Privacy Notice

1. Who we are

AI GPU Data Center (Pty) Ltd is a private company registered in the Republic of South Africa under registration number 2021/462125/07, with its registered office at 5 Rhodes Street, Kensington B, Randburg, 2195.

In this notice, "we", "us" and "our" refer to AI GPU Data Center (Pty) Ltd. "You" refers to any person whose personal information we process.

We are the responsible party for the personal information described in this notice, as that term is used in the Protection of Personal Information Act 4 of 2013 ("POPIA").

This notice explains what personal information we collect through this website, why we collect it, how we handle it, and what rights you have. It applies to www.aigpudatacenter.co.za and to enquiries you send us through it. It does not cover the terms on which we may later supply services to you — those are dealt with separately in writing.

---

2. What we collect

2.1 Information you give us

When you complete the enquiry form on this website, we collect:

• your name
• your organisation
• your country
• your role
• your work email address
• the type of enquiry you are making
• a description of your workload or requirement
• any preferred GPU or architecture you tell us about
• any estimated capacity you tell us about
• any timeframe you tell us about
• anything else you choose to write in the message field

If you contact us directly by email or telephone instead, we collect whatever you choose to tell us, together with your contact details.

2.2 Information collected automatically

When you visit this website, limited technical information is processed in order to deliver the pages to you and to keep the site available and secure. This may include your IP address, browser type, device type, referring page and the pages you visit.

Our Cookie Policy explains what is set on your device and what is not.

2.3 What we do not collect

We do not ask for, and you should not send us through this website:

• identity or passport numbers
• residential addresses
• dates of birth
• banking or payment details
• health information
• any other special personal information as defined in section 26 of POPIA

We do not knowingly collect information from children.

---

3. Why we process it, and on what basis

We process the information described above in order to:

• respond to your enquiry
• understand what you are asking for and whether we can help
• assess business and infrastructure requirements
• provide information about our services
• communicate with you about a possible business relationship
• manage a resulting business relationship, if one develops
• keep our website secure and available
• comply with our legal obligations

Our lawful basis under section 11 of POPIA is that processing is necessary to take steps at your request before entering into a contract, and that processing is necessary for the pursuit of our legitimate interests in responding to business enquiries addressed to us. Where we rely on legitimate interests, we have considered whether that interest is outweighed by your interests and rights, and we have limited what we collect accordingly.

Where we are required to keep records by law, our basis is compliance with a legal obligation.

We do not rely on your consent to answer an enquiry that you sent us. If we ever process your information for a purpose that does require consent, we will ask you for it separately and you will be free to refuse or to withdraw it.

---

4. Marketing

We do not currently run marketing email campaigns, and we do not use information submitted through this website to send unsolicited marketing.

If that changes, we will update this notice first, and any electronic direct marketing will comply with section 69 of POPIA. You will always be able to opt out.

---

5. Who we share it with

We do not sell your personal information. We do not trade it, and we do not share it for anyone else's marketing.

We may share it with:

• Service providers who help us operate the website and our business. These are operators as defined in POPIA. They act on our instructions and are required by written contract to keep the information confidential and secure, in line with section 21 of POPIA.
• Our professional advisers, such as legal or accounting advisers, where necessary and subject to their own duties of confidentiality.
• Regulators, courts or authorities, where we are legally required to disclose information, or where disclosure is necessary to establish, exercise or defend a legal claim.

The operators we currently use, or expect to use, are:

Enquiries submitted through the form on this website are delivered to our business email, hosted by Domains.co.za. No copy of enquiry submissions is retained in a website database.

We do not use a separate content delivery network, analytics provider, marketing platform or customer relationship management system.

We will update this notice if we introduce a significant new provider.

---

6. Where your information is processed

We are a South African company and our business operations are in South Africa.

We do not use a content delivery network or any other service that routinely routes your information through infrastructure in other countries.

We cannot, however, promise that your information will never leave South Africa. If you email us from outside the country, your message crosses international infrastructure before it reaches us. If we later introduce a service that processes information abroad, we will update this notice before doing so.

Our website and our business email are hosted in South Africa by Domains.co.za.

