King Mining Corporation

Effective date: 9 July 2026

1. Who We Are

This website is operated by King Mining Corporation Limited, trading as King Mining.

Our website is kingmining.co.

Our contact details are:

Address: Karte 4, Kabul, Afghanistan
Email: contact@kingmining.co
Telephone: +93 (0) 787 163 063

In this Privacy Policy, “King Mining,” “we,” “our” and “us” refer to King Mining Corporation Limited.

2. Scope of This Policy

This Privacy Policy explains how we collect, use, store, disclose and protect personal information when you:

• Visit our website;
• Contact us by email, telephone, WhatsApp or an online form;
• Submit a letter of intent or commercial inquiry;
• Create a customer account;
• Purchase or reserve a service through WooCommerce;
• Book a mine inspection;
• Request sampling or laboratory services;
• Submit documents, photographs or project information;
• Attend a mine visit or other King Mining activity; or
• Otherwise communicate or conduct business with us.

This policy applies to personal information concerning website visitors, clients, prospective clients, company representatives, visitors, contractors and other individuals who interact with King Mining.

3. Information We Collect

3.1 Identity and contact information

We may collect:

• Full name;
• Company name;
• Job title or position;
• Country of residence or business;
• Email address;
• Telephone number;
• WhatsApp number;
• Billing address;
• Preferred language; and
• Details of authorized representatives or accompanying visitors.

3.2 Commercial and project information

When you make an inquiry or request a service, we may collect:

• Mineral type;
• Requested quantity;
• Mine, stockpile or project name;
• Province, district or approximate location;
• Delivery destination;
• Proposed commercial terms;
• Inspection objectives;
• Preferred inspection dates;
• Number and names of visitors;
• Site-owner or operator contact details;
• Site-access authorization;
• Sampling requirements;
• Laboratory-testing requirements;
• Requested analytical methods;
• Photographic or filming permissions;
• Geological, technical or operational information;
• Assay reports;
• Mine licences or related documents;
• Maps, coordinates and site photographs; and
• Other information required to assess or perform the requested service.

Some project information may be commercially confidential even when it is not personal information. We handle such information according to our contractual and confidentiality obligations.

3.3 Order and transaction information

When you purchase or reserve a service, we may collect:

• Products or services ordered;
• Order number;
• Order status;
• Price and currency;
• Selected payment method;
• Billing details;
• Transaction reference;
• Payment status;
• Invoice and receipt information;
• Refund or cancellation information;
• Customer notes;
• Date and time of purchase; and
• Records of related communications.

Because our WooCommerce products are normally services or virtual products, we do not ordinarily require a shipping address unless it is necessary for a specific transaction, document delivery or sample movement.

3.4 Payment information

Payments may be made through an online payment provider, bank transfer, cash payment or another approved method.

When an external payment provider processes a card or online payment, the provider may collect payment-card details, billing information, device information, IP address and fraud-prevention information under its own privacy policy.

King Mining does not intend to receive or store complete card numbers, card-security codes or online-banking passwords on its website.

For bank transfers, we may receive the payer’s name, bank name, account reference, transaction amount and payment reference.

For cash payments, we may record the payer’s name, amount, date, receipt number and purpose of payment.

3.5 Mine-visit and visitor information

For mine inspections and site visits, we may collect:

• Visitor names;
• Company affiliation;
• Nationality;
• Contact information;
• Emergency contact information where reasonably required;
• Vehicle or travel details;
• Site-access approvals;
• Safety acknowledgements;
• Attendance records; and
• Records of incidents or security concerns.

We do not normally require visitors to upload passports or government-issued identification documents through the website. Visitors may be required to present valid government-issued photo identification in person before entering a mine, facility or restricted meeting area.

Where a copy of identification is exceptionally required for a permit, security clearance or government process, we will explain the requirement and intended use before collecting it.

3.6 Sampling and laboratory information

When we coordinate sampling or laboratory analysis, we may collect and retain:

• Client and project identification;
• Sample identification numbers;
• Sample locations;
• GPS coordinates;
• Dates and times of collection;
• Sampler identity;
• Photographic records;
• Sample descriptions and weights;
• Seal numbers;
• Chain-of-custody records;
• Courier and transport records;
• Laboratory-submission forms;
• Laboratory reports;
• Quality-control records; and
• Correspondence concerning the samples or results.

