Effective Date: 1 February 2026
This Privacy Policy explains how SUDAN GOLD collects, uses, stores, and protects personal and business information in the course of our operations as a direct mineral export company. We operate strictly in business-to-business (B2B) commodity trade serving licensed miners, refiners, international buyers, logistics partners, and regulatory authorities. We do not provide consumer services, nor do we collect data for marketing or profiling purposes.
1. Introduction and Purpose
SUDAN GOLD handles personal and corporate information only as necessary to execute physical mineral transactions, comply with legal obligations, and maintain operational integrity across Sudan, South Sudan, Ghana, South Africa, and the United Kingdom. This policy describes what data we collect, why we need it, how we protect it, and your rights regarding its use.
SUDAN GOLD handles personal and corporate information only as necessary to execute physical mineral transactions, comply with legal obligations, and maintain operational integrity across Sudan, South Sudan, Ghana, South Africa, and the United Kingdom. This policy describes what data we collect, why we need it, how we protect it, and your rights regarding its use.
2. Information We Collect
We collect only information relevant to mineral trade and compliance, including:
We collect only information relevant to mineral trade and compliance, including:
- Full name, job title, business address, email, and phone number
- Corporate registration documents and business licenses
- Government-issued identification (where required by law for verification)
- Mining or export permits issued by national authorities
- Transaction records: weights, assay reports, payment details, shipment logs
- Email and phone correspondence related to transactions
- Website inquiry submissions via goldsudan.com
We do not collect sensitive personal data unless legally mandated for due diligence or anti-money laundering checks.
3. How Information Is Collected
Data is collected directly from you during:
Data is collected directly from you during:
- On-site verification visits at mine sites or weigh stations
- Document submission for licensing or transaction processing
- Email or phone communication regarding shipments or compliance
- Website contact form submissions
- Regulatory or customs documentation processes
We do not purchase data from third parties or use automated tracking beyond basic website analytics.
4. Purpose of Data Use
We use your information solely to:
We use your information solely to:
- Verify identity and legal authority to sell or buy minerals
- Execute purchase, export, and delivery of gold and other minerals
- Prepare and submit export permits, customs declarations, and shipping documents
- Comply with anti-money laundering, sanctions, and tax regulations
- Communicate about transaction status, documentation, or logistics
- Maintain accurate records for audit and legal retention requirements
We do not use your data for advertising, profiling, or unrelated commercial purposes.
5. Legal Basis for Processing
Our processing is based on:
Our processing is based on:
- Contractual necessity (to fulfill a purchase or export agreement)
- Legal obligation (compliance with mining, export, tax, or anti-corruption laws)
- Legitimate interest (ensuring secure, traceable, and compliant trade operations)
In all cases, data use is limited to what is necessary and proportionate.
6. Data Sharing and Disclosures
We share information only when required for transaction execution or legal compliance, including with:
We share information only when required for transaction execution or legal compliance, including with:
- National regulators (e.g., Minerals Commission of Ghana, Ministry of Mining South Sudan)
- Customs and border authorities in origin and destination countries
- Licensed banks and payment processors for settlement
- Verified logistics and transport partners for shipment coordination
- Accredited assay laboratories for purity verification
We do not sell, rent, or commercially exploit your data. All recipients are bound by confidentiality or legal duty.
7. International Data Transfers
Due to our operational presence across Africa and the UK, your data may be transferred between Sudan, South Sudan, Ghana, South Africa, and the United Kingdom. Such transfers occur only where necessary for transaction execution or compliance. We apply reasonable safeguards—including encryption, access controls, and contractual confidentiality—to protect data during transfer and storage.
Due to our operational presence across Africa and the UK, your data may be transferred between Sudan, South Sudan, Ghana, South Africa, and the United Kingdom. Such transfers occur only where necessary for transaction execution or compliance. We apply reasonable safeguards—including encryption, access controls, and contractual confidentiality—to protect data during transfer and storage.
8. Data Retention Periods
We retain records for the minimum period required by law and operational necessity:
We retain records for the minimum period required by law and operational necessity:
- Transaction and export records: 7 years (for tax, audit, and trade compliance)
- Licensing and due diligence documents: 5 years after last transaction
- Website inquiries with no follow-up: deleted after 12 months
Records may be retained longer if required by ongoing legal proceedings or regulatory investigations.
9. Data Security Measures
We implement reasonable technical and organizational measures to protect data, including:
We implement reasonable technical and organizational measures to protect data, including:
- Password-protected digital files with role-based access
- Physical logbooks stored in locked facilities at field offices
- Encrypted email for sensitive document exchange
- Regular staff training on data handling and confidentiality
While we cannot guarantee absolute security—especially in remote field environments—we treat all information with professional care and accountability.
10. Confidentiality Obligations
All SUDAN GOLD staff and contractors sign confidentiality agreements. Access to data is granted only to personnel directly involved in transaction execution or compliance. Breaches of confidentiality are treated as serious disciplinary matters.
All SUDAN GOLD staff and contractors sign confidentiality agreements. Access to data is granted only to personnel directly involved in transaction execution or compliance. Breaches of confidentiality are treated as serious disciplinary matters.
11. Rights of Data Subjects
Depending on your jurisdiction, you may have the right to:
Depending on your jurisdiction, you may have the right to:
- Request access to the data we hold about you
- Correct inaccurate or incomplete information
- Request deletion where no legal retention obligation exists
- Object to processing based on legitimate interest
To exercise these rights, contact us at sales@goldsudan.com. We will respond within 30 days. Note: Some requests may be limited by legal or trade compliance obligations.
12. Regulatory and Compliance Disclosures
We comply with applicable data protection principles in all jurisdictions where we operate. In the UK and EU, we align with core GDPR expectations as a data controller acting in legitimate commercial interest. In African jurisdictions, we follow national data handling guidelines and mining sector regulations. We do not claim full GDPR certification but apply its principles where practical and relevant.
We comply with applicable data protection principles in all jurisdictions where we operate. In the UK and EU, we align with core GDPR expectations as a data controller acting in legitimate commercial interest. In African jurisdictions, we follow national data handling guidelines and mining sector regulations. We do not claim full GDPR certification but apply its principles where practical and relevant.
13. Cookies and Website Usage
Our website (goldsudan.com) uses minimal cookies to:
Our website (goldsudan.com) uses minimal cookies to:
- Remember form inputs during inquiry submission
- Analyze basic traffic patterns (via anonymized Google Analytics)
No cookies are used for tracking, advertising, or profiling. You may disable cookies in your browser without affecting core functionality.
14. Third Party Websites and Services
Our website may link to government portals (e.g., Minerals Commission sites) or logistics partners. We are not responsible for the privacy practices of these external sites. Review their policies separately.
Our website may link to government portals (e.g., Minerals Commission sites) or logistics partners. We are not responsible for the privacy practices of these external sites. Review their policies separately.
15. Children’s Data
We do not knowingly collect data from individuals under 18. Our operations involve only licensed adult professionals in the mining and trading sector.
We do not knowingly collect data from individuals under 18. Our operations involve only licensed adult professionals in the mining and trading sector.
16. Changes to This Privacy Policy
We may update this policy to reflect changes in operations or legal requirements. The revised version will be posted on goldsudan.com with an updated effective date. Continued engagement constitutes acceptance.
We may update this policy to reflect changes in operations or legal requirements. The revised version will be posted on goldsudan.com with an updated effective date. Continued engagement constitutes acceptance.