Privacy Policy

Overview

Africore Technologies Ltd. ("Africore", "we", "us") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share information when you interact with our website, protocol, or any Africore service.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the EU GDPR where applicable, and other applicable data protection laws. Africore Technologies Ltd. is the data controller for personal data collected through our services.

Data We Collect

We collect the following categories of personal data:

We do not collect special category data (such as biometric data or health information) except where strictly required for identity verification under applicable AML regulations.

How We Use Your Data

We use your personal data for the following purposes and legal bases:

• Service Delivery (Contractual Necessity): Processing token purchases, node sales, KYC verification, and account management.
• Legal Compliance (Legal Obligation): AML/CFT screening, sanctions checking, regulatory reporting, and record-keeping requirements.
• Security (Legitimate Interests): Fraud prevention, abuse detection, and protecting the integrity of the Protocol.
• Communications (Consent / Legitimate Interests): Sending service updates, security alerts, and — where you have opted in — marketing communications.
• Analytics (Legitimate Interests): Improving our platform, understanding usage patterns, and optimising user experience.
• Dispute Resolution (Legitimate Interests / Legal Obligation): Managing legal claims, enforcing our Terms, and cooperating with law enforcement where required.

Data Sharing & Third Parties

We share your data only with trusted parties who have a legitimate need to access it:

• KYC/AML Providers: Identity verification services for regulatory compliance (e.g., Sumsub, Jumio).
• Cloud Infrastructure: Secure hosting and storage providers (data processed in EU/UK data centres).
• Legal & Compliance Partners: Lawyers, auditors, and regulatory advisors where required.
• Law Enforcement: Where we are legally required to disclose information by court order, subpoena, or applicable law.
• Business Transfers: In the event of a merger, acquisition, or asset sale, your data may be transferred. You will be notified in advance.

All third-party data processors are bound by data processing agreements compliant with GDPR requirements. We do not allow third parties to use your data for their own marketing purposes.

Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and regulatory requirements:

• KYC/Identity Data: Minimum 5 years from the end of the business relationship, as required by AML regulations.
• Transaction Records: Minimum 7 years for financial record-keeping compliance.
• Account Data: Duration of account plus 2 years following closure.
• Marketing Preferences: Until you withdraw consent.
• Technical/Log Data: Up to 12 months.

When data is no longer required, we securely delete or anonymise it in accordance with our data destruction policy.

Your Rights

Under GDPR and applicable data protection law, you have the following rights:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your data (subject to legal retention obligations).
• Right to Restriction: Request that we limit processing of your data in certain circumstances.
• Right to Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests, including direct marketing.
• Rights related to Automated Decision-Making: Not be subject to solely automated decisions that significantly affect you.

To exercise any of these rights, contact us at privacy@africore.io. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

Cookies & Tracking

We use cookies and similar tracking technologies to improve your experience on our website. Cookies are small text files stored on your device.

• Essential Cookies: Required for the website to function. Cannot be disabled.
• Analytics Cookies: Help us understand how visitors use our site (e.g., page views, session duration). These can be disabled.
• Preference Cookies: Remember your settings and preferences across sessions.

We do not use advertising or tracking cookies for third-party marketing purposes. You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect website functionality.

Blockchain & On-Chain Data

Please be aware that blockchain technology is inherently public and immutable. When you interact with the Africore Protocol on-chain, certain data — including your wallet address, transaction amounts, and timestamps — is recorded permanently on the blockchain and cannot be deleted or modified.

Wallet addresses, while pseudonymous, may be linkable to your identity through KYC records held by Africore. We treat wallet addresses associated with KYC-verified users as personal data subject to this Privacy Policy.

Children's Privacy

Africore's services are not directed at or intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us immediately at privacy@africore.io and we will take steps to delete such data promptly.

Contact & Data Protection Officer

For all privacy-related enquiries, data subject requests, or concerns, contact our Data Protection function:

Africore Technologies Ltd.
Data Protection
Email: privacy@africore.io
Response time: within 30 days

To exercise your rights or file a complaint, you may also contact your national data protection authority. For UK residents, this is the Information Commissioner's Office (ICO) at ico.org.uk.