Privacy Notice

Who this notice applies to.

Kitivo Mercantile Group, referred to as “KMG”, “we”, “us” or “our”, is headquartered at 2nd Floor, Golden Heights Tower, Chole Road, Masaki, Dar es Salaam, Tanzania.

This notice applies to visitors to this website and to individuals who contact KMG in connection with a potential trading mandate, supply relationship, advisory engagement, operating partnership, recruitment matter or other legitimate business enquiry.

Additional privacy information may be provided where KMG begins a formal counterparty, supplier, employee or contractor onboarding process.

Information we may collect.

Information you provide

The institutional enquiry form may collect your name, job title, organisation, company website, work email address, telephone number, country or primary market, enquiry type and the mandate summary you choose to provide.

We may also receive information contained in correspondence, meeting records and documents that you provide after initial contact. Sensitive counterparty or transaction documents should only be submitted through a secure channel agreed with KMG.

Technical and security information

When you use the website, our hosting and security providers may process technical information such as an IP address, browser and device information, timestamps, requested pages, referral information and automated security signals. This information is used to operate and protect the website and enquiry channel.

Information from legitimate third-party sources

For business and compliance purposes, KMG may obtain information from public registers, professional sources, sanctions and risk databases, advisers, counterparties and service providers. This may include corporate affiliation, role, beneficial-ownership, regulatory, litigation, sanctions or adverse-media information where relevant to an identified relationship or transaction.

How we use personal information.

KMG may use personal information to:

• Assess, route and respond to an enquiry.
• Evaluate a prospective mandate, supply relationship, counterparty or operating partnership.
• Conduct appropriate identity, ownership, sanctions, integrity and counterparty checks.
• Prepare for or perform a contract and manage related communications.
• Protect KMG, its counterparties, personnel, systems and legitimate commercial interests.
• Comply with applicable legal, regulatory, banking, insurance, audit or recordkeeping requirements.
• Establish, exercise or defend legal rights and resolve disputes.

Depending on the circumstances, processing may be based on consent, steps requested before entering a contract, performance of a contract, compliance with a legal obligation or KMG’s legitimate interests in conducting and protecting its business. KMG will not use personal information for a materially incompatible purpose without an appropriate basis.

Sharing and cross-border processing.

Personal information is shared only where reasonably necessary and subject to appropriate confidentiality or legal controls. Recipients may include:

• KMG directors, personnel and authorised representatives who need the information for a legitimate business purpose.
• Website hosting, security, email, communications and other technology providers.
• Professional advisers, independent inspectors, compliance providers and approved operating partners where relevant to an identified mandate.
• Banks, insurers, logistics providers, regulators, law-enforcement bodies or courts where disclosure is required or legitimately necessary.
• A successor or transaction party in connection with a lawful corporate reorganisation, investment or transfer, subject to appropriate safeguards.

KMG operates across borders and may use service providers or personnel located in different countries. Where personal information is transferred internationally, KMG takes reasonable steps to ensure that the transfer is lawful and that the information remains appropriately protected.

Retention and security.

KMG retains personal information only for as long as reasonably necessary for the purpose for which it was collected, to manage a business relationship, meet legal or recordkeeping requirements, resolve disputes and protect legitimate interests. Retention periods depend on the nature of the information and the relationship.

KMG applies reasonable organisational, technical and physical safeguards appropriate to the information and risk. These include access controls, need-to-know handling, secure channels for sensitive documents and measures designed to protect against unauthorised access, loss, misuse or alteration.

No internet transmission or storage system can be guaranteed to be completely secure. Please do not send banking instructions, identity documents, commercially sensitive contracts or confidential transaction data through the public enquiry form.

Your choices and rights.

Subject to applicable law, you may have the right to ask KMG to:

• Confirm whether we hold personal information about you and provide access to it.
• Correct inaccurate or incomplete information.
• Delete information that is no longer required or lawfully retained.
• Restrict or object to certain processing.
• Provide information in a portable form where the right applies.
• Withdraw consent where processing depends on consent.

KMG may need to verify your identity before acting on a request. Certain rights are subject to legal exceptions, including obligations to retain transaction, compliance or dispute records.

Cookies and security services.

KMG does not currently use the website for behavioural advertising or user profiling. The website and its security providers may use strictly necessary storage, cookies or similar technology to maintain functionality, protect the enquiry channel and distinguish legitimate users from automated submissions.

If analytics, marketing technology or additional cookie categories are introduced, this notice and the website’s consent controls will be updated before those technologies are used where consent is required.

Questions, requests and updates.

Privacy questions or requests can be submitted through the institutional enquiry form by selecting “Privacy or governance request”. Please provide enough information for KMG to identify and respond to the request, but do not include identity documents in the initial submission.

KMG may update this notice to reflect changes in its website, business practices or applicable requirements. The effective date and version shown on this page identify the current public version.

This notice is intended to operate consistently with applicable data-protection law, including the Tanzania Personal Data Protection Act where applicable. It should be read together with the Website Terms.