Privacy Policy

Last updated: 5 November 2026

1. Who we are

BridgeFort Capital Group ("BridgeFort", "we", "us") is a pan-African financial services and investment holding company operating in South Africa and Zimbabwe. This policy explains how we handle personal information collected through our website, bridgefortcapital.com.

Our website links to the websites of our portfolio companies. Those companies operate their own websites and have their own privacy policies, which govern any information you provide to them. We encourage you to read those policies.

2. What personal information we collect

We only collect personal information that you choose to give us through the contact form on our website:

• Full name
• Email address
• Phone number (optional)
• Country
• The type of enquiry you select
• The content of your message

We also record the date and time your enquiry is received. Please do not include sensitive information (such as health, financial account or identity numbers) in your message.

Like any website, our hosting provider automatically processes technical information, such as your IP address and browser type, to deliver and secure the site.

3. Why we use it

• To respond to your enquiry and direct it to the right person or company within the group.
• For investor and stakeholder communications that relate to your enquiry.
• To meet our legal and regulatory obligations.
• To keep the website secure and improve how it works.

4. Lawful basis and consent

We process your information with your consent, which you give by submitting the contact form, and where it is necessary for our legitimate interests in responding to and managing enquiries, or to comply with the law. You may withdraw your consent at any time (see section 9).

5. Who we share it with

We never sell your personal information. We share it only where needed, with:

• Service providers who help us run the website and our communications, such as hosting and email providers, and Google LLC for website analytics (only if you accept analytics cookies).
• Companies within our group or portfolio, where this is relevant to your enquiry.
• Our professional advisers, such as lawyers, auditors and accountants.
• Regulators, law enforcement and other authorities, where required by law.

6. Cross-border transfers

We operate in South Africa and Zimbabwe, and some of our service providers are located elsewhere. Your information may therefore be transferred between these countries and to other countries. When this happens, we take appropriate steps, such as contractual safeguards, to ensure your information is protected to a standard consistent with applicable data protection law.

7. How long we keep it

We keep enquiry information only for as long as needed to deal with your enquiry and any follow-up, and to meet our legal, regulatory and record-keeping obligations. After that, it is deleted or anonymised.

8. How we protect it

We use reasonable technical and organisational measures to protect your information. Our website is served over an encrypted connection, and enquiries are stored in a database that cannot be read through the public website; access is limited to authorised people who need it.

9. Your rights

Subject to applicable law, you have the right to:

• Ask for access to the personal information we hold about you.
• Ask us to correct inaccurate or incomplete information.
• Ask us to delete your information.
• Object to how we process your information.
• Withdraw your consent at any time.

If you are not satisfied with how we handle your information, you may complain to the Information Regulator (South Africa) under the Protection of Personal Information Act (POPIA), or to the Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ) under the Cyber and Data Protection Act.

10. Cookies and similar technologies

We do not use advertising cookies. Our website uses Google Analytics, a service provided by Google LLC, to understand how visitors use the site, such as the pages viewed, device and browser type, approximate location and how visitors arrived at the site.

Analytics cookies are only set if you accept them in our cookie banner. We use this information in aggregate only, not to identify individuals, and we never sell it. Google may process this information outside South Africa and Zimbabwe. You can change your choice at any time using the "Cookie settings" link in the footer of our website.

Fonts on the site are loaded from Google Fonts, which means your browser connects to Google's servers and shares your IP address with Google to display them.

11. Children

Our website is not intended for anyone under 18, and we do not knowingly collect personal information from children.

12. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated shown at the top.

13. Contact us

To make a privacy request or ask a question about this policy, please use the contact form on our website, or write to us at one of our offices:

• Johannesburg: 420 Janadel Avenue, Halfway Gardens, South Africa · +27 12 850 0017
• Harare: 22 Boscobel Drive East, Lewisam, Zimbabwe · +263 242 481 035
• Bulawayo: 8 Swansea Street, Belmort, Zimbabwe · +263 292 887 361