Website Acceptable Use Policy

This policy applies to every visitor, enquirer and client portal user, and to anyone acting on their behalf. Using the website means you accept it.

• Browsing published information for legitimate business evaluation.
• Submitting genuine enquiries and quote requests on behalf of a real organisation you are authorised to represent.
• Downloading agreement templates and information packs for internal review with your own legal counsel.
• Using the client portal to track your own transactions, upload your own documents and communicate with our team.

• Submitting false, misleading or impersonated information, including false company details, fabricated LOIs, ICPOs, proof of funds or certificates.
• Uploading documents you are not entitled to share, or that contain third-party personal data you have no lawful basis to disclose.
• Using the website or portal in connection with money laundering, terrorism financing, sanctions evasion, bribery, tax evasion, smuggling or trade in illegally sourced minerals.
• Uploading malware, executable code, or files designed to disrupt or compromise systems.
• Attempting to gain unauthorised access to any account, server, database, storage bucket or non-public area, or probing, scanning or testing our systems without written authorisation.
• Scraping, crawling, harvesting, mass-downloading or systematically extracting content or contact data, including for training datasets or resale.
• Circumventing rate limits, authentication, access controls or security headers, or sharing portal credentials.
• Republishing, reselling, framing or adapting our content, imagery or agreement templates for commercial purposes without written consent.
• Sending unsolicited commercial messages, chain offers or bulk enquiries through our forms.
• Posting or transmitting unlawful, defamatory, harassing, discriminatory or infringing material.

Uploads must be in an accepted format, within the published size limit, and free of malicious content. We validate file type and size, sanitise filenames and store documents privately.

Do not upload passwords, full payment card numbers, or sensitive personal data that is not required for the compliance step being completed. Redact irrelevant third-party information before uploading.

We welcome good-faith reports of security issues. Email goldcapitalinternational@gmail.com with the subject line "Security Report", include enough detail to reproduce the issue, and give us a reasonable opportunity to remediate before any disclosure.

Do not access, modify or exfiltrate other users' data, degrade service availability, or run automated testing against production systems without our prior written consent.

We monitor access and security logs for abuse. Where this policy is breached we may warn the user, remove content, restrict functionality, suspend or terminate portal access, and terminate any commercial engagement.

Serious breaches, including suspected fraud, financial crime or unauthorised system access, may be reported to law enforcement, regulators or affected third parties, and may result in legal action to recover loss.

If you become aware of misuse of this website, of GCI's name, or of anyone impersonating GCI, report it to goldcapitalinternational@gmail.com immediately.