Privacy Policy

This Privacy Policy describes how UbiaConnect, operated by Top Notch Company Limited ("UbiaConnect", "we", "us"), collects, uses, stores, and protects personal data in connection with the platform and related services.

1. Information We Collect

We collect the following categories of personal data:

1. Identity data — full name, date of birth, nationality, government-issued identification.
2. Contact data — email address, phone number, physical address.
3. Financial data — income information, source of funds declarations, payment records.
4. KYC and compliance data — identity verification results, PEP screening, sanctions check records.
5. Platform usage data — login records, device information, browser type, IP address, page interactions.
6. Communications — messages sent via the platform, support requests, deal room activity.

2. How We Use Your Information

We process personal data for the following lawful purposes:

• Verifying identity and completing know-your-customer and anti-money laundering obligations.
• Facilitating investment discovery, campaign participation, and payment processing.
• Complying with regulatory reporting, record retention, and audit requirements.
• Detecting and preventing fraud, suspicious activity, and platform misuse.
• Communicating with users about account status, transactions, and platform developments.
• Improving platform features, performance, and user experience.

3. Data Sharing

Personal data is shared only where necessary and with appropriate safeguards:

• Regulated partners — KYC and identity verification providers, payment processors, custodians.
• Compliance authorities — regulators, law enforcement, and tax authorities where disclosure is legally required.
• Professional advisers — legal counsel, auditors, and compliance consultants acting on our behalf.

We do not sell personal data to third parties for marketing purposes.

4. Data Retention

We retain personal data for the duration of the user's account and for a minimum of seven (7) years after account closure to satisfy regulatory and audit obligations.

5. Your Rights

Subject to applicable Tanzanian law, you may have the right to access, correct, or request deletion of your personal data. Requests can be submitted to our compliance team. We will respond within 30 days.

6. Security

We implement industry-standard technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure.

7. Governing Law

This Privacy Policy is governed by the laws of the United Republic of Tanzania.