Pinnacle
of Service.

Regulatory Anchor

Protection of Personal Information Act (POPIA), Act 4 of 2013

Policy Scope

This policy outlines how APEXSERVE PROPRIETARY LIMITED collects, processes, protects, and destroys personal information belonging to its corporate clients, leads, vendors, and directors.

Information Officer

Jayna (Jayanthee) Pancham (Director) — responsible for internal operational compliance, managing data security safeguards, and addressing queries from the South African Information Regulator.

Accountability

The Director ensures all business systems and operations comply with data privacy laws.

Processing Limitation

Personal data is only processed with explicit consent or legitimate business necessity and is never excessive.

Purpose Specification

Data is collected solely for clear corporate purposes and is not retained longer than legally required.

Further Processing Limitation

Data will not be reused or shared for any secondary purpose unless aligned with the original collection intent.

Information Quality

APEXSERVE takes reasonable steps to ensure stored data remains accurate, complete, and up to date.

Openness

APEXSERVE maintains full transparency regarding the types of business data it holds and why it is stored.

Security Safeguards

Active technical and operational measures protect digital data from unauthorised access, including secure cloud storage, device encryption, and password management.

Data Subject Participation

Clients and business associates retain the right to request access, correction, or destruction of their personal records held by APEXSERVE.

Purpose

This manual facilitates public access to records held by APEXSERVE PROPRIETARY LIMITED, balancing the constitutional right to information with legitimate commercial confidentiality and privacy rights.

Information Officer

Jayna (Jayanthee) Pancham — 19 Shearwater, 332 Bryanston Drive, Bryanston, Johannesburg, 2191 — panchamj@apexserve.co.za

Automatic Access

Public marketing materials, service overviews, and core CIPC registry details are accessible without a formal request.

Operational Records

Business proposals, independent audit frameworks, and client engagement letters.

Financial Records

Operational tax records, corporate bank statements, VAT records, and vendor invoices.

Governance Records

Incorporation documents, director details, and CIPC filing receipts.

How to Request

Submit Form 02: Request for Access to Record to the Information Officer, identifying the specific records sought, requester identity, and the right being protected. Standard statutory fees may apply.

Grounds for Refusal

APEXSERVE will refuse access where disclosure would breach third-party personal privacy, expose proprietary commercial trade secrets, or violate signed professional non-disclosure agreements.

Nature of Content

APEXSERVE PROPRIETARY LIMITED ("APEXSERVE") is an independent boutique retirement fund governance practice. The technical commentary, legislative references (including references to the Pension Funds Act, FSCA Conduct Standards, and the Conduct of Financial Institutions Bill/Act), and operational insights provided on this website are intended solely to highlight general industry frameworks.

No Formal Advice

Nothing on this website constitutes a formal opinion, statutory binding advice, or a definitive regulatory interpretation. Fiduciary, board, or operational advisory outcomes depend entirely on the specific rules, data accuracy, and context of individual retirement funds. Formal engagements with APEXSERVE are subject to a signed, written service contract.

Liability

APEXSERVE disclaims all liability for actions taken or omitted based on the website's contents.