This Privacy Policy explains how SokoDolla Limited (Company Registration No. PVT-EY13YB27), a company registered in the Republic of Kenya, collects, uses and protects your information. SokoDolla Limited is the data controller responsible for your personal data. You can contact us using the details below.
Business Details
Operating across Zambia, the DR Congo, Tanzania and South Africa
600 off Twin Palm Road
Ibex Hill, Lusaka, Zambia
Block 2, Riverside Drive
Westlands, Nairobi, Kenya
P.O. Box 6465, 00100 – G.P.O Nairobi
Peninsula Noble Center
Oysterbay, Dar es Salaam, Tanzania
1. Information We Collect
Information You Provide:
- Contact details you submit (name, email address, phone number, company name and country)
- The details of any copper sourcing request, RFQ or due-diligence enquiry you send us
- Any documents or information you choose to share with us by email or through our forms
- The content of your messages when you contact us
Information Collected Automatically:
- IP address and approximate location
- Device information and browser type
- Usage patterns and session data
- Cookies and similar tracking technologies
Third-Party Data:
- Supplier data aggregated from public sources via APIs (search engines, business registries)
- Publicly available business and registry information used in supplier verification
2. How We Use Your Information
- To review, process, and facilitate your copper and mineral sourcing RFQ submissions
- To conduct manual supplier verification and due diligence through official government registries (such as the Zambia Mining Cadastre and DRC CAMI) and physical inspection protocols
- To coordinate logistics, independent laboratory assays (SGS / Alfred H Knight / Bureau Veritas), and contract reviews with qualified professionals
- To communicate directly with you regarding your enquiry, quotations, and engagement milestones
- For security, fraud prevention, and service improvement
- To comply with applicable legal obligations and protect our contractual rights
Strict No-AI Supplier Search & No AI Training Guarantee
SokoDolla relies entirely on human expertise, direct producer relationships, regulatory registry checks, and physical on-site verifications. We do not use AI algorithms or bots to search for, match, or evaluate suppliers. Furthermore, we never use your personal data, company information, RFQ specifications, or uploaded documents to train AI models.
3. Legal Basis for Processing (GDPR)
Legitimate Interest
Responding to business enquiries, assessing trade parameters, and fraud prevention
Contractual Necessity
Fulfilling agreed supply, verification and procurement services
Consent
Direct communications and non-essential cookie preferences where applicable
Legal Obligation
Compliance with applicable company, tax, and anti-money laundering regulations
4. Your Rights & Choices
ACookies & Tracking
BDirect Communications
We communicate only regarding active enquiries and legitimate procurement matters:
- Direct responses to your RFQs and due diligence enquiries
- Transactional updates and documentation coordination
- You may request cessation of communications at any time by emailing support@sokodolla.com
CNo Data Sharing with AI Parties
We maintain strict data isolation. Your submitted corporate profile, transaction parameters, Letters of Intent (LOI), Company Information Sheets (CIS), and assay documents are never shared with, processed by, or fed into third-party AI platforms or machine learning models.
DData Access, Rectification & Deletion
Under GDPR, CCPA, and Kenyan Data Protection regulations, you have the right to:
- Access the personal and business data we hold about you
- Request correction of inaccurate or incomplete records
- Request complete deletion of your data (“right to be forgotten”)
- Request data portability in a standard structured format
- Object to or restrict specific processing activities
To exercise any of these data rights, please contact us directly at: privacy@sokodolla.com
5. Data Sharing & Third Parties
We strictly restrict data sharing to verified operational service providers necessary for delivering our services:
Secure Cloud Hosting & Database
Supabase & Vercel (encrypted in transit and at rest)
Independent Inspection & Testing
SGS, Alfred H Knight, Bureau Veritas (upon client engagement)
Legal & Banking Partners
Licensed counsel and tier-1 banks (for SPA & LC execution)
Web Analytics
Google Analytics (anonymous, aggregate traffic data only)
6. Data Security
We implement industry-standard security measures to protect your data:
- Encryption in transit (TLS 1.3) and at rest (AES-256)
- Regular security audits and penetration testing
- Access controls and authentication requirements
- Secure development practices and code review
While we implement robust security measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
7. Children's Privacy
Sokodolla is a business-to-business platform not intended for use by individuals under 16 years of age. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 16, we will delete that information promptly.
8. International Data Transfers
Your data may be transferred to and processed in countries outside your jurisdiction. When we transfer data internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by relevant data protection authorities.
9. Data Retention
- Enquiries and RFQ submissions: retained for up to 24 months from your last contact with us, then deleted
- Documents you upload (LOI, CIS or similar): stored in a private, access-controlled location and deleted within 12 months of the closure of the related enquiry, or sooner on request
- Engagement and accounting records: retained for the period required by Kenyan tax and company law
- You may request earlier deletion at any time by writing to support@sokodolla.com
10. Cookies & Analytics
We use a small number of cookies and third-party tools to operate the Website and understand how it is used:
- Essential cookies — required for the Website to function
- Google Tag Manager and Google Analytics — anonymous, aggregated statistics on visits and page views
- Google Translate — optional page translation, loaded only if you use it
- Supabase — our hosting and database provider, used to receive and store enquiry submissions
We do not sell your data, and we do not share it with data brokers or advertising networks for their own purposes. You can block or delete cookies in your browser settings at any time.
11. We Do Not Collect Payment Information
This Website has no online shop, checkout or payment page. We never ask for card numbers, bank credentials, one-time passcodes or wallet details through this Website or by email. Where a service is engaged, we issue a formal invoice from SokoDolla Limited and payment is made by bank transfer to an account in the company’s name. If you receive any message appearing to come from SokoDolla that requests payment details or payment to an individual, please do not act on it and report it to support@sokodolla.com.
12. No Digital Asset or Wallet Data
SokoDolla.com does not request, store or process cryptocurrency private keys, wallet credentials, seed phrases or digital-asset holdings of any kind. We operate no exchange, wallet or digital-asset service. Where our content refers to digital or irreversible payment methods, it does so only to advise buyers against using them with unverified sellers.
13. Local Storage & Website Technology
For full transparency about what runs in your browser:
- Local browser storage is used only to remember your cookie preferences between visits. It stores no personal or business data
- On-screen notifications (form confirmations and alerts) are rendered locally in your browser and transmit nothing
- Google Translate loads only if you choose to translate a page; translations are generated by Google and may contain inaccuracies
- We install no software on your device, request no browser permissions, and serve no downloadable applications
- All form submissions and API traffic are encrypted in transit using HTTPS/TLS
14. Verifying Communications From Us
Our only official website is sokodolla.com and our only official email domain is @sokodolla.com. Our verified social media profiles are linked in the footer of this Website. We are registered in Kenya as SokoDolla Limited, Company Registration No. PVT-EY13YB27, and our incorporation certificate is available to clients and counterparties on request. If you receive a message claiming to be from SokoDolla from any other domain, or requesting payment to an individual, please report it to support@sokodolla.com.
15. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a prominent notice on our Platform. Your continued use of Sokodolla after changes become effective constitutes acceptance of the revised policy.
Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights:
Email us: info@sokodolla.com
Data Protection Officer: info@sokodolla.com
