Data Governance & Privacy Policy
Our formal data protection framework, named controller information, multi-jurisdictional compliance, and corporate opt-out rights.
1. Data Controller Identification
CurrentDebrief operates as an independent commercial intelligence directory and trade data platform in pre-launch pilot phase.
2. Multi-Jurisdictional Legal Frameworks & Legal Bases
CurrentDebrief operates as a global commercial intelligence platform with Africa serving as our initial regional pilot launchpad under AfCFTA principles. While our active baseline pilot datasets are initially seeded across 5 anchor commercial hubs, our governance, privacy architecture, and compliance framework are designed to uphold global data protection benchmarks alongside regional standards:
Lawful Bases for Processing: We do not rely solely on generalized legitimate interest. Our processing is anchored in:
• Statutory Public Registers: Records required by national commercial laws across jurisdictions to be publicly filed and accessible for trade transparency (such as CIPC, DCIP, CIPA, BRS, CAC, and international company registries).
• Legitimate Commercial Interest: Verifying trading counterparties, validating bonded haulier transport credentials, and preventing cross-border invoice and freight transit fraud.
• Corporate Self-Publication: Business contact information voluntarily published on official corporate websites, registered depots, and published corporate communication channels.
3. Company-Level Channels Policy & Scope
CurrentDebrief focuses strictly on company-level operational communication channels rather than harvesting private individuals' personal information:
- Personal Contacts Strictly Out of Scope (Veridion Compliance Standard): In line with industry-standard B2B intelligence data governance (such as Veridion), personal contacts and direct personal cell numbers for named executives are strictly out of scope. We do not sell, license, or index personal mobile numbers.
- Permitted Company-Level Channels (Emails Only): Outreach is strictly conducted via company-level channels: verified generic business email addresses (e.g.
info@,ops@,sales@,compliance@) and our centralized email desk. - Strict Prohibition on Private Consumer Data: We do not collect residential addresses, personal consumer credit histories, or private personal mobile numbers of executives or consumers.
- Robots.txt & Crawler Etiquette: CurrentDebrief’s web indexing crawlers adhere strictly to
robots.txtprotocols, follow standard rate limits on all third-party sites, and harvest zero disbarred pages.
4. Right to Rectification, De-Indexing & 48-Hour SLA
Under the Zimbabwe Cyber and Data Protection Act, POPIA, the Kenyan DPA, NDPA, and GDPR, any registered corporate officer or data subject may request verification, correction, or permanent suppression of their listing free of charge.
All suppression and correction requests are processed within 48 business hours, immediately adding the record to our permanent suppression list.
5. Technical Safeguards & Anti-Abuse
All communications between client terminals and our platform are encrypted with TLS 1.3 protocol standards. Direct credit card checkout is disabled across this pilot platform. Data access is governed by rate limits, token authentication, and abuse monitoring.
Data Protection Officer & Compliance Inquiries
Direct all inquiries regarding data protection, statutory filings, and suppression list maintenance to our dedicated privacy desk.