Where practical, samples submitted to laboratories will be identified by sample numbers rather than unnecessary personal information.

3.7 Communications

We retain communications sent through:

• Contact forms;
• Letters of intent;
• Email;
• WhatsApp;
• Telephone records and call notes;
• Social-media messages; and
• In-person or online meetings.

We may record the substance of commercial discussions, instructions, approvals, complaints and service-related decisions.

We will not record audio or video calls without notice where notice or consent is required.

3.8 Files and documents you upload

If the website permits file uploads, we may receive documents, photographs, reports, spreadsheets, maps and other files.

Uploaded photographs may contain embedded metadata, including the date, device information and geographic coordinates. You should remove sensitive metadata before uploading a file when disclosure of that information would create a security, privacy or commercial risk.

Do not upload passwords, payment-card security codes, private banking credentials or unrelated personal documents.

3.9 Technical and usage information

When you visit the website, our systems and service providers may automatically receive:

• IP address;
• Browser type and version;
• Device type;
• Operating system;
• Date and time of access;
• Referring page;
• Pages viewed;
• Cart and checkout activity;
• Session identifiers;
• Error and security logs;
• Approximate location derived from an IP address; and
• Information used to detect fraud, spam, abuse or unauthorized access.

4. How We Use Information

We may use personal information to:

• Respond to inquiries;
• Review letters of intent;
• Assess potential buyers, suppliers and business partners;
• Create and manage customer accounts;
• Process orders and bookings;
• Confirm service availability;
• Arrange mine visits;
• Verify visitor identity in person;
• Coordinate transportation, access and security;
• Conduct mine inspections;
• Prepare inspection reports;
• Arrange sampling and chain of custody;
• Submit samples to laboratories;
• Deliver laboratory results;
• Process payments, invoices, receipts and refunds;
• Communicate changes, delays and safety instructions;
• Maintain commercial and accounting records;
• Prevent fraud, spam and misuse;
• Protect our personnel, visitors, mines and systems;
• Resolve complaints and disputes;
• Establish, exercise or defend legal claims;
• Improve the website and our services;
• Comply with contractual and legal obligations; and
• Send business updates where you have requested them or where otherwise permitted.

5. Reasons for Processing Information

Depending on the circumstances, we process information because:

• You asked us to take steps before entering into a contract;
• Processing is necessary to perform a contract with you or your company;
• Processing is necessary for our legitimate commercial, administrative, security or operational interests;
• You gave consent for a particular use;
• Processing is necessary to comply with an applicable legal obligation; or
• Processing is necessary to establish, exercise or defend a legal claim.

Where we rely on consent, you may withdraw that consent for future processing. Withdrawal does not invalidate processing that already occurred lawfully.

6. WooCommerce Purchases and Customer Accounts

Our website uses WooCommerce to display and sell services.

During checkout or account registration, we may collect:

• Name;
• Company name;
• Email address;
• Telephone number;
• Billing address;
• Country;
• Account username;
• Order contents;
• Order amount;
• Payment method;
• IP address; and
• Additional information required for the selected service.

If guest checkout is available, you may purchase without creating a permanent customer account. Order information will still be retained as necessary to process and document the transaction.

If you create an account, you may be able to view orders and update certain account information. Website administrators may access account and order information where necessary for administration, support, security and service delivery.

Passwords are stored in protected hashed form rather than readable plain text. You are responsible for keeping your login credentials confidential.

7. Comments and Product Reviews

If comments or product reviews are enabled and you submit one, we may collect:

• The content submitted;
• Your name;
• Email address;
• Website address, if provided;
• IP address;
• Browser user-agent information; and
• Date and time of submission.

This information may be used for moderation, spam prevention and publication of approved reviews.

If avatars are enabled, an anonymized value derived from your email address may be transmitted to the Gravatar service to determine whether an associated profile image exists. An approved review and profile image may be publicly visible.

