Effective Date: 1 July 2021 | Last Updated: April 2026

1. Introduction

Anchor Capital (Pty) Ltd and its subsidiaries ("Anchor", "we", "us", or "our") are committed to protecting your personal information and respecting your privacy. This Privacy and Security Policy explains how we collect, use, disclose, and safeguard your information in accordance with the Protection of Personal Information Act, 2013 (POPIA) and other applicable legislation.

Anchor Capital is a licensed Financial Services Provider (FSP No. 39834) and is registered as a responsible party under POPIA.

2. Information We Collect

We may collect the following categories of personal information:

• Identity Information: Full name, ID number, date of birth, nationality
• Contact Information: Email address, telephone number, physical address
• Financial Information: Bank account details, tax number, investment history, income details
• FICA Documentation: Proof of identity, proof of address, source of funds
• Technical Information: IP address, browser type, device information, cookies
• Communication Data: Records of correspondence, consultation requests, newsletter subscriptions

3. How We Use Your Information

We process your personal information for the following purposes:

• Providing investment management and advisory services
• Complying with FICA, FAIS, and other regulatory requirements
• Processing transactions and managing your investment portfolio
• Communicating with you about your investments and our services
• Sending market commentary, research, and newsletters (with your consent)
• Improving our website and services through analytics
• Preventing fraud and ensuring security

4. Legal Basis for Processing

We process your personal information based on one or more of the following legal grounds:

• Consent: Where you have given us explicit consent (e.g., newsletter subscriptions)
• Contractual Necessity: Where processing is necessary to perform our agreement with you
• Legal Obligation: Where we are required by law to process your information (FICA, FAIS, Tax Acts)
• Legitimate Interest: Where processing is in our legitimate business interests, balanced against your rights

5. Sharing Your Information

We may share your personal information with:

• Service Providers: Third-party administrators, custodians, and technology providers who assist in delivering our services
• Regulatory Bodies: The FSCA, SARS, FIC, and other authorities as required by law
• Group Companies: Anchor subsidiaries and affiliates for operational purposes
• Professional Advisors: Auditors, legal counsel, and compliance consultants

We do not sell your personal information to third parties. Where we transfer data internationally (e.g., to our London office), we ensure adequate safeguards are in place.

6. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Financial records are retained for a minimum of five years after the end of our business relationship, in accordance with FICA and FAIS requirements.

7. Your Rights Under POPIA

As a data subject, you have the right to:

• Access your personal information held by us
• Request correction of inaccurate or incomplete information
• Request deletion of your personal information (subject to legal obligations)
• Object to the processing of your personal information
• Withdraw consent where processing is based on consent
• Lodge a complaint with the Information Regulator

To exercise any of these rights, please contact our Information Officer using the details below.

8. Security Measures

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. Our security practices include:

• Encryption: All data transmitted between your browser and our servers is encrypted using TLS/SSL protocols
• Access Controls: Strict role-based access controls limit who can view or process personal information
• Monitoring: Continuous monitoring and logging of access to sensitive systems and data
• Staff Training: Regular training for all employees on data protection and information security
• Incident Response: A documented incident response plan to address any security breaches promptly
• Third-Party Audits: Regular security assessments conducted by independent auditors

9. Cookies and Website Tracking

Our website uses cookies and similar technologies to enhance your browsing experience, analyse website traffic, and understand where our visitors come from. For detailed information about the cookies we use, please refer to our Cookie Policy.

10. Information Regulator

If you are not satisfied with how we have handled your personal information, you have the right to lodge a complaint with the Information Regulator of South Africa:

11. Contact Our Information Officer

For any privacy-related queries or to exercise your rights, please contact:

12. Changes to This Policy

We may update this Privacy and Security Policy from time to time to reflect changes in our practices or applicable legislation. We will notify you of any material changes by posting the updated policy on our website. We encourage you to review this policy periodically.