The Protection of Personal Information Act, No. 4 of 2013 (POPIA) was enacted to protect the personal information of individuals by regulating the collection, use, and processing of such information. CRH-Africa Automotive (Pty) Ltd (the “Company”) is committed to ensuring that the personal information it processes is handled responsibly and in compliance with POPIA. This manual outlines the Company’s policies and procedures for the collection, use, and protection of personal information.

This document serves as a guide for the Company’s employees, clients, suppliers, and other stakeholders in ensuring compliance with POPIA.

The Company’s Information Officer is responsible for ensuring compliance with POPIA. The Information Officer oversees all matters relating to personal information and will handle requests regarding personal data protection.

This manual is intended to outline the principles and practices followed by CRH-Africa Automotive (Pty) Ltd to ensure that personal information is collected, processed, stored, and disclosed in accordance with POPIA.

The key objectives of this manual include:

• To inform stakeholders of their rights and the Company’s obligations under POPIA.
• To ensure that the Company complies with POPIA’s conditions for lawful processing.
• To establish guidelines for handling personal information in a manner that safeguards privacy.

This manual applies to all employees, contractors, third parties, and other stakeholders who process personal information on behalf of the Company.

Personal Information refers to information that identifies or relates to a person, such as name, contact details, identification numbers, employment records, financial information, etc.

This manual applies to the following:

• Employees and job applicants.
• Clients and customers.
• Suppliers and service providers.
• Shareholders, directors, and other stakeholders.
• Any other person whose personal information is processed by the Company.