PRIVACY POLICY Effective Date: 26 August 2026 Good Things Africa (“Good Things Africa”, “we”, “us” or “our”) is committed to protecting your privacy and respecting the personal information you provide to us. This Privacy Policy explains how we collect, use, store, protect and disclose your personal information when you visit or use our website, purchase tickets, register for an event, enter a competition, subscribe to our communications, contact us, or otherwise interact with Good Things Africa. Good Things Africa operates in accordance with applicable South African privacy legislation, including the Protection of Personal Information Act 4 of 2013 (POPIA). By using our website or providing us with your personal information, you acknowledge that you have read and understood this Privacy Policy. 1. WHO WE ARE Good Things Africa is an events and entertainment company involved in the creation, promotion and management of events, experiences and related activities. For purposes of POPIA, Good Things Africa may act as the Responsible Party in respect of personal information that we collect and process. If you have any questions about this Privacy Policy or how we process your personal information, don't hesitate to get in touch with us using the details provided at the end of this policy. 2. PERSONAL INFORMATION WE MAY COLLECT Depending on how you interact with us, we may collect the following personal information: Full name and surname Email address Mobile or telephone number Date of birth or age, where required for an event, competition or other legitimate purpose Identification or verification information where required Billing and transaction information Ticket purchase and registration information Event preferences or information provided when registering for an event Competition or giveaway entry information Information submitted through contact, enquiry or registration forms Social media usernames or publicly available social media information when you interact with us Photographs, video footage and other content captured at our events Website usage information, including IP address, browser type, device information and pages visited Information collected through cookies and similar technologies Any other information that you voluntarily provide to us We only collect information that is reasonably necessary for the relevant purpose. 3. HOW WE COLLECT YOUR INFORMATION We may collect personal information directly from you when you: Visit or use our website Purchase or register for tickets Register for an event Enter a competition or promotion Subscribe to our newsletter or marketing communications Complete an online form Contact us by email, telephone, WhatsApp or social media Interact with our website or digital platforms Attend one of our events Participate in surveys, campaigns or promotional activities We may also receive certain information from third-party service providers, such as ticketing, payment, marketing, analytics or event-management platforms, where permitted by law. 4. HOW WE USE YOUR PERSONAL INFORMATION We may use your personal information to: Process event registrations and ticket purchases Provide you with information relating to events you have registered for or purchased tickets to Respond to enquiries and requests Communicate with you about our events, experiences and services Send newsletters, offers, promotions and other marketing communications where permitted by law or where you have provided the required consent Administer competitions, giveaways and promotional campaigns Verify eligibility for events, competitions or promotions Process payments and refunds Improve our website, events, services and customer experience Understand how visitors use our website Conduct analytics and measure marketing and advertising performance Maintain the security and functionality of our website and digital platforms Comply with applicable legal, regulatory and contractual obligations Protect the rights, property and safety of Good Things Africa, our customers, event attendees and third parties Perform any other lawful purpose communicated to you at the time your information is collected 5. MARKETING COMMUNICATIONS Where required by applicable law, we will obtain your consent before sending you direct marketing communications. These communications may include information about: Upcoming Good Things Africa events Ticket releases and early-bird offers Promotions and competitions News and announcements Partner or sponsor offers Other events, products or experiences that may be relevant to you You may unsubscribe from marketing communications at any time by using the unsubscribe option included in the communication or by contacting us directly. Where electronic direct marketing is undertaken, we will comply with the applicable requirements of POPIA. POPIA generally requires consent for unsolicited electronic direct marketing, subject to specific exceptions for existing customers and similar products or services. 6. EVENT PHOTOGRAPHY AND VIDEO Good Things Africa and/or authorised photographers, videographers, media partners or event partners may photograph, film or otherwise record events hosted or promoted by us. This content may be used for legitimate business, promotional, marketing, advertising, social media, editorial and archival purposes. By attending a Good Things Africa event, you acknowledge that photography and filming may take place at the event. Where appropriate, event signage or other notices may be used to inform attendees that photography and filming are taking place. If you have a specific concern about the use of an identifiable photograph or video of you, please contact us using the details below, and we will consider your request in accordance with applicable law. 7. SHARING YOUR PERSONAL INFORMATION We do not sell or rent your personal information to third parties. We may, however, share personal information where reasonably necessary with: Ticketing and event registration platforms Payment processors and financial service providers Website hosting and technology providers Email and marketing service providers Analytics and advertising platforms Event production and management partners Photographers, videographers and media partners Sponsors and event partners, where applicable and lawful Professional advisers and service providers Government authorities, regulators or law-enforcement agencies where required by law Other parties where you have provided consent or where disclosure is otherwise permitted or required by law Where third parties process personal information on our behalf, we take reasonable steps to ensure that appropriate confidentiality and security obligations are in place. 