Privacy policy

What personal data we collect, why, who we share it with, and your rights under Kenyan law.

Last updated: 20 October 2026

This version is awaiting legal review.

1. Who is responsible for your data

AfriMineX Ltd, of 8th Floor, Embankment Plaza, Longonot Road, Upperhill, P.O. Box 38883 - 00100, Nairobi, Kenya, is the data controller for the personal data we process on AfriMineX, under Kenya’s Data Protection Act, 2019.

To ask about your data or to use your rights, email us at info@afriminex.com.

2. What we collect

We collect the information you give us and some details about how you use the platform:

  • Your details: name, email address, phone number and physical address.
  • Licences and permits: your mining permit number and the county that issued it, and mineral dealer or facility licence numbers.
  • Identity checks: national ID or passport number, nationality, proof of address and the other documents we need to confirm who you are.
  • Payment details: your M-Pesa number and the name Safaricom holds for it, bank account details, and the amounts and history of your transactions.
  • Next of kin: where your account type asks for it.
  • Account details: your username, your password (which we never store in readable form) and your security settings.
  • Technical details: your IP address, approximate location and device when you sign in, check a document or request a registry number.

3. How we use it

We use your information to:

  • run your account and your transactions
  • pay you, and keep the ledger of what you are owed
  • confirm who you are and meet our anti-money-laundering duties
  • send you notices about your account and transactions
  • answer your questions and support requests
  • improve the platform
  • meet our legal and regulatory duties

4. Who we share it with

We do not sell your personal data. We share it only with:

  • The State Department for Mining: licence applications, batch records, assay certificates, warrants, export applications and permits. These name the owner and the group the gold came from.
  • Safaricom: your M-Pesa number, to check the name registered to it and to pay you.
  • Banks and payment providers: to process payments.
  • Companies that run parts of the service for us: such as our hosting and database providers, Microsoft (email) and Meta (WhatsApp codes).
  • Anyone holding a document's number or QR code: the public verification page shows the document's owner of record and, for a licence, the holder's name.
  • Courts, the police and other authorities: when the law requires it, or to protect our rights.
  • A buyer of our business: if the business is sold or merged.

5. Keeping your data secure

We protect your information with:

  • encryption (TLS) for everything sent to and from the platform
  • encrypted storage of sensitive information
  • two-step sign-in, which you can turn on in your account settings
  • access controls and monitoring
  • regular backups and a plan for recovering from a disaster

6. How long we keep it

We keep your information:

  • while your account is open
  • for as long as Kenyan law requires us to keep records, including financial records
  • for as long as we need it to resolve disputes and enforce our agreements

7. Your rights

Under the Data Protection Act, 2019 you can ask us how we use your data, see it, correct it, object to its use, have it deleted where the law allows, and receive a copy in a common format. Where we rely on your consent, you can withdraw it.

If you are not satisfied with our answer, you can complain to the Office of the Data Protection Commissioner.

8. Cookies

We use cookies and similar technology to:

  • keep you signed in
  • remember your settings, such as your language
  • understand how the site is used
  • improve the site

You can control cookies in your browser settings. If you turn them off, some parts of the site will not work, including signing in.

9. Next of kin

Where your account type asks for next of kin details, those details:

  • are used only in an emergency or where the law requires it
  • are never used for marketing
  • can be updated at any time in your account settings

10. Data stored outside Kenya

Some of our service providers store or process data outside Kenya. When they do, we transfer it only as the Data Protection Act, 2019 allows.

11. Children

AfriMineX is not for anyone under 18. We do not knowingly collect data about children. If you think we have, please tell us straight away.

12. Changes to this policy

We may update this policy. We will tell you about important changes by email and in your notifications. The date at the top shows when it last changed.

13. Contact us

To ask about this policy or to use your rights, contact us: