Privacy Policy

Effective Date: May 27, 2026 Last Updated: May 27, 2026 GDPR Compliant: Yes
Your Privacy Matters LocalBitcoins Africa is committed to protecting your personal information and privacy. This policy explains what data we collect, how we use it, and your rights under applicable data protection laws including GDPR.

1. Introduction

LocalBitcoins Africa ("we," "us," "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our peer-to-peer Bitcoin trading platform.

By using our Platform, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Information You Provide Directly

Data Type Purpose Legal Basis
Email Address Account creation, verification, communication Contract performance
Username & Password Account authentication Contract performance
Phone Number (optional) Enhanced account security, 2FA Legitimate interest
Country Information Service localization, compliance Legal obligation
Trade Messages Facilitate trades, dispute resolution Contract performance

2.2 Identity Verification (KYC)

For compliance with anti-money laundering (AML) regulations, we may request:

  • Government-issued ID (passport, national ID, driver's license)
  • Proof of address (utility bill, bank statement)
  • Selfie photo for identity verification
  • Source of funds documentation

Legal Basis: Legal compliance and fraud prevention.

2.3 Automatically Collected Information

  • Technical Data: IP address, browser type, device type, operating system
  • Usage Data: Pages visited, features used, time spent, click patterns
  • Transaction Data: Trade history, advertisement details, wallet addresses
  • Security Data: Login attempts, 2FA status, device fingerprints
  • Blockchain Data: Bitcoin transaction IDs, wallet addresses (public)

2.4 Cookies and Tracking

We use cookies to maintain sessions, remember preferences, analyze performance, and prevent fraud.

3. How We Use Your Information

3.1 Service Provision

  • Create and maintain your account
  • Facilitate peer-to-peer Bitcoin trades
  • Process escrow transactions
  • Provide wallet services
  • Enable in-platform communication

3.2 Security and Fraud Prevention

  • Verify your identity (KYC/AML compliance)
  • Detect and prevent fraud, money laundering, and illegal activities
  • Monitor for suspicious transactions
  • Enforce our Terms of Service

3.3 Communication

  • Send transactional emails (trade confirmations, account alerts)
  • Provide customer support
  • Send service updates and announcements
  • Marketing communications (with consent, opt-out available)

4. Information Sharing

4.1 We DO NOT Sell Your Data

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4.2 When We Share Information

With Other Users

  • Your username and public profile are visible
  • Trade history and ratings may be visible to trading partners

With Service Providers

  • Email service providers (Mailgun)
  • Cloud infrastructure providers
  • Security and fraud detection services

With Law Enforcement

  • When required by law, court order, or legal process
  • To investigate fraud or illegal activities
  • To comply with regulatory requests

5. Data Retention

Retention Periods:

  • Active account data: Duration of account + 7 years
  • KYC/AML documents: 7 years after account closure
  • Transaction records: 7 years (legal requirement)
  • Marketing data: Until you unsubscribe
  • Technical logs: 12 months

6. Your Privacy Rights

Under GDPR and applicable data protection laws, you have:

  • Right to Access: Request a copy of your personal data
  • Right to Rectification: Correct inaccurate data
  • Right to Erasure: Request deletion (subject to legal retention)
  • Right to Restriction: Limit how we use your data
  • Right to Data Portability: Receive data in machine-readable format
  • Right to Object: Object to processing based on legitimate interests
  • Right to Withdraw Consent: Withdraw consent at any time

To exercise your rights: [email protected]
We will respond within 30 days.

7. Data Security

  • Encryption: SSL/TLS for data in transit
  • Secure Storage: Encrypted databases
  • Access Controls: Role-based access
  • 2FA: Google Authenticator (TOTP)
  • Regular Audits: Security assessments
  • Incident Response: Data breach notification procedures

8. International Data Transfers

Your information may be transferred internationally. We ensure appropriate safeguards through Standard Contractual Clauses (SCCs) and GDPR adequacy decisions.

9. Children's Privacy

Our Platform is not intended for users under 18. We do not knowingly collect information from children.

10. Changes to This Privacy Policy

We may update this policy. Changes will be posted with a new "Last Updated" date and notified via email for material changes.

11. Contact Us

12. Supervisory Authority

EEA residents have the right to lodge a complaint with your local data protection authority.

Data Controller LocalBitcoins Africa is the data controller responsible for your personal information under this Privacy Policy.

Last updated: May 27, 2026. By continuing to use LocalBitcoins Africa, you acknowledge that you have read and understood this Privacy Policy.