Privacy Notice for KYC Respondents
You are seeing this notice because a business asked you to complete an identity verification (KYC) form using KYC.me.co.bw. This notice explains, in plain terms, who handles your information and what your rights are.
1. Who is collecting my information?
The business whose campaign you are completing (named at the top of the form) is the data controller — they decide what information to collect and why.
KYC.me.co.bw, operated by Mobile Enterprises (Pty) Ltd t/a M.E Smart Communications, is the data processor — we provide the secure platform that collects, stores and transmits your information to that business on their instructions.
2. What information is collected?
- Your mobile number, verified by a one-time SMS code (OTP);
- identity details such as your name, date of birth, Omang or passport number;
- contact details and addresses;
- documents you upload — ID copies, proof of address, selfies and other attachments;
- your consent declaration and its timestamp;
- technical data such as your IP address and browser type, for security and fraud prevention.
3. Why is it collected and what is the legal basis?
The business collects your information to verify your identity — typically to comply with know-your-customer and anti-money-laundering obligations or to set up a service you requested. Their legal basis is shown in their own privacy notice; in most cases it is your consent (given by the consent checkbox on the form) and/or a legal obligation.
4. Who sees my information?
- The business whose campaign you completed (they can view and export it);
- KYC.me.co.bw platform staff, only under strict access controls and confidentiality, for operating and securing the service;
- Our SMS gateway (to deliver your OTP), hosting providers, and email services — all under contract;
- Regulators or law enforcement, only where the law requires it.
We never sell your information.
5. How long is it kept?
Your information is kept while the business’s account is active and deleted within 30 days after their account ends, unless the business is legally required to keep it longer (for example, financial sector rules commonly require 5 years) — in which case retention is the business’s responsibility. See our Data Retention Policy for detail.
6. Is my information safe?
Yes — the platform uses encrypted connections (HTTPS), hashed password and OTP storage, role-based access controls, audit logging and rate limiting. Details are in our Security Policy.
7. What are my rights?
Under the Botswana Data Protection Act, 2024 you can:
- ask for a copy of your information, and have it corrected or deleted;
- object to or restrict processing, and withdraw your consent at any time;
- complain to the Information and Data Protection Commission (IDPC) of Botswana.
Because the business is the data controller, the fastest route is to contact them directly. You may also email [email protected] and we will pass your request to the right business and help them respond.
8. Automated decisions
No decision about you is made solely by software on this platform. A person at the business reviews your submission.
9. Questions
Platform data protection contact: [email protected]. For the full picture of how the platform handles data, see our Privacy Policy.