Data Subject & Deletion Request

DRAFT — FOR PROFESSIONAL LEGAL REVIEW

Prepared for ORION269 (PTY) LTD / WhatsMyBiz.App

This document is a draft for review only. Subject to professional legal review and approval.

Data Subject & Data Deletion Request — WhatsMyBiz.App

Operated by ORION269 (PTY) LTD | CIPC 2026/535275/07

Draft v2.0 for review — effective date to be confirmed on approval. Draft prepared for ORION269 (PTY) LTD. Subject to professional legal review and approval.

This page provides a practical route for data subjects and customers to request access, correction, deletion or other assistance concerning personal information processed by WhatsMyBiz.App.

1. Who operates WhatsMyBiz

WhatsMyBiz.App is operated by ORION269 (PTY) LTD, CIPC 2026/535275/07. Information Officer: Graham Schubach (registered with the Information Regulator: 2026-061428).

2. Submit a request

• Email: hello@whatsmybiz.app
• WhatsApp: +27 72 497 1810
• Company email: info@oriondevcore.com
• Physical address: 26 Vasco da Gama Drive, Amanzimtoti, Durban, Kwa-Zulu Natal, 4001

3. What to include

• Full name and contact details.
• The WhatsMyBiz business or service involved, if known.
• The information or conversation you are asking us to locate.
• The action requested: access, correction, deletion, objection, restriction or another privacy request.
• Reasonable information needed to verify identity and authority.

4. Verification

ORION269 may request reasonable proof of identity or authority before releasing, changing or deleting personal information. This protects data subjects from unauthorised requests.

5. Requests involving a WhatsMyBiz customer

If the information was supplied to WhatsMyBiz by a business Customer and that Customer is the Responsible Party, ORION269 may refer the request to that Customer or process it with the Customer's instructions. This is because the Customer may control the purpose and means of the processing.

6. Deletion

Where deletion is lawful and technically possible, ORION269 will arrange deletion or anonymisation within a reasonable period. Customer business data will be deleted or anonymised in accordance with the applicable retention schedule for the relevant system (generally within 60 days after service termination where the system supports it, and otherwise within the system's scheduled purge cycle), subject to legal retention obligations, active disputes, security requirements, backup and technical deletion cycles, fraud prevention and accounting/tax obligations. This does not guarantee deletion from every third-party backup within that period.

7. When deletion may be refused or limited

• Where retention is required by law.
• Where information is necessary for an active legal claim or dispute.
• Where deletion would compromise security, fraud prevention or the integrity of records.
• Where the request concerns information that ORION269 is not legally entitled to delete because another Responsible Party controls it.
• Where the information has been lawfully anonymised so that it can no longer reasonably identify a person.

8. Complaints

If a privacy concern cannot be resolved directly with ORION269, a data subject may contact the Information Regulator of South Africa through its official channels.

9. Response

ORION269 will acknowledge requests and respond within a reasonable period, taking account of the nature and complexity of the request and applicable legal requirements.

10. Contact

ORION269 (PTY) LTD Information Officer: Graham Schubach (registered with the Information Regulator: 2026-061428) hello@whatsmybiz.app +27 72 497 1810 26 Vasco da Gama Drive, Amanzimtoti, Durban, Kwa-Zulu Natal, 4001

ORION269 (PTY) LTD · CIPC 2026/535275/07 · docs.oriondevcore.com Draft prepared for ORION269 (PTY) LTD. Subject to professional legal review and approval.