Privacy Notice

Account details you give us: name, business email, telephone number, company name, company registration and tax numbers, physical address and any compliance documents you upload for verification.

Transaction information: listings you publish, enquiries you send or receive, quotations, orders and the messages attached to them.

Technical information generated automatically: sign-in timestamps, IP address and basic device data used to keep accounts secure.

To operate your account, match buyers with suppliers, run compliance and verification checks, calculate and invoice fees, send service notifications about your enquiries and orders, detect fraud and misuse, and meet our legal and record-keeping obligations.

When you submit an enquiry, the relevant supplier receives your name, company, contact details and the content of your enquiry so they can quote. When you publish a listing, its commercial details are public. Compliance documents are never shown to other users - only to authorised RevCom reviewers.

We use service providers for hosting, database storage, email delivery and the on-site assistant. They process data on our instructions only.

Account and transaction records are retained for as long as your account is active and thereafter for the period required by Botswana tax and company law. Verification documents are deleted once they are no longer needed for the verification decision or record-keeping obligations.

Data is stored in managed cloud infrastructure with access controls that restrict each account to its own records. Compliance documents are held in private storage reachable only through time-limited links issued to authorised reviewers.

You may request access to, correction of, or deletion of your personal information, and you may object to marketing at any time. Write to privacy@revcom.cloud. We respond within 30 days.

We use only the cookies and browser storage described in our Cookie Notice. Strictly necessary storage keeps you signed in; analytics and support storage are set only with your consent, which you can withdraw at any time. We do not run third-party advertising trackers.

RevCom Pty Ltd, Gaborone, Botswana, is the controller of the personal information described in this notice. Data protection enquiries: privacy@revcom.cloud. Where a supplier or buyer processes personal information received through the platform, that party is an independent controller for its own use of it.

Contract: creating and operating your account, publishing your listings, routing enquiries and quotations, raising orders and invoicing fees.

Legal obligation: tax, accounting, company-law record keeping, sanctions and anti-money-laundering screening.

Legitimate interests: platform security, fraud and abuse prevention, compliance review of listings, and service communications about your own transactions - balanced against your rights and interests.

Consent: optional cookies, marketing messages and any use of your information beyond the purposes above. Consent can be withdrawn at any time without affecting processing already carried out.

Our hosting, storage, email and assistant providers may process data outside Botswana, including in the European Union and the United States. Transfers are made under written processor terms incorporating the European Commission's Standard Contractual Clauses or an equivalent adequacy or safeguard mechanism, with encryption in transit and at rest. A copy of the safeguards is available on request.

Subject to legal limits, you may request: access to your personal information and a copy of it; correction of inaccurate data; erasure where we no longer have a lawful basis to keep it; restriction of processing while a dispute is resolved; portability of the data you supplied to us in a structured, machine-readable format; objection to processing based on legitimate interests or to direct marketing; and withdrawal of any consent you have given.

Send requests to privacy@revcom.cloud. We verify identity before acting and respond within 30 days, extendable by a further 60 days for complex requests, with notice to you. We do not charge for a first request.

We do not make decisions producing legal or similarly significant effects about you by automated means. Listing compliance review, verification decisions and account suspensions are taken by a person. Assistant responses and any ranking of listings are advisory only.

The marketplace is for registered businesses and their authorised representatives. We do not knowingly collect information from anyone under 18. Where we learn that we have, we delete it.

Where a personal data breach is likely to result in a risk to your rights, we notify the competent supervisory authority within 72 hours of becoming aware of it and inform affected users without undue delay where the risk is high.

RevCom Pty Ltd is established in Botswana and does not have an establishment in the UK or the EU. Where we offer the marketplace to, or monitor the behaviour of, people located in the UK or the EU, we apply the UK GDPR and the Data Protection Act 2018, and the EU GDPR, to that processing.

In practice this means: we rely on the lawful bases set out in clause 9; we honour the rights listed in clause 11 within one month; we transfer data only under the UK International Data Transfer Addendum or the European Commission's Standard Contractual Clauses as described in clause 10; optional cookies and analytics are set only after you consent through our cookie banner, in line with the Privacy and Electronic Communications Regulations; and we send marketing only to people who have opted in, with an unsubscribe link in every message.

UK and EU users can contact our data protection point of contact at privacy@revcom.cloud, marked "UK/EU data request". If you are not satisfied with our response, you may complain to the UK Information Commissioner's Office at ico.org.uk or to the supervisory authority in your EU member state.

Raise a concern with us first. You also have the right to complain to the Information and Data Protection Commission of Botswana, to the UK Information Commissioner's Office, or, if you are in the EU, to your local supervisory authority.

We post material changes on this page and, where the change affects how we use your information, notify account holders by email before it takes effect.