Privacy policy

Munisa Resources is responsible for the personal information described here. Contact us at admin@munisaresources.com, on +263 787 211 894, or at Unit 11, Cecilia Business Centre, 6 Chelmsford Road, Belgravia, Harare, Zimbabwe.

Only what you choose to send us, plus a small amount of technical information:

• Buyer and investor requests (register what you’re after, and “I’m interested” on a listing): your name, phone or WhatsApp number, and optionally your email, company, country and message; what you are looking for (minerals, provinces, deal structure, budget, timeline); and which listing you asked about.
• Claim submissions (list a claim, on the site or on WhatsApp): your name, phone, optional email, the claim details, and the certificates, photos and documents you send. If you send a claim for someone else, the owner’s name and, if you give it, their phone number.
• Enquiries (contact form): your name, email and/or phone, and your message.
• Consent records: the time you agreed to be contacted or authorised us to list a claim.
• Campaign information: how you found us — the referring website, the page you landed on and any campaign tags in the link (for example utm_source). This is kept in your browser for up to 90 days and attached to a form when you send it.
• Abuse prevention: a one-way, keyed scramble of your IP address (never the address itself), used to limit how often a connection can submit forms.
• Analytics: if enabled, Google Tag Manager and the tools it loads record anonymous page visits and when a form is sent successfully.

We remove location data embedded in photos (such as phone GPS) before any photo is published on a listing.

• To contact you about your request, enquiry or claim, by your preferred channel.
• To match buyers and investors with suitable listings, and to tell you when something fits.
• To verify claims, prepare listings and broker transactions between the parties.
• To send a confirmation of your submission when you give an email address.
• To keep the site secure and prevent spam and misuse.
• To understand which channels and campaigns bring enquiries, so we can improve them.

We rely on your consent (given on each form), on steps you ask us to take before a transaction, and on our legitimate interest in running a secure, effective service. You can withdraw consent at any time.

• Never published. Your name and contact details are never shown on the public site. Listings show a teaser only — never the holder’s identity or the exact location.
• Counterparties. We do not pass a buyer’s details to a seller, or a seller’s details to a buyer, without that person’s agreement. Documents are shared only under a non-disclosure agreement.
• The Munisa desk — a small team, through a protected, signed-in console.
• Service providers who process data for us under contract: Supabase (database and file storage, hosted in Frankfurt, Germany), Vercel (website hosting), Brevo (email delivery) and Google (Tag Manager and analytics, if enabled). If you choose to message us on WhatsApp, WhatsApp’s own terms apply to that conversation.
• Authorities, where the law requires it.

We do not sell personal information.

Some of our providers store or process data outside Zimbabwe, mainly in the European Union. We use providers that protect data to a standard at least equivalent to Zimbabwean law, and we transfer only what the service needs.

• Requests, claims and enquiries: for as long as we are actively working with you, then for up to 24 months after our last contact so we can follow up on matching opportunities — unless you ask us to delete them sooner, or a transaction or legal obligation requires longer.
• Files uploaded to a form that was never sent: deleted automatically within about 24 hours.
• Abuse-prevention records: deleted after 7 days.
• Campaign information in your browser: up to 90 days, or until you clear your browser storage.

Data is encrypted in transit and at rest. Documents are held in private storage that the public site cannot reach, and only the desk can open them, through short-lived links. Access to the desk console requires a signed-in account with desk permissions, and every desk action is logged.

You can ask us to tell you what information we hold about you, to correct it, to delete it, to stop using it for a purpose, or to stop contacting you. Email admin@munisaresources.com and we will respond within 30 days. If you are not satisfied, you can complain to Zimbabwe’s data protection authority, the Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ).

The public site does not use cookies for advertising. It stores campaign information in your browser’s local storage, as described above, and keeps what you type on the claim form there until you send it, so nothing is lost if the page closes. Analytics tools loaded through Google Tag Manager may set their own cookies. Desk staff who sign in receive session cookies needed to keep them signed in.

We will update this page if our practices change, and change the date at the top. See also our terms of use.