Legal

Privacy Policy

How MineTrack collects, uses, protects and shares personal and organisational data across the national mining compliance platform.

Overview

MineTrack is a national digital infrastructure platform operated on behalf of the responsible government ministry for the registration, verification, payroll assurance, production tracking and revenue assurance of the mining sector.

This Privacy Policy explains what personal and organisational data MineTrack collects, how it is used, who it is shared with, and the rights you have over your information. By using MineTrack, you consent to the practices described in this policy.

Data We Collect

MineTrack collects the following categories of data to deliver its regulatory functions:

  • Identity data: full name, national identification number, passport number, date of birth, gender and photograph.
  • Contact data: phone number, email address and physical address.
  • Employment data: job title, department, mine assignment, contract status and salary band.
  • Financial data: bank name, bank account number and branch code for payroll verification.
  • Operational data: attendance records, production declarations, royalty and tax payments, inspection reports and compliance notices.
  • Organisational data: company registration, mining licence details, directors, beneficial owners and politically exposed person declarations.
  • Audit data: immutable logs of every action taken within the platform, including the user, time, device and location.

Worker Data Handling

Worker personal data is collected for the sole purpose of verifying identity, confirming payroll eligibility and protecting against ghost workers and payroll fraud. MineTrack applies the principle of data minimisation: only data necessary for these regulatory functions is collected.

Worker data is never sold or used for commercial marketing. Access to individual worker records is restricted to authorised senior personnel within the responsible mine and to government auditors with a legitimate regulatory purpose.

Whistleblower Protection

MineTrack provides a secure whistleblowing channel for workers, inspectors and members of the public to report corruption, ghost workers, payroll fraud, royalty evasion and unsafe working conditions.

Whistleblower identities are protected by default. Reports may be submitted anonymously. Where contact details are provided, they are accessible only to the designated anti-corruption unit and are never disclosed to the mine, employer or any party that could retaliate. Retaliation concerns are tracked separately and trigger protective measures.

Data Retention

Personal and operational data is retained for the period required by national law and regulatory policy. Audit logs are immutable and retained indefinitely to preserve the integrity of investigations and compliance history.

When a mining licence expires or is revoked, associated operational data is retained for the statutory archival period and then archived or deleted in accordance with government records management policy.

Third Parties & Data Sharing

MineTrack shares data only with authorised parties and only for regulatory purposes:

  • Government ministries and regulatory agencies for compliance, audit and enforcement.
  • Bank verification partners for the sole purpose of confirming bank account ownership during onboarding.
  • Law enforcement and anti-corruption authorities where legally required or in support of an active investigation.
  • No data is shared with marketing partners, data brokers or any party for commercial benefit.

Your Rights

Depending on your role and applicable law, you may have the right to:

  • Request access to the personal data MineTrack holds about you.
  • Request correction of inaccurate personal data.
  • Object to certain processing of your data.
  • Withdraw consent for optional processing where applicable.
  • Lodge a complaint with the data protection authority if you believe your rights have been breached.

Data Security

MineTrack protects data with government-grade security controls including role-based access control, multi-tenant data isolation, encryption of sensitive data in transit and at rest, two-factor authentication on all portals, and immutable audit trails for every action.

Access to sensitive records is logged and monitored. Suspicious access patterns trigger senior risk alerts and are reviewed by the anti-corruption unit.

Cookies & Local Storage

MineTrack uses essential cookies and local storage to maintain authentication sessions and remember user preferences. No tracking cookies for advertising are used. You can control cookies through your browser settings, though disabling essential cookies may prevent you from signing in.

Children's Privacy

MineTrack is a regulatory platform for the mining sector and is not directed at children. No personal data of individuals under the minimum legal working age is knowingly collected. Mining companies are responsible for ensuring all registered workers meet the legal age of employment.

Changes to This Policy

This Privacy Policy may be updated to reflect changes in law, regulation or platform capabilities. Material changes will be communicated through the platform and, where appropriate, to registered users by email. The last updated date above indicates when this policy was last revised.

Contact About Privacy

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact our support team. See the Contact page for all available channels, including WhatsApp and live chat.