Do not include confidential project information, personal contact details or sensitive information in a public review.

8. Cookies and Similar Technologies

Cookies are small files stored on a device to support website functionality, remember preferences, maintain sessions and understand website use.

Essential WordPress and WooCommerce cookies

Depending on the features you use, essential cookies may include:

• woocommerce_cart_hash, used to identify changes to the cart;
• woocommerce_items_in_cart, used to identify whether the cart contains items;
• wp_woocommerce_session_, used to associate a visitor with cart information;
• WordPress authentication cookies for logged-in users;
• A temporary WordPress test cookie used to determine whether the browser accepts cookies; and
• Security, form-validation and session cookies.

Core WooCommerce cart cookies generally operate for the session, while the WooCommerce customer-session cookie normally operates for approximately two days. Core WooCommerce states that its standard storefront cookies do not themselves contain personal information.

Preference cookies

Preference cookies may remember choices such as language, display settings, dismissed notices or information entered for future comments.

Analytics cookies

If analytics tools are enabled, they may collect information about page views, traffic sources, devices, sessions and website performance.

Embedded and third-party cookies

Third-party content and services may place or access cookies when you interact with them. These may include video platforms, mapping services, payment providers, social-media platforms, anti-spam services or communication tools.

You can control cookies through your browser and, where provided, through our cookie-preference tool. Blocking essential cookies may prevent the cart, checkout, login or other website functions from operating correctly.

9. Embedded Content and External Services

Our website may contain embedded or linked content from third parties, including:

• YouTube;
• WhatsApp;
• Social-media platforms;
• Online payment providers;
• Mapping or location services;
• Anti-spam and security services;
• Laboratories;
• File-storage or content-delivery providers; and
• Other external websites.

When you load embedded content, play a video, follow a link or use an external service, the third party may receive your IP address, device information, cookies and information about your interaction.

Your use of an external platform is also governed by that platform’s privacy policy and terms. King Mining does not control how independent third parties process information on their own platforms.

10. Who We Share Information With

We may share information, only where reasonably necessary, with:

King Mining personnel

Authorized employees, directors, representatives and contractors who require the information to perform their duties.

Mine owners and operators

Information required to assess access, authorize visitors, coordinate meetings, verify attendance and conduct the requested inspection or sampling activity.

Laboratories and sampling contractors

Sample identifiers, project instructions, chain-of-custody information and client details necessary to prepare, test, track and report samples.

Payment providers, banks and financial institutions

Billing, transaction and identity information necessary to process or verify payments, prevent fraud and administer refunds.

Website and technology providers

Hosting providers, website developers, email providers, backup providers, cybersecurity services, database providers and technical-support contractors.

Communication providers

Email, telephone, WhatsApp and other communication platforms used to exchange business messages.

Professional advisers

Lawyers, accountants, insurers, auditors, technical specialists and consultants where their services require access to relevant information.

Government and legal authorities

Regulators, courts, law-enforcement bodies, customs authorities or other public bodies where disclosure is legally required, necessary to protect safety or necessary to establish or defend legal rights.

Business transactions

If King Mining undergoes a merger, restructuring, financing, asset sale or similar transaction, relevant information may be disclosed under appropriate confidentiality restrictions.

We do not sell personal information to data brokers or advertisers.

11. International Processing and Transfers

King Mining operates in Afghanistan and serves international business clients.

Personal information may be accessed, stored or processed in:

• Afghanistan;
• The country where our website is hosted;
• The country where a payment provider, laboratory or communication provider operates; and
• Other countries involved in a transaction, inspection, laboratory assignment or commercial relationship.

Privacy and security laws may differ between these countries.

Where an applicable law requires particular safeguards for an international transfer, we will take reasonable steps to use an appropriate contractual, organizational or technical safeguard.

12. Data Retention

We retain information only for as long as reasonably necessary for the purpose for which it was collected, subject to contractual, accounting, security and legal requirements.

Our standard retention periods are:

General inquiries and contact forms

Retained for up to three years after the most recent substantive communication.

Letters of intent and commercial negotiations

Retained for up to seven years after the last commercial activity, particularly where the records may be relevant to a transaction, dispute or future negotiation.

