Legal & Privacy

Privacy Policy

Confidentiality comes first. This policy explains what personal and business information we collect across our website and applicant portal, why we collect it, who can reach it, how long we keep it, and the rights you hold over it.

Version 2.0 — Effective 14 October 2026 Anathéto Investments (Pty) Ltd

Introduction

Anathéto Investments (Pty) Ltd ("Anathéto", "we", "us") is founded on a confidentiality-first commitment. We handle information about our applicants, clients, directors, owners, guarantors and counterparties with care, discretion and respect for the trust you place in us.

That commitment applies to every person whose information reaches us — not only to the individual who submits an application. Where an application includes details about directors, owners or guarantors, those individuals are entitled to the same standard of confidentiality set out in this policy.

This policy describes the information we collect, how we use and protect it, the circumstances in which it may be shared, how long we retain it, and the rights available to you.

1 Scope & who we are

This policy applies to personal and business information processed through:

  • Our public website at www.anathetoinv.com, including enquiry forms and correspondence.
  • Our applicant portal at portal.anatheto.com, including registration, sign-in and the staged application process.
  • Direct communications with our team by email, telephone or in person.

The data controller is Anathéto Investments (Pty) Ltd, a company registered in Namibia (Registration No. 2025/0104) with its registered office at Unit 32 Bougain Villas, Klein Windhoek, Windhoek, Namibia. Our privacy contact is The Administrator, reachable at info@anathetoinv.com.

This document is the single authoritative privacy policy for Anathéto Investments (Pty) Ltd. It supersedes any earlier privacy notice published on our website or within the portal.

2 Information we collect

We collect information in the following ways:

2.1 Account registration and sign-in

The portal offers two sign-in routes, and both are disclosed here:

  • Google OAuth 2.0. If you sign in with Google, we receive verified data from your Google profile — your name and email address. We never see or store your Google password.
  • Institutional email and password. If you register directly, we collect the institutional email address and the secret password you create. Passwords are stored in hashed form and are never readable by our staff.

2.2 Application and business information

Where you submit an application, we collect the information you provide across the application stages. These include:

  • Stage 1 — business profile: company name, registration number, industry, years in operation, country, and registered office address.
  • Later stages — financial and strategic data: balance sheets, cash flow statements, tax returns, and other strategic or financial information you choose to submit.
  • Information about other people: details you supply about directors, owners or guarantors associated with your business. You confirm you are authorised to share that information.

For reference, the controller's own registered particulars — which appear on business profiles submitted to us — are: Anathéto Investments (Pty) Ltd, M&A Advisory, Registration No. 2025/0104, Unit 32 Bougain Villas, Klein Windhoek, Windhoek, Namibia. Enquiries may be directed to info@anathetoinv.com.

2.3 Technical and usage information

When you use our website or portal, we automatically collect limited technical information such as your IP address, browser type, device information, pages visited and session timestamps. This helps us keep the services secure and functioning.

3 How we use information

We use the information described above for the following purposes:

Assessing applications

Evaluating your business profile, financial position and strategic fit.

Communicating with you

Responding to enquiries, providing updates and requesting clarification.

Providing our services

Delivering advisory, transaction and consultancy services you have engaged us for.

Legal compliance

Meeting our legal, regulatory and risk-management obligations.

Preventing misuse

Detecting, preventing and addressing fraud, abuse or security incidents.

Improving our services

Understanding how our platform is used so we can make it better.

4. Automated & AI processing

Our platform uses proprietary algorithms and automated tooling to help our team analyse and organise the information you submit. This processing supports our advisory work; it does not replace human judgement.

In particular:

  • Human decision. No decision with a legal or significant effect on you is made solely by automated means. Our advisors make the substantive decisions.
  • Explanation. If automated tooling has materially informed a decision that affects you, you may ask us to explain how it was used.
  • Human review. You may ask for a human review of any decision, and to express your point of view, by contacting us using the details in section 11.

Third-party providers that process information on our behalf are identified in section 5.

5 Data sharing

We do not sell, trade or rent your information. That commitment is fundamental to our business and remains in place.

To operate our website, portal and services, we rely on trusted service providers — hosting, database, email and AI tooling providers — who process information on our behalf. These providers act only on our instructions and are bound by contractual confidentiality and data-protection obligations. We also maintain internal controls that limit access to the staff who need it.

We may share information with prospective funders, investors or transaction counterparties in the course of an engagement, but only:

  • with your specific authorisation, and
  • where the recipient has signed a non-disclosure agreement covering your information.

We may also disclose information where we are required to do so by law, court order or a competent regulator.

Our no-sale commitment and the authorisation-and-NDA requirement for funders are operational promises. We maintain records demonstrating that they are honoured.

6. Security

We apply layered technical and organisational safeguards to protect the information you entrust to us:

Encryption at rest

Data stored in our database is encrypted at rest using AES-256.

Encryption in transit

All traffic between your browser and our services is protected using TLS.

Access control

Row-level security policies restrict access to your records. Only your own account and authorised Anathéto staff can reach them. This is logical access control, not physical isolation — our providers, described in section 5, also process the data on our behalf.

Secure sign-in

Google OAuth 2.0 is supported for authentication. Where you set a password directly, it is stored hashed and never seen by our staff.

No system is completely secure. While we take these measures seriously, we cannot guarantee absolute security. If we become aware of a breach affecting your information, we will notify you and the relevant authorities as required by law.

7 Your rights

Subject to applicable law, you have the following rights in relation to your information:

Access

Request a copy of the information we hold about you.

Portability

Export your data in a portable format at any time.

Correction

Ask us to correct information that is inaccurate or incomplete.

Erasure

Request erasure of your information ("right to be forgotten").

Objection

Object to certain processing, including direct marketing.

Human review

Request human review of any automated decision affecting you.

A note on erasure. We will action erasure requests promptly. However, we may need to retain certain information where we are required to do so by law, or where it is necessary to establish, exercise or defend legal claims. Where retention is required, we keep only what is necessary and for no longer than necessary.

To exercise any of these rights, contact us using the details in section 11.

8 Retention

We retain information only for as long as we need it for the purposes described in this policy, or for as long as the law requires.

Retention period: 3 years. A three-year period aligns with the prescriptive period for contractual claims under the Prescription Act 68 of 1969, section 11(d).

When you request erasure, we remove your information from active systems promptly. Residual copies held in encrypted backups are purged on our backup cycle.

Residual copies held in provider backups are purged within a defined period consistent with our hosting and database providers' backup and recovery cycles.

9 Cookies & similar technologies

Our website and portal use cookies and similar technologies for essential purposes — keeping you signed in, maintaining security, and remembering your preferences. Essential cookies cannot be switched off without affecting how the services work.

Where we use analytics cookies to understand how our services are used, we do so in an aggregated form. You can control cookies through your browser settings.

11 Contact

If you have a question about this policy, or wish to exercise any of the rights described in section 7, please contact us:

Privacy contact

The Administrator

Data controller

Anathéto Investments (Pty) Ltd

Version history

Version 2.0 — Effective 14 October 2026. This version replaces all previous privacy notices. We will review this policy periodically and publish any changes on this page with an updated effective date.

Enquiries: The Administrator, Anathéto Investments (Pty) Ltd, Registration No. 2025/0104, Unit 32 Bougain Villas, Klein Windhoek, Windhoek, Namibia — info@anathetoinv.com.

Questions About Your Privacy?

We're happy to explain how we handle your information, or to help you exercise any of the rights described in this policy.

Confidential • Accountable • Transparent