Privacy Policy

1. Introduction

DexHub (“we”, “our”, or “the Platform”) is a B2B digital mineral exchange operated by w-kaleafrica.com, incorporated in Tanzania. We are committed to protecting the personal information of all users, traders, and visitors who interact with our platform.

This Privacy Policy explains what data we collect, how we use it, with whom we share it, and the rights you hold over your information. By registering or using DexHub, you agree to the practices described herein.

2. Data We Collect

We collect the following categories of personal and business data:

• Account Information: Full name, email address, phone number, company/business name, and chosen role (buyer or seller).
• KYC Documents: Government-issued identity documents, business registration certificates, and any supporting materials required for Know Your Customer (KYC) verification.
• Listing Data: Mineral type, quantity, grade, price, origin, and images uploaded in connection with a trade listing.
• Transaction Records: Bid history, contract details, and payment references.
• Communication Data: Messages exchanged through the platform’s internal messaging system.
• Technical Data: IP address, browser type, device identifiers, and session log data collected automatically when you use our services.

3. How We Use Your Data

We use collected information to:

• Create and manage your trader account.
• Conduct KYC identity and business verification.
• Facilitate trade listings, bids, and contract processing.
• Enable secure communications between buyers and sellers.
• Maintain a full audit trail as required by applicable law and platform integrity standards.
• Send transactional notifications (bid updates, KYC status, messages).
• Comply with anti-money laundering (AML), counter-terrorist financing (CTF), and mineral trade regulations in Tanzania and applicable jurisdictions.
• Improve the platform through anonymised analytics.

4. Legal Basis for Processing

We process your personal data under the following legal bases:

• Contractual necessity: Processing required to fulfil the services described in our Terms of Service.
• Legal obligation: Compliance with Tanzanian and regional regulatory requirements (e.g., mineral trade licensing, AML obligations).
• Legitimate interests: Platform security, fraud prevention, and service improvement.
• Consent: Where you have expressly provided consent (e.g., marketing communications).

5. Data Sharing and Disclosure

We do not sell your personal data. We may share data in the following limited circumstances:

• Verified counter-parties: Certain listing details are visible to KYC-approved traders to facilitate trade matching.
• Regulators and law enforcement: When required by law, court order, or mineral trade authorities in Tanzania or relevant jurisdictions.
• Service providers: Trusted third-party providers (hosting, email delivery, payment processors) operating under strict data processing agreements.
• Business transfer: In the event of a merger or acquisition, data may be transferred to a successor entity subject to equivalent protections.

6. Data Retention

We retain your data for as long as your account is active and for a minimum of seven (7) years following account closure, in compliance with Tanzanian financial and mineral trade record-keeping requirements. KYC documents are retained for a minimum of five (5) years after the last transaction. You may request deletion of non-mandatory data by contacting us (subject to legal retention obligations).

7. Security Measures

DexHub employs industry-standard safeguards including encrypted data transmission (TLS), encrypted storage of sensitive documents, hashed passwords, role-based access controls, and regular security reviews. While we take every reasonable precaution, no transmission over the internet is 100% secure.

8. Your Rights

Subject to applicable law, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data (where no legal retention requirement applies).
• Object to or restrict certain processing activities.
• Data portability — receive your data in a structured, machine-readable format.
• Withdraw consent at any time where processing is consent-based.

To exercise any of these rights, contact us at privacy@dexhub.africa.

9. Cookies and Tracking

We use session cookies strictly necessary for platform operation (authentication, CSRF protection). We do not use third-party advertising cookies or cross-site tracking technologies. You can disable cookies in your browser settings; however, this will prevent you from logging in.

10. Minors

DexHub is a business-to-business platform intended solely for users who are at least 18 years of age and are acting in a commercial capacity. We do not knowingly collect data from minors.

11. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be notified via email or a prominent notice on the platform at least 14 days before taking effect. Continued use of DexHub after the effective date constitutes acceptance of the revised policy.

12. Contact Us

For any questions, requests, or complaints regarding this Privacy Policy, please contact: