Privacy Policy

1. Statutory Scope & Legal Compliance

Aurum East Africa Precious Metals Limited operates in compliance with the Kenya Data Protection Act, 2019, the General Data Protection Regulation (GDPR) for international institutional counterparties, and statutory data retention mandates established under the Proceeds of Crime and Anti-Money Laundering Act (POCAMLA).

2. Information We Collect

To execute precious metals transactions, provide proforma price locks, and comply with sovereign mineral dealing regulations, we collect:

• Client Identification (KYC): Full legal name, nationality, national ID/passport copy, tax identification number (KRA PIN or sovereign equivalent), and residential utility bill or bank statement (< 90 days).
• Corporate Documentation: Certificate of Incorporation, CR12 beneficial ownership registers, board resolutions, and audited financial declarations where required.
• Financial & Settlement Data: Corporate banking details, wire confirmation numbers, and proof of source of funds. We never store credit or debit card numbers.
• Transaction Communications: Quote inquiries, WhatsApp trade confirmations, and assay settlement certificates.

3. How Information Is Stored and Secured

Physical documents submitted at our Nairobi, Goma, or Juba bullion offices are maintained inside biometric-secured vaults with dual-custody access. All electronic KYC files and transactional records are encrypted using AES-256 bit encryption at rest and TLS 1.3 in transit. Access is strictly partitioned and restricted to certified compliance officers.

4. Mandatory Statutory Retention

Under POCAMLA Section 24 and international financial intelligence guidelines, all precious metal dealers are legally required to retain customer identification records and transaction logs for a minimum statutory period of seven (7) years following the conclusion of the business relationship. Records cannot be deleted prior to this period, even upon request.

5. Disclosure to Authorities

We do not sell, rent, or commercialize customer data under any circumstances. Information is disclosed exclusively to:

• The Financial Reporting Centre (FRC) of Kenya and CENAREF (DRC) when required under statutory suspicious activity or large-cash threshold regulations.
• Customs and Mining Ministries for issuance of official mineral export permits and Kimberley/OECD transit certifications.
• Sovereign courts pursuant to a legally binding subpoena or court order.

6. Data Protection Officer Contact

For inquiries regarding personal data processing, rights under the Data Protection Act, or to update authorized contact credentials, contact our Data Protection Officer at privacy@aurumeastafrica.com or write to: Data Protection Office, Aurum East Africa Precious Metals Limited, 8th Floor, The Address, Muthangari Drive, Westlands, Nairobi, Kenya.