8. THIRD-PARTY SERVICES AND WEBSITES Our website may contain links to third-party websites, social media platforms, ticketing services, payment providers or other external services. These third parties may have their own privacy policies and terms of use. Good Things Africa is not responsible for the privacy practices, security or content of third-party websites or services that we do not control. We recommend reviewing the privacy policies of third-party services before providing them with your personal information. 9. COOKIES AND WEBSITE TRACKING Our website may use cookies and similar technologies to: Enable the website to function properly Remember preferences Understand how visitors use our website Analyse website performance Improve our services and user experience Measure advertising and marketing performance Provide relevant advertising where applicable Cookies may be placed by Good Things Africa or by third-party service providers such as analytics, advertising or social media platforms. You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website. 10. SECURITY OF YOUR INFORMATION Good Things Africa takes reasonable technical and organisational measures to protect personal information against loss, damage, unauthorised access, disclosure, alteration or destruction. However, no website, electronic transmission or storage system can be guaranteed to be completely secure. In the event of a security compromise involving personal information, we will take the steps required by applicable law, which may include notifying affected data subjects and the Information Regulator where required. 11. RETENTION OF PERSONAL INFORMATION We will only retain personal information for as long as reasonably necessary to fulfil the purpose for which it was collected, unless we are required or permitted by law to retain it for a longer period. The appropriate retention period may depend on: The purpose for which the information was collected Legal or regulatory requirements Contractual obligations Accounting and financial requirements The resolution of disputes Legitimate business requirements When personal information is no longer required, we will take reasonable steps to securely delete, destroy or anonymise it. 12. YOUR RIGHTS UNDER POPIA Subject to applicable law, you have rights in relation to your personal information, including the right to: Request access to personal information we hold about you Request correction or updating of inaccurate or outdated information Request deletion of personal information where legally permissible Object to certain processing of your personal information Object to the use of your personal information for direct marketing Withdraw consent where processing is based on consent Request information regarding how your personal information is being processed Lodge a complaint regarding the processing of your personal information POPIA provides data subjects with rights relating to access, correction, objection and participation in the processing of their personal information. 13. PROVIDING YOUR INFORMATION Where personal information is requested from you, you may generally choose whether to provide it. However, certain information may be necessary for us to provide a particular service. For example, we may not be able to process a ticket purchase, event registration, competition entry or enquiry if you do not provide the information reasonably required for that purpose. Where information is mandatory, we will endeavour to make this clear at the point of collection. 14. INTERNATIONAL TRANSFERS Some of the third-party service providers we use may process or store information outside South Africa. Where personal information is transferred outside South Africa, we will take reasonable steps to ensure that the transfer is made in accordance with applicable legal requirements and that appropriate safeguards are in place. 15. CHILDREN'S INFORMATION Our website and events are not generally directed at children unless expressly stated otherwise for a particular event or activity. Where we knowingly process personal information relating to children, we will do so in accordance with the requirements of applicable South African law, including POPIA. 16. CHANGES TO THIS PRIVACY POLICY We may update this Privacy Policy from time to time to reflect changes to our business, services, technology or applicable laws. When we make changes, the updated policy will be published on our website with a revised effective date. We encourage you to review this Privacy Policy periodically. 17. CONTACT US If you have any questions, concerns or requests relating to this Privacy Policy or your personal information, please contact Good Things Africa: Good Things Africa Email: info2goodthingsafrica@gmail.com Website: www.goodthingsafrica.COM Please use the subject line “POPIA Privacy Request” when submitting a request relating to your personal information. 18. INFORMATION REGULATOR If you believe that your personal information has been processed unlawfully and you are unable to resolve the matter directly with Good Things Africa, you may lodge a complaint with the Information Regulator of South Africa. Information Regulator Website: [INSERT CURRENT INFORMATION REGULATOR WEBSITE] Last Updated: 26 August 2026