Privacy Policy

Effective date: 13 August 2026 · Reviewed under the Protection of Personal Information Act 4 of 2013 (POPIA)

Finblok (Pty) Ltd (registration 2025/824616/07, FSP No. 55590) ("Finblok", "we", "us") is committed to protecting the personal information of our clients, partners and website visitors. This policy explains what we collect, why, and the rights you have under POPIA. It applies to this website and to Finblok's dealings as a licensed Financial Services Provider and holding company.

1. Information we collect

Depending on how you interact with us, we may collect:

• Identity information: full name, date of birth, ID/passport number, proof of residence.
• Contact details: email address, phone number, physical address.
• Financial information: bank account details, source-of-funds documentation, transaction history, where relevant to a service you use.
• Verification data collected during onboarding through our operating businesses' KYC/AML partners, including SearchWorks and VOCA, covering identity, document, and sanctions/PEP screening results.
• Technical information from this website, such as pages visited — see Section 6 on cookies.

2. Why we collect it

We process personal information to:

• Verify your identity and meet our obligations under the Financial Intelligence Centre (FIC) Act, including client due diligence and ongoing monitoring.
• Onboard you as a client or partner and administer the products and services you use.
• Detect, prevent, and report money laundering, terrorist financing, fraud, and other financial crime.
• Respond to enquiries submitted through this website.
• Meet other legal, regulatory, and record-keeping obligations under the FAIS Act and related legislation.

3. Sharing of information

We share personal information only where necessary, including with:

• SearchWorks and VOCA, our KYC/AML onboarding and verification providers.
• Our compliance partner, JC Admin and Holdings (Pty) Ltd, in its role providing Key Individual and compliance officer functions under our outsourcing agreement.
• Regulators, law enforcement, or the Financial Intelligence Centre, where legally required.
• Professional advisors (legal, audit, compliance) bound by confidentiality.
• Service providers who process data on our behalf under written confidentiality and security terms.

We do not sell personal information to third parties.

4. Data retention

We retain client and transaction records for the period required under the FIC Act and other applicable financial services legislation, and no longer than necessary for the purposes described in this policy.

5. Your rights under POPIA

Subject to applicable law, you have the right to:

• Be told what personal information we hold about you and why.
• Request access to, or a copy of, your personal information.
• Request correction of inaccurate or outdated information.
• Request deletion of personal information we no longer have a lawful basis to keep.
• Object to processing carried out on the basis of legitimate interest.
• Lodge a complaint with the Information Regulator of South Africa.

To exercise any of these rights, contact our Information Officer using the details in Section 8.

6. Cookies & tracking

This website does not currently set cookies or use third-party analytics or advertising trackers. If that changes, this section will be updated to describe what is used and how to control it.

7. Security

We apply reasonable technical and organisational measures to protect personal information against loss, unauthorised access, or disclosure, consistent with POPIA's security safeguard conditions.

8. Information Officer & contact

Finblok's Information Officer is Armin Bernd Bartholoma. Questions about this policy, or requests to exercise your POPIA rights, can be sent to admin@finblok.io, marked for the attention of the Information Officer.

You may also contact the Information Regulator of South Africa directly at inforegulator.org.za.

9. Changes to this policy

We may update this policy from time to time as our products, providers, or legal obligations change. The effective date above will reflect the latest revision.