Privacy Policy

1. Who We Are

Kijani Technology Limited is a technology company providing modern treasury and working capital solutions for businesses.

Our solutions include payables management, receivables management, treasury management, reporting and data automation, workflow streamlining, platform integration, customer KYC capabilities, operational risk management, and related financial technology solutions.

For privacy-related enquiries, you may contact us using our Contact Us form.

2. Information We Collect

We may collect personal information that you voluntarily provide to us when you interact with our Website or contact us.

This may include:

• Your name, where provided;
• Email address;
• Telephone or phone number;
• Office or business address;
• Information contained in messages or enquiries you submit to us;
• Information you provide when requesting information about our products or services;
• Information provided when communicating with our team; and
• Other information that you voluntarily provide to us.

Our Website's Contact Us form currently requests an email address, phone number, office address, and message. The form also uses reCAPTCHA as an anti-abuse/security measure.

Information Collected Automatically

When you visit our Website, certain technical information may be collected automatically by the Website or its supporting technologies. Depending on how the Website is configured, this may include information such as:

• IP address;
• Browser type and version;
• Device type;
• Operating system;
• General interaction with the Website;
• Pages or content accessed;
• Date and time of access; and
• Technical information necessary to maintain the security and functionality of the Website.

We only use such information where necessary for legitimate business, security, operational, or legal purposes.

3. How We Use Personal Information

We may use personal information for purposes including:

• Responding to enquiries and requests submitted through the Website;
• Communicating with prospective and existing customers, partners, and other business contacts;
• Providing information about our products, services, and business activities;
• Understanding and responding to requests for demonstrations or further information;
• Maintaining, operating, and improving the Website;
• Protecting the security, integrity, and availability of our Website and systems;
• Detecting, preventing, and investigating fraud, misuse, unauthorized access, security incidents, or other unlawful activity;
• Complying with applicable legal, regulatory, and contractual obligations; and
• Establishing, exercising, or defending legal rights where necessary.

Kijani Tech's information-security framework emphasizes the confidentiality, integrity, and availability of information and compliance with applicable privacy and data-protection requirements.

4. Legal Basis for Processing

Where applicable, Kijani Tech will process personal information on an appropriate lawful basis.

Depending on the circumstances, this may include:

• Consent: where you have voluntarily provided consent for a specific processing activity;
• Contractual necessity: where processing is necessary to provide a requested service or take steps at your request;
• Legitimate interests: where processing is necessary for legitimate business, operational, security, or administrative purposes and those interests are not overridden by your rights;
• Legal obligations: where processing is necessary to comply with applicable law or regulatory requirements; or
• Protection of rights and security: where processing is necessary to protect our systems, people, customers, or other legitimate interests.

Where consent is the applicable legal basis, you may withdraw your consent, subject to any legal or operational limitations.

5. Data Protection and Privacy

We do not sell personal information for monetary consideration.

We may disclose personal information where reasonably necessary to operate our business and Website, including to:

• Service providers and technology vendors supporting our Website, infrastructure, communications, security, or business operations;
• Professional advisers, auditors, insurers, or other authorized representatives;
• Regulatory authorities, government agencies, law-enforcement bodies, or courts where disclosure is required or permitted by law;
• Business partners where disclosure is necessary for a legitimate business purpose and is permitted by applicable law; or
• Other parties where you have provided appropriate authorization.

Where third parties process personal information on our behalf, we seek to ensure that appropriate contractual, technical, and organizational safeguards are applied.

6. Data Security

Kijani Tech takes reasonable technical and organizational measures to protect personal information against unauthorized access, disclosure, alteration, loss, misuse, or destruction.

Our information-security framework includes controls relating to:

• Access authorization and least-privilege principles;
• Authentication and account security;
• Multi-factor authentication for specified systems and access;
• Secure remote access;
• Endpoint security;
• Encryption and secure handling of sensitive information;
• Monitoring and security logging;
• Data-loss prevention measures;
• Security incident reporting and response; and
• Regular policy review and security awareness.

Our internal policy requires users to access information only where they have been explicitly authorized and only to the extent necessary to perform their assigned duties.

Sensitive information is also required to be handled through approved and secured mechanisms rather than unauthorized personal services or storage platforms.

However, no method of transmission over the Internet or method of electronic storage can be guaranteed to be completely secure. You should therefore exercise appropriate care when submitting information online.

7. Monitoring and Security

Kijani Tech may monitor its systems, networks, and communication channels for legitimate security, operational, compliance, and incident-investigation purposes, subject to applicable law.

Our internal policy states that monitoring may include system logs, endpoint telemetry, security controls, and other technical monitoring mechanisms where legally permissible.

Monitoring is intended to help protect Kijani Tech, its customers, personnel, systems, and information from unauthorized activity and security threats.

8. Cookies and Similar Technologies

Our Website may use cookies or similar technologies that are necessary to operate, secure, analyze, or improve the Website.

Cookies may be used for purposes such as:

• Enabling Website functionality;
• Maintaining security;
• Understanding Website usage and performance;
• Improving Website functionality and user experience; and
• Supporting anti-abuse mechanisms.

Where required by applicable law, we will provide appropriate information and obtain consent before placing non-essential cookies or similar technologies.

Because the technologies used by the Website may change over time, you should review any cookie notice or consent mechanism presented on the Website for the most current information.

9. Third-Party Websites and Services

The Website may contain links to or integrations with third-party websites, platforms, or services.

Kijani Tech is not responsible for the privacy practices, security, or content of third-party websites or services that we do not control.

We encourage you to review the privacy policies of third parties before providing them with personal information.

10. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to:

• Respond to and manage enquiries;
• Maintain appropriate business and operational records;
• Comply with legal, regulatory, contractual, accounting, or reporting obligations;
• Resolve disputes;
• Detect and investigate security incidents or misuse; and
• Establish, exercise, or defend legal claims.

Specific retention periods may vary depending on the type of information, the purpose for which it was collected, applicable legal requirements, and legitimate business needs.

When personal information is no longer required, we will take reasonable steps to securely delete, destroy, anonymize, or otherwise dispose of it in accordance with applicable requirements.

11. Your Privacy Rights

Depending on applicable law, you may have rights regarding your personal information, which may include the right to:

• Request access to personal information we hold about you;
• Request correction of inaccurate or incomplete information;
• Request deletion of personal information in circumstances where deletion is legally required or permitted;
• Object to certain processing activities;
• Request restriction of processing in applicable circumstances;
• Withdraw consent where processing is based on consent;
• Request information about how your personal information is processed; and
• Lodge a complaint with an applicable data-protection or regulatory authority.

These rights may be subject to legal exceptions and limitations.

To exercise an applicable privacy right, please contact us using our Contact Us form. We may need to verify your identity before processing a request.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our Website, services, information-processing practices, security requirements, or applicable laws and regulations.

When we make material changes, we may update the "Last Updated" date displayed in Section 13 of this Privacy Policy and, where appropriate, provide additional notice.

We encourage you to review this Privacy Policy periodically to remain informed about how we protect your information.

13. Effective Date

This Privacy Policy is effective from 18 November 2025.

Last Updated: 18 November 2025