Privacy Policy

Protecting Your Data. Preserving Your Trust.

We are committed to safeguarding your privacy and ensuring the confidentiality of your personal information. This Privacy Policy explains how we collect, use, process, and protect your data when you interact with our services — whether through our website, client portal, or in person.

  1. Introduction

Vertex International Securities Limited (“Vertex,” “we,” “us,” or “our”) is committed to protecting the privacy and confidentiality of personal information collected from our clients, investors, and users of our online platforms, including our website, client portal, and electronic communication systems (collectively referred to as the “Platform”).

This Privacy Policy explains how we collect, use, process, store, and safeguard your personal data in compliance with the Personal Data Protection Act No. 11 of 2022, the Cybercrimes Act, 2015, the Electronic and Postal Communications Act (EPOCA), 2010, and applicable regulations issued by the Capital Markets and Securities Authority (CMSA) and the Bank of Tanzania (BoT).

Vertex International Securities Limited is registered as a Data Processor with the Personal Data Protection Commission (PDPC) of Tanzania in accordance with the Personal Data Protection Act No. 11 of 2022.

 

  1. About Vertex International Securities Limited

Vertex International Securities Ltd is a licensed Dealing Member of the Dar es Salaam Stock Exchange (DSE) and is regulated by the Capital Markets and Securities Authority (CMSA). We provide investment advisory, fund management, corporate finance, and securities trading services across Tanzania and beyond.

Regulatory Information

  • PDPC Registration Number: (To be confirmed)
  • Registered Office: Zambia Embassy Building, Ohio Street / Sokoine Drive, P.O. Box 13412, Dar es Salaam, Tanzania
  • Contact Information:
    • 📧 Email: vertex@vertex.co.tz
    • ☎️ Phone: +255 22 2116 382 / +255 743 033 223
    • 🌐 Website: www.vertex.co.tz

 

  1. Information We Collect

3.1 Personal Data

To provide financial and investment services, we may collect and process the following categories of personal data:

Registration Information:

  • Full name as per official identification
  • Email address and contact number
  • National Identification Number (NIDA) or passport details
  • Date of birth and nationality
  • Residential or business address

Financial and Investment Information:

  • Bank account details
  • Investment portfolio data and transaction history
  • Investment objectives, risk tolerance, and preferences
  • Income and financial status information

Technical and Usage Data:

  • Device details (model, operating system, browser type)
  • IP address and geolocation
  • Log data and usage patterns on our digital platforms

Where permitted by law, we may also collect personal information from third-party sources such as:

  • Credit bureaus and public registers (e.g., NIDA, TRA)
  • Regulatory authorities (CMSA, BoT)
  • Partner financial institutions and brokers

 

3.2 Sensitive Personal Data

We may process sensitive personal data, including:

  • Financial transaction records and investment data
  • Identification documents and biometric details (for KYC and security)

This data is collected only with your explicit consent and used strictly for lawful, regulatory, or service delivery purposes.

 

  1. How We Use Your Information

4.1 Primary Purposes

Service Provision:

  • Account setup and identity verification
  • Execution of trades and investment transactions
  • Fund management and portfolio reporting
  • Customer support and service communication

Regulatory Compliance:

  • Know Your Customer (KYC) and Anti-Money Laundering (AML) checks
  • Reporting to CMSA, BoT, TRA, and other authorities
  • Tax and legal compliance

Business Operations:

  • Risk management and fraud prevention
  • Service improvement and technology enhancement
  • Marketing communications (with prior consent)
  • Research and performance analytics

 

4.2 Legal Basis for Processing

We process personal data under one or more of the following lawful bases:

  • Consent: When you voluntarily provide information for a specific purpose.
  • Contractual Necessity: To deliver financial and investment services under your agreement with us.
  • Legal Obligation: To comply with CMSA, BoT, and PDPC regulations.
  • Legitimate Interest: To improve our services, manage risks, and maintain system security.

