Last updated: January 28, 2026 Economic Sense ("we", "us", or "our") is an economic development consultancy based in South Africa. We apply private sector expertise to address development challenges across Africa, including value chain analysis, development program design and support, business coaching, investment promotion, access to finance, market studies, and related activities. Our work targets partners in sub-Saharan Africa, with connections to EU and other international markets. We are committed to protecting your privacy and handling your personal information responsibly, in compliance with the Protection of Personal Information Act, 2013 (POPIA) in South Africa, the General Data Protection Regulation (GDPR) (where applicable to EU residents), and other relevant data protection laws across Africa. This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you visit our website (timeforsense.com), interact with us (e.g., via contact forms, project inquiries, or joining initiatives), or otherwise engage with our services.

1. Who We Are (Data Controller / Responsible Party) • Responsible Party / Data Controller: Economic Sense (operating as timeforsense.com) • Physical address: 20 Glenart Road, Kloof, KwaZulu Natal, 3610 • Email: info@timeforsense.com • Information Officer (POPIA-required): Kerry Kyd kerry@timeforsense.com For EU residents: We act as the data controller under GDPR unless specified otherwise in a specific engagement. 2. Personal Information We Collect We may collect the following categories of personal information: • Identity and contact details: Name, email address, phone number, organization name, job title (e.g., when you submit inquiries, forms like Google Forms for joining job creation initiatives, or contact us). • Professional information: Details about your business, sector, or project interests (e.g., in value chain or investment contexts). • Technical data: IP address, browser type, device information, pages visited, time/date of access, and referral sources (via cookies or analytics tools). • Communication data: Messages, emails, or form submissions you send us. • Other: Any information you voluntarily provide (e.g., in project proposals or feedback). We do not intentionally collect special categories of personal data (e.g., racial/ethnic origin, health data) unless strictly necessary for a specific project and with explicit consent or other lawful basis. 3. How We Collect Personal Information • Directly from you (e.g., via website forms, emails, meetings, or project interactions). • Automatically via website technologies (cookies, server logs). • From third parties (e.g., partners in joint projects, public sources for professional contacts). 4. Purposes and Legal Bases for Processing We process personal information for the following purposes and on these legal bases: • To provide and improve our services (e.g., responding to inquiries, delivering consultancy): o POPIA: Lawful processing under Section 11 (e.g., consent, contract performance, legitimate interests). o GDPR: Article 6(1)(b) contract, (f) legitimate interests (e.g., business development in Africa/EU). • To communicate (e.g., project updates, newsletters if subscribed): o Consent (opt-in) or legitimate interests. • Website analytics and security: o Legitimate interests (improving user experience, detecting issues). • Compliance and legal obligations (e.g., record-keeping, responding to regulator requests): o Legal obligation or legitimate interests. We only process personal information for specified, explicit, and legitimate purposes and will not further process it incompatibly. 5. Sharing Your Personal Information We may share personal information with: • Service providers (e.g., cloud hosting, email providers, analytics tools like Google) bound by confidentiality and data protection obligations. • Project partners, funders, or collaborators (e.g., development agencies in Africa or EU) — only as necessary and with safeguards. • Regulators or authorities (e.g., South African Information Regulator, EU supervisory authorities) when required by law. We do not sell personal information. 6. International Transfers of Personal Information As a South Africa-based organization operating across Africa and with EU connections: • Data may be transferred outside South Africa (e.g., to EU/EEA countries, US, or other African jurisdictions). • For GDPR: Transfers use safeguards like Standard Contractual Clauses (SCCs) or adequacy decisions where available. South Africa is not yet deemed adequate under GDPR, so appropriate protections apply. • For POPIA: Cross-border flows comply with Section 72 (adequate protection or binding agreements). 7. Data Retention We retain personal information only as long as necessary for the purposes above, or as required by law (e.g., tax records). Typical periods: • Inquiry/contact data: Up to 3 years after last interaction (unless longer for legal reasons). • Technical logs: Up to 12 months. After this, data is securely deleted or anonymized. 8. Your Rights as a Data Subject Under POPIA and/or GDPR (as applicable): • Access your personal information and receive a copy. • Request correction of inaccurate/incomplete data. • Object to processing (especially for direct marketing or legitimate interests). • Request deletion/erasure (subject to legal exceptions). • Restrict processing in certain cases. • Withdraw consent (where consent is the basis) — this does not affect prior processing. • Data portability (GDPR-specific). • Lodge a complaint with the Information Regulator (South Africa: inforeg@justice.gov.za) or relevant EU supervisory authority. To exercise rights, contact us at info@timeforsense.com. We respond within 30 days (extendable under POPIA/GDPR). 9. Security of Personal Information We implement reasonable technical and organizational measures to protect personal information from loss, misuse, unauthorized access, disclosure, alteration, or destruction (e.g., encryption, access controls, regular reviews). However, no transmission over the internet is 100% secure — we cannot guarantee absolute security. 10. Cookies and Similar Technologies Our website may use cookies for functionality, analytics, and performance. POPIA and GDPR require consent for non-essential cookies. 11. Children's Privacy Our services and website are not directed at children under 18. We do not knowingly collect data from children. 12. Changes to This Policy We may update this policy periodically. Changes will be posted here with an updated date. Significant changes may be notified via email or website notice.

13. Contact Us For questions, rights requests, or complaints: Email: info@timeforsense.com Subject: Privacy Enquiry By using our website or providing personal information, you acknowledge this policy. Thank you for trusting Economic Sense with your data