Zambesi ZGD Token Privacy Policy

Version update - 30 April 2025

1. Introduction to Your Privacy

At Zambesi ZGD Token, we respect your right to privacy and the protection of your personal information. This Privacy Policy explains how we collect, use, store, and share your data when you use our website, portal, and related services (“Services”).

We comply with the Protection of Personal Information Act (POPIA) and other applicable privacy laws.

By using our Services, you agree to the practices described in this policy.

2. What Information We Collect

2.1 Personal Information You Provide
We collect the following personal information when you register or use our Services:

• Full name
• Email address
• Residential address
• Date of birth
• Government-issued ID or passport (for KYC)
• Photographic verification (for KYC)
• Contact number
• Wallet address (if applicable)

2.2 Information Collected Automatically
When you access our Portal, we automatically collect:

• IP address
• Browser type and version
• Device information
• Usage patterns and session data
• Cookies and tracking technologies (see section 8)

2.3 Wallet and Account-Related Data
In some cases, we securely store encrypted private keys for user wallets as part of our onboarding experience. This is temporary and users are encouraged to transfer to non-custodial wallets.

2.4 Payment Information
We do not directly store or process credit card or banking information. All payment data is processed securely via third-party payment gateway providers, such as [insert provider name].

3. Why We Collect Your Information

We use your personal data to:

• Provide and improve our Services
• Verify your identity and comply with KYC (Know Your Customer) and AML (Anti-Money Laundering)regulations
• Manage your user account
• Communicate with you (support, updates, and notifications)
• Comply with applicable laws and regulations
• Enhance platform security and fraud prevention

4. Legal Basis for Processing (POPIA Compliance)

Under POPIA, we process your personal information based on:

• Your explicit consent
• Our legal obligations (e.g., financial regulations)
• The performance of a contract (e.g., your use of the Portal)
• Our legitimate interests, where applicable and not overridden by your rights

5. How We Store and Secure Your Information

We take reasonable, industry-standard measures to protect your information against loss, misuse, unauthorized access, or disclosure. This includes:

• Encryption of private keys and sensitive data
• Secure access controls
• Firewalls and intrusion prevention
• Ongoing monitoring of systems

Your data is stored in secure environments and may be hosted in South Africa or other jurisdictions with adequate protection standards.

6. Sharing of Information

We may share your information with:

• Verified third-party KYC service providers
• Payment processors to facilitate transactions
• Legal authorities, where required by law or court order
• Technology service providers who support our operations (under confidentiality agreements)

We do not sell or rent your personal information to third parties.

7. International Data Transfers

Your information may be transferred to and stored in countries outside of South Africa. We ensure that such transfers comply with POPIA and that adequate protection is in place.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Improve your browsing experience
• Remember your login session
• Measure and analyze traffic and usage
  You may disable cookies via your browser settings, but some functionality may be affected.

9. Your Rights Under POPIA

You have the right to:

• Request access to the personal data we hold about you
• Ask for correction or deletion of inaccurate or outdated information
• Withdraw consent (where processing is based on consent)
• Object to certain types of processing
• Lodge a complaint with the Information Regulator (South Africa)

To exercise these rights, please contact us at [insert contact email].

10. Retention of Personal Information

We retain your data only as long as necessary for the purposes outlined above or as required by law, including regulatory reporting obligations.

11. Minors

Our Services are not intended for persons under the age of 18. We do not knowingly collect personal information from children.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised date. If the changes are significant, we may notify you directly.

13. Contact Us

If you have questions or concerns about this Privacy Policy or your personal information, please contact us via our public website.