Pending, failed and cancelled WooCommerce orders

Retained for up to twelve months, unless the order is connected to a complaint, fraud concern, dispute or completed transaction.

Completed orders, invoices, receipts and payment records

Retained for up to seven years after completion of the transaction.

Mine-inspection records and reports

Retained for up to seven years after delivery of the final report.

Sampling, chain-of-custody and laboratory records

Retained for up to seven years after delivery of the final laboratory or sampling report, unless a longer period is agreed with the client.

Customer accounts

Retained while active. An account that has had no login, order or substantive activity for three years may be deleted or anonymized.

Security and server logs

Normally retained for up to twelve months, but relevant records may be retained longer when required to investigate a security incident, fraud or misuse.

Comments and product reviews

Retained while published or until removal is justified, requested or required.

Consent and marketing records

Retained while the communication preference remains active and for a reasonable period afterward to document an opt-out or withdrawal.

Information may be retained beyond these periods where necessary for a legal claim, investigation, contractual obligation, unpaid account or security matter.

When information is no longer required, it may be deleted, anonymized or securely archived.

13. Data Security

We use reasonable administrative, organizational and technical measures intended to protect information against:

• Unauthorized access;
• Accidental loss;
• Misuse;
• Unauthorized alteration;
• Improper disclosure; and
• Destruction.

Measures may include access controls, password protection, encryption in transit, secure hosting, backups, software updates, anti-spam controls and restricted staff access.

No website, email system, messaging platform or internet transmission can be guaranteed to be completely secure. You should not send highly sensitive information through ordinary email or WhatsApp unless appropriate safeguards have been agreed.

14. Your Choices and Rights

Depending on applicable law and the circumstances, you may ask us to:

• Confirm whether we hold personal information about you;
• Provide a copy of your personal information;
• Correct inaccurate or incomplete information;
• Delete information that is no longer required;
• Restrict a particular use;
• Object to direct marketing;
• Withdraw consent;
• Close a website account; or
• Explain how information has been used or shared.

We may need to verify your identity before responding.

A request may be refused or limited where retaining the information is necessary for:

• A contract;
• Accounting or transaction records;
• Fraud prevention;
• Site security;
• Laboratory traceability;
• Chain-of-custody integrity;
• Legal compliance; or
• Establishing, exercising or defending legal claims.

Requests may be submitted to contact@kingmining.co.

15. Marketing Communications

We may send service-related or commercial communications to existing and prospective business contacts where permitted.

You may stop receiving promotional communications by using an unsubscribe method provided in the message or by contacting us.

Opting out of promotional communications does not prevent us from sending necessary order, payment, safety, inspection, laboratory or contractual communications.

16. Children

Our website and services are intended for companies, professionals and persons aged 18 or older.

We do not knowingly offer mine-inspection, sampling, laboratory or commercial services directly to children. If we learn that personal information was submitted by a child without appropriate authorization, we will take reasonable steps to delete it.

17. Confidentiality and Site Security

Mine locations, access routes, visitor identities, production information, coordinates, photographs and geological documents can create commercial or security risks.

We may restrict disclosure, remove metadata, limit access or decline a request where processing or publication could endanger:

• Visitors;
• Personnel;
• Local communities;
• Mine owners or operators;
• Commercially confidential information; or
• Physical site security.

Clients must not use personal or site information obtained through our services for unlawful surveillance, harassment, unauthorized publication or circumvention of site-access restrictions.

18. Data Breaches and Security Incidents

If we become aware of a security incident involving personal information, we will assess the nature, scope and likely consequences of the incident.

We will take reasonable steps to contain and investigate the incident and will notify affected persons or relevant authorities when notification is required by applicable law or reasonably necessary to reduce serious harm.

19. External Links

Our website may link to websites that are not operated by King Mining.

We are not responsible for the content, security or privacy practices of an independent external website. You should review the external website’s own privacy information before submitting personal information.

20. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our services, website functionality, payment arrangements, technology, service providers or legal obligations.

The current version will be published on this page with its effective date.

Material changes may also be communicated through the website, email or another appropriate method.

21. Contact Us