Where personal information is transferred outside South Africa, we do so in accordance with section 72 of POPIA — which permits such transfers where the recipient is subject to a law, binding corporate rules or a binding agreement providing an adequate level of protection, where you have consented, where the transfer is necessary for the performance of a contract, or in the other circumstances that section allows.

---

7. How long we keep it

We do not keep personal information indefinitely.

We keep enquiry information for as long as reasonably necessary for the purpose it was collected for, and thereafter only where the law requires or permits us to keep it. In practice:

• Enquiries that do not lead anywhere are kept for a limited period so that we can recognise and pick up a returning conversation, and are then deleted.
• Enquiries that lead to a business relationship are kept for the duration of that relationship and for the period afterwards that our legal, tax and accounting obligations require.
• Records we are required by law to keep — including company and tax records under the Companies Act 71 of 2008 and the Tax Administration Act 28 of 2011 — are kept for the statutory periods.

We maintain an internal retention schedule covering these categories. You are welcome to ask us about the retention period applying to your information.

---

8. How we protect it

We take reasonable technical and organisational measures to protect personal information in our possession against loss, damage, unauthorised access, unauthorised destruction and unlawful processing, as required by section 19 of POPIA.

These measures include transmitting this website over an encrypted connection, restricting access to enquiry submissions to people who need it, applying access controls and multi-factor authentication to the administrative systems that hold the information, and requiring our operators to maintain appropriate safeguards.

We are honest about the limits of this. No method of transmitting information over the internet is completely secure, and we do not claim that our systems are impenetrable. What we commit to is applying appropriate safeguards, keeping them under review, and acting promptly if something goes wrong.

We hold no third-party security certification at this time, and we make no claim to any.

---

9. If something goes wrong

If there are reasonable grounds to believe that your personal information has been accessed or acquired by an unauthorised person, we will notify the Information Regulator and you, as required by section 22 of POPIA. We will do so as soon as reasonably possible after discovering the compromise, and we will tell you what happened and what you can do about it, so far as we are able.

We maintain an internal procedure for identifying, containing, assessing, recording and responding to security compromises.

---

10. Your rights

Under POPIA you have the right to:

• Be told what personal information we hold about you, and to request a copy of it
• Ask us to correct information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or unlawfully obtained
• Ask us to delete or destroy information we are no longer authorised to keep
• Object to our processing of your information, on reasonable grounds relating to your particular situation, where we rely on legitimate interests
• Withdraw consent, where we have relied on your consent
• Object to direct marketing, at any time
• Complain to the Information Regulator
• Institute civil proceedings regarding an alleged interference with the protection of your personal information

Some of these rights have limits. We may not be able to delete information that we are legally required to keep, and we may need to verify who you are before acting on a request, particularly where a request concerns access to information.

How to exercise a right: email privacy@aigpudatacenter.co.za, or use the form on our Privacy Request page. We will acknowledge your request and respond within the period the law allows. Requests for access to records are dealt with under our PAIA Manual.

---

11. Complaints

If you believe we have handled your personal information unlawfully, please raise it with our Information Officer first. We would rather hear about it and fix it.

Chris Mostert — Information Officer Email: privacy@aigpudatacenter.co.za Telephone: 082 465 1328 Post: 5 Rhodes Street, Kensington B, Randburg, 2195

You also have the right to complain directly to the Information Regulator, whether or not you have raised the matter with us:

Information Regulator (South Africa) JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001 P.O. Box 31533, Braamfontein, Johannesburg, 2017 Website: https://inforegulator.org.za Online services: https://eservices.inforegulator.org.za Complaints: complaints.IR@inforegulator.org.za

---

12. Other websites

This website may link to websites we do not operate. We are not responsible for their content or their privacy practices, and this notice does not apply to them. Please read their own privacy notices before giving them your information.

---

13. Changes to this notice

We may update this notice to reflect changes in how we operate, in the services we use, or in the law. The version number and effective date at the top of this page will always tell you which version you are reading.

Where a change materially affects how we handle information you have already given us, we will take reasonable steps to tell you.

---

14. Contact us

AI GPU Data Center (Pty) Ltd 5 Rhodes Street, Kensington B, Randburg, 2195, South Africa Registration number 2021/462125/07 · VAT number 4390297689

Privacy matters: privacy@aigpudatacenter.co.za General enquiries: chris.mostert@aigpudatacenter.co.za Telephone: 082 465 1328