Privacy Notice

Introduction

We use this privacy notice to disclose the privacy practices of Diamond Trading Company Botswana (DTCB) in accordance with privacy regulations such as the Data Protection Act, 2024 and DTCB’s Data Protection and Privacy Policy.

Please read the following privacy notice to understand the processing, sharing, protection, and your rights associated with your personal data.

We aim to help you understand what personal data we collect and how we use it.
This notice applies solely to data we collect about you and will define the following:

  1. What personal data is collected.
  2. How personal data is collected, used, shared and stored.
  3. The security procedures implemented to protect your data.
  4. Your choices and rights regarding the use of your data.
  5. How you can contact us for issues such as to correct inaccuracies of your data or to request the removal of your personal data.
Who We Are

DTCB’s mission in line with the Data Protection Act is to process data in a manner that promotes the privacy of individuals. To do so we may process personal data that you provide to support various business processes.

For the purposes of this notice, we act as a “Data Controller” determining how your personal data is processed.

We have appointed a Data Protection Officer being Mr. Robert Boakgomo. For details on how to contact us, see the Contact Information section at the end of this notice.

Data We Collect

We have access to data that you voluntarily provide via email, telephone, forms, user registration, and other methods.

Through these means, we collect the following types of data:

Share Holder Information

Supplier Portal Contact Person

Supplier Portal KYC Documents

Supplier Account confirmation

How We Use Your Data

Your personal data may be used for the following purposes:

Legal Basis of Processing

We process personal data for purposes of legitimate interest, granted that those interests do not override any of our users own interests, rights, and freedoms. This legitimate interest includes but is not limited to processing for statistical and business development purposes.

We also process personal data for other purposes with consent, but you have the right to withdraw consent to processing for specific purposes.

Specific Data Use

Personal data may be used without knowledge or consent in situations when legally required or permitted, or when personal data has been anonymized or pseudonymized, so it is no longer associated with the user. This means we have removed personally identifying information so the data we’re left with cannot be tied back to you as an individual.

How We Share Your Data

Personal data may be shared with regulators in compliance with legal regulations.

Personal data may also be shared with third parties when it is necessary to provide services to users and for other legitimate interests. Third parties include service providers, professional advisors, and other members of DTCB’s network. Third parties that may access personal data are fulfilling the services of web hosting and IT cloud services. These parties do not retain, share, or use personal data beyond the defined purpose of fulfilling their service.

If the need arises, we will share only aggregated demographic data with our partners. This data is not linked to the identity of any individual user.

How Long We Store Your Data

We will only retain personal data for the duration necessary to fulfill the purposes for which it was collected. Personal data may also be retained for longer periods if it is solely for archiving purposes in the public interest, scientific or historical research purposes and statistical purposes.

How We Protect Your Data

Securing your data is a priority for us both online and offline. We have implemented appropriate safeguards to prevent personal data from being lost, misused, accessed, altered, or disclosed by unauthorized parties.

Secure web access can be verified by the lock icon in your internet browser address bar and using “https” at the beginning of the web address, where the “s” indicates a secure connection.

Employees and third parties are provided only with personal data on a need-to-know basis and only the minimum (data minimization) amount they require to complete their specific job. All employees are also subject to confidentiality agreements and undergo training on the proper handling of personal and sensitive data.

Procedures have been developed to handle a potential data breach. These procedures are designed to ensure affected individuals and regulators are notified of the breach and damages can be minimized.

Your Rights Regarding Your Personal Data

We aim to maintain data that is accurate. Under the circumstance that your personal data changes, Data Subjects have the right to request for rectification of their data.

In certain instances, you have the legal right to the following:

To exercise these rights, please contact us via the email provided below in the “Contact Information” section.

Contact Information

For any questions, concerns, or requests to exercise your rights outlined in this privacy notice, please contact us via email at: dpo@dtcb.co.bw.