Privacy Notice

Who this notice applies to.

Kitivo Mercantile Group, referred to as “KMG”, “we”, “us” or “our”, is headquartered at 2nd Floor, Golden Heights Tower, Chole Road, Masaki, Dar es Salaam, Tanzania.

This notice applies to visitors to this website and to individuals who contact KMG in connection with a potential trading mandate, supply relationship, advisory engagement, operating partnership, recruitment matter or other legitimate business enquiry.

Additional privacy information may be provided where KMG begins a formal counterparty, supplier, employee or contractor onboarding process.

Information we may collect.

Information you provide

The institutional enquiry form may collect your name, job title, organisation, company website, work email address, telephone number, country or primary market, enquiry type and the mandate summary you choose to provide.

We may also receive information contained in correspondence, meeting records and documents that you provide after initial contact. Sensitive counterparty or transaction documents should only be submitted through a secure channel agreed with KMG.

Technical and security information

When you use the website, our hosting and security providers may process technical information such as an IP address, browser and device information, timestamps, requested pages, referral information and automated security signals. This information is used to operate and protect the website and enquiry channel.

Optional website analytics

If you accept analytics, Google Analytics receives information about pages viewed, traffic sources, browser and device characteristics, engagement and contact actions. Google derives approximate country and city information from technical signals. KMG does not send enquiry names, email addresses, telephone numbers or message contents to Analytics.

Information from legitimate third-party sources

For business and compliance purposes, KMG may obtain information from public registers, professional sources, sanctions and risk databases, advisers, counterparties and service providers. This may include corporate affiliation, role, beneficial-ownership, regulatory, litigation, sanctions or adverse-media information where relevant to an identified relationship or transaction.

How we use personal information.

KMG may use personal information to:

• Assess, route and respond to an enquiry.
• Understand website use and improve our content, with your permission for optional analytics.
• Evaluate a prospective mandate, supply relationship, counterparty or operating partnership.
• Conduct appropriate identity, ownership, sanctions, integrity and counterparty checks.
• Prepare for or perform a contract and manage related communications.
• Protect KMG, its counterparties, personnel, systems and legitimate commercial interests.
• Comply with applicable legal, regulatory, banking, insurance, audit or recordkeeping requirements.
• Establish, exercise or defend legal rights and resolve disputes.

Depending on the circumstances, processing may be based on consent, steps requested before entering a contract, performance of a contract, compliance with a legal obligation or KMG’s legitimate interests in conducting and protecting its business. KMG will not use personal information for a materially incompatible purpose without an appropriate basis.

Sharing and cross-border processing.

Personal information is shared only where reasonably necessary and subject to appropriate confidentiality or legal controls. Recipients may include:

• KMG directors, personnel and authorised representatives who need the information for a legitimate business purpose.
• Website hosting, security, email, communications and other technology providers.
• Google, when you choose to enable optional website analytics.
• Professional advisers, independent inspectors, compliance providers and approved operating partners where relevant to an identified mandate.
• Banks, insurers, logistics providers, regulators, law-enforcement bodies or courts where disclosure is required or legitimately necessary.
• A successor or transaction party in connection with a lawful corporate reorganisation, investment or transfer, subject to appropriate safeguards.

KMG operates across borders and may use service providers or personnel located in different countries. Where personal information is transferred internationally, KMG takes reasonable steps to ensure that the transfer is lawful and that the information remains appropriately protected.

Retention and security.

KMG retains personal information only for as long as reasonably necessary for the purpose for which it was collected, to manage a business relationship, meet legal or recordkeeping requirements, resolve disputes and protect legitimate interests. Retention periods depend on the nature of the information and the relationship.

KMG applies reasonable organisational, technical and physical safeguards appropriate to the information and risk. These include access controls, need-to-know handling, secure channels for sensitive documents and measures designed to protect against unauthorised access, loss, misuse or alteration.

No internet transmission or storage system can be guaranteed to be completely secure. Please do not send banking instructions, identity documents, commercially sensitive contracts or confidential transaction data through the public enquiry form.

Your choices and rights.

Subject to applicable law, you may have the right to ask KMG to:

• Confirm whether we hold personal information about you and provide access to it.
• Correct inaccurate or incomplete information.
• Delete information that is no longer required or lawfully retained.
• Restrict or object to certain processing.
• Provide information in a portable form where the right applies.
• Withdraw consent where processing depends on consent.

KMG may need to verify your identity before acting on a request. Certain rights are subject to legal exceptions, including obligations to retain transaction, compliance or dispute records.

Cookies, analytics and your choice.

Strictly necessary website and security services support functionality, protect the enquiry channel and distinguish legitimate users from automated submissions. These services remain available whether you accept or decline analytics.

Google Analytics is optional and loads only after you accept it. It helps KMG understand visitor numbers, approximate locations, traffic sources, popular pages and engagement. We also measure successfully received enquiries and clicks on our WhatsApp link. A WhatsApp click does not establish that a message was sent. Advertising personalisation and Google Signals are disabled in this website integration.

Your analytics choice is stored in your browser for up to six months. Analytics cookies are configured to expire within one year. You can withdraw permission at any time using Privacy preferences in the footer. Withdrawal stops future analytics collection from that browser and removes the Analytics cookies accessible to this website; it does not automatically delete information already received by Google.

More information is available in Google’s Privacy Policy and its Analytics privacy information.

Questions, requests and updates.

Privacy questions or requests can be submitted through the institutional enquiry form by selecting “Privacy or governance request”. Please provide enough information for KMG to identify and respond to the request, but do not include identity documents in the initial submission.

KMG may update this notice to reflect changes in its website, business practices or applicable requirements. The effective date and version shown on this page identify the current public version.

This notice is intended to operate consistently with applicable data-protection law, including the Tanzania Personal Data Protection Act where applicable. It should be read together with the Website Terms.