Legal
How we collect, use, protect, and share personal data, and the rights available to you.
Last updated: [effective date]
This Privacy Policy explains how Bullion Metallics International Group (Private) Limited (“BMIG”, “we”, “us”, or “our”) collects, uses, and safeguards personal data when you visit this website, contact us, or engage with our services. We are committed to handling personal data responsibly and in accordance with applicable data protection law.
The data controller is Bullion Metallics International Group (Private) Limited, a company incorporated in Zimbabwe (registration number [company reg. no.]), with its registered office at [registered office address]. For any privacy matter, contact us at [privacy contact email].
When you contact us by email, telephone, or messaging, or submit an enquiry, we collect the information you choose to provide, such as your name, company, email address, telephone number, and the contents of your message. Where you engage with us commercially, we may collect additional information required for onboarding, due diligence, and compliance (for example, KYC/KYB documentation).
When you visit the website, our servers and hosting infrastructure may automatically record limited technical information, including your IP address, browser type, device information, referring pages, and timestamps, together with strictly-necessary cookies. See our Cookie Policy for details.
Where applicable data protection law requires a legal basis, we rely on one or more of the following: your consent; the performance of a contract or steps taken at your request prior to entering a contract; compliance with a legal or regulatory obligation; and our legitimate interests in operating and growing our business, provided these are not overridden by your rights.
We may share personal data with:
We do not sell your personal data.
We operate across Zimbabwe and internationally, and some recipients may be located in other countries. Where personal data is transferred across borders, we take steps to ensure an appropriate level of protection consistent with applicable law.
We retain personal data only for as long as necessary for the purposes described in this policy, or as required to meet legal, regulatory, tax, accounting, or compliance obligations. Indicative retention periods are [retention periods to confirm].
Subject to applicable law, you may have the right to access the personal data we hold about you, to request its correction or deletion, to object to or restrict certain processing, to withdraw consent, and to data portability. To exercise any of these rights, contact us using the details in section 1. You may also have the right to lodge a complaint with the relevant supervisory authority.
We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, or alteration. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
This website may contain links to third-party websites and services. We are not responsible for the privacy practices of those third parties, and we encourage you to review their policies.
This website and our services are intended for businesses and professional counterparties, and are not directed at children. We do not knowingly collect personal data from children.
We may update this Privacy Policy from time to time. The current version is indicated by the “Last updated” date above, and changes take effect when published on this page.
For any questions about this policy or how we handle personal data, please contact us at [privacy contact email] or via our Contact page.