to be corrected, request deletion where appropriate, object to processing on lawful grounds, or raise a privacy complaint. Where processing relies on consent, you may withdraw that consent without invalidating earlier lawful processing. Identity checks protect you before information is disclosed or changed. Where a lawful obligation limits a request, BridgeFin must explain its decision.

Contact Nancy at nancy@bfsolutions.co.za or 087 148 9516. You may also complain to the Information Regulator of South Africa through inforegulator.org.za, at POPIAComplaints@inforegulator.org.za, or on 010 023 5200. The Regulator's address is Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191.

Read the full Privacy & POPIA policy at https://bfsolutions.co.za/privacy-popia/ and the PAIA Manual at https://bfsolutions.co.za/paia-manual/. This registration notice is shown before you provide your first account email. The version you acknowledge is recorded with your registration. Acknowledging it is separate from accepting financing terms or agreeing to marketing.