 

  1. Data Sharing and Disclosure

5.1 Authorized Disclosures

We may share your information with third parties under strict confidentiality agreements, including:

Regulatory Authorities:

  • Capital Markets and Securities Authority (CMSA)
  • Bank of Tanzania (BoT)
  • Tanzania Revenue Authority (TRA)
  • Financial Intelligence Unit (FIU)

Service Providers:

  • Dar es Salaam Stock Exchange (DSE)
  • Central Securities Depository (CSD)
  • Licensed brokers, custodians, and fund administrators
  • Payment processors and financial institutions
  • Technology and cybersecurity providers

Third Parties:

  • Legal, audit, and compliance advisors
  • Credit bureaus and verification agencies
  • Marketing and analytics partners (with consent)

Vertex does not sell or rent personal data to third parties for marketing purposes.

 

5.2 Legal Disclosures

We may disclose personal data without consent if required to:

  • Comply with legal or regulatory obligations
  • Prevent financial crimes such as money laundering or fraud
  • Protect public interest, national security, or enforceable court orders

 

  1. Data Security

6.1 Security Measures

We apply robust technical and organizational safeguards, including:

  • Encryption of data in transit and at rest
  • Multi-factor authentication and restricted access controls
  • Regular security audits and vulnerability assessments
  • Employee training on data privacy and cybersecurity

6.2 Data Breach Protocol

In the event of a data breach, Vertex will:

  1. Notify the PDPC within 72 hours.
  2. Inform affected clients promptly.
  3. Take immediate steps to contain and mitigate risks.
  4. Cooperate with regulatory bodies in investigations.

 

  1. Data Retention and Disposal
  • Account and transaction data: Retained for 7 years post-relationship.
  • KYC records: Retained for 5 years after account closure.
  • Marketing data: Retained until consent withdrawal.

All data is securely deleted or anonymized once retention periods expire unless required by law to keep longer.

 

  1. International Data Transfers

Vertex does not transfer personal data outside Tanzania unless authorized by the Personal Data Protection Commission and subject to:

  • Equivalent data protection standards, and
  • Legally binding contractual safeguards with recipients.

 

  1. Your Rights Under PDPA 2022

You have the right to:

  • Access and obtain copies of your personal data
  • Rectify inaccurate or incomplete data
  • Request deletion of your data where applicable
  • Withdraw consent for data processing
  • Object to automated decisions or marketing
  • Request data portability to another controller

To exercise these rights, contact:

📧 Email: customerservice@vertex.co.tz

☎️ Phone: +255 22 2116 382 / +255 743 033 223

📍 Address: Zambia Embassy Building, Ohio Street / Sokoine Drive, P.O. Box 13412, Dar es Salaam

We respond within 30 days of receiving your request in accordance with Tanzanian law.

 

  1. Cookies and Digital Tracking

Our website and client platforms use cookies to:

  • Maintain secure user sessions
  • Enhance site performance and functionality
  • Analyze traffic and usage trends

You can manage or disable cookies via browser settings, though doing so may affect site functionality.

 

  1. Children’s Privacy

Vertex’s services are intended for persons aged 18 and above. We do not knowingly collect or process information from minors. Any data collected inadvertently will be deleted immediately.

 

  1. Updates to This Policy

We may update this Privacy Policy periodically to reflect:

  • Legal or regulatory changes
  • Updates to our services or systems
  • Improvements to our privacy framework

Material changes will be communicated through:

  • Website notices
  • Email or in-app notifications

Continued use of our services constitutes acceptance of the revised policy.

 

  1. Contact and Complaints

Data Protection Officer (DPO)

📧 Email: customerservice@vertex.co.tz

☎️ Phone: +255 22 2116 382 / +255 743 033 223

Regulatory Contacts:

Personal Data Protection Commission (PDPC)

📧 helpdesk@pdpc.go.tz | ☎️ +255 684 497 788 / +255 654 004 975

Capital Markets and Securities Authority (CMSA)

📧 info@cmsa.go.tz | ☎️ +255 22 2114959 / 61