Last updated: March 2025
ISH Metal Trading ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or engage with our services. Please read this policy carefully.
1. Information We Collect
We may collect information about you in the following ways:
- Information you provide directly: When you contact us through our website contact form, by email, or by phone, we collect the personal details you share — such as your name, email address, phone number, company name, and the content of your message.
- Automatically collected information: When you visit our website, we may collect certain technical information automatically, including your IP address, browser type, operating system, referring URLs, and pages visited. This information is used for analytics and to improve our website.
- Business relationship information: In the course of conducting business, we may collect additional information required for due diligence, compliance, and transaction processing — including identification documents, company registration details, and financial information as required by law.
2. How We Use Your Information
We use the information we collect for the following purposes:
- To respond to your enquiries and provide the services you have requested
- To conduct Know Your Customer (KYC) and Anti-Money Laundering (AML) due diligence as required by Ugandan law and international best practices
- To process and manage business transactions
- To communicate with you about our services, updates, and relevant industry information
- To improve our website and services
- To comply with our legal and regulatory obligations
- To protect the rights, property, and safety of ISH Metal Trading, our clients, and the public
3. Legal Basis for Processing
We process your personal information on the following legal bases:
- Contract: Where processing is necessary to perform a contract with you or to take steps prior to entering into a contract at your request.
- Legal obligation: Where we are required to process your data to comply with a legal obligation, including AML and KYC regulations applicable to precious metals trading in Uganda and internationally.
- Legitimate interests: Where processing is in our legitimate interests and not overridden by your rights — for example, responding to business enquiries and improving our services.
- Consent: Where you have given explicit consent to processing for a specific purpose.
4. Sharing of Information
We do not sell, trade, or rent your personal information to third parties. We may share your information in the following limited circumstances:
- Service providers: We may share information with trusted third-party service providers who assist us in operating our business — such as logistics partners, legal counsel, and financial institutions — subject to confidentiality obligations.
- Regulatory and legal requirements: We may disclose your information to government authorities, law enforcement agencies, or regulatory bodies where required by law, including requirements under Uganda's Anti-Money Laundering Act and international precious metals trading regulations.
- Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
- With your consent: We may share your information in other ways with your explicit consent.
5. International Data Transfers
As a company operating in the international gold trade, we may transfer your information to recipients in other countries — including countries in the Middle East and Europe — in connection with business transactions. We take appropriate steps to ensure that any such transfers comply with applicable data protection laws and that adequate protections are in place.
6. Data Retention
We retain your personal information for as long as is necessary for the purposes for which it was collected, including to satisfy any legal, regulatory, accounting, or reporting requirements. For AML and KYC records, we are required to retain certain information for a minimum of five (5) years following the end of a business relationship, in accordance with applicable Ugandan law.
7. Security
We implement appropriate technical and organisational measures to protect your personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. While we take reasonable precautions, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
8. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal information:
- The right to access the personal information we hold about you
- The right to request correction of inaccurate or incomplete information
- The right to request deletion of your personal information (subject to legal retention requirements)
- The right to object to or restrict certain processing of your information
- The right to data portability in certain circumstances
- The right to withdraw consent where processing is based on consent
To exercise any of these rights, please contact us at info@ishmetaltrading.com. We will respond to your request within a reasonable timeframe and in accordance with applicable law.
9. Cookies
Our website may use cookies and similar tracking technologies to enhance your browsing experience and collect information about how you use our site. You can control cookie settings through your browser preferences. Note that disabling certain cookies may affect the functionality of our website.
10. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before providing any personal information.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will post the updated policy on this page with a revised "last updated" date. We encourage you to review this page periodically.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: