Your information deserves careful stewardship.

Who this policy covers

This policy applies to personal information processed through the United Africa 2063 website, programme enquiries, newsletter or event registrations, partnership discussions, resource requests and related communications. United Africa 2063 is presented by INFONET AFRICA and is referred to in this policy as “the programme”, “we”, “us” or “our”.

The organisation responsible for a particular programme form, event or joint activity may be identified at the point where information is collected. Where another organisation controls that processing, its own privacy notice may also apply.

This policy is intended to support compliance with applicable privacy law, including Kenya’s Data Protection Act, 2019 and South Africa’s Protection of Personal Information Act, 2013 (“POPIA”).

What we may collect

Information you provide

• name, telephone number, email address and country;
• organisation, job title, sector and professional role;
• the type of enquiry, partnership or investment interest;
• messages, documents and other information you choose to provide;
• event registration, newsletter and communication preferences;
• records of correspondence and follow-up.

Information collected through the website

• IP address, browser, device, language and approximate location;
• pages visited, referring page, timestamps and interaction data;
• cookie or similar-technology identifiers, where enabled;
• security and diagnostic logs used to protect the website.

Please do not send sensitive personal information unless it is specifically requested and a secure, appropriate collection method has been provided.

Why we process information

• respond to questions, briefing requests and resource requests;
• assess and manage government, investor, industry, research, media, youth or diaspora engagement;
• organise events, consultations and programme communications;
• send requested updates and, where permitted, relevant programme news;
• prepare aggregated analysis about audience interests and website performance;
• protect the website, investigate misuse and maintain service reliability;
• meet legal, regulatory, contractual, audit and record-keeping obligations;
• establish, exercise or defend legal rights.

We will not use personal information for a materially incompatible purpose without an appropriate legal ground and, where required, a new notice or consent.

The grounds we rely on

Depending on the interaction and applicable law, processing may be based on:

• consent, including an optional newsletter or marketing choice;
• steps requested before an agreement or performance of an agreement;
• legitimate interests, such as responding to professional enquiries, improving the programme and protecting systems, where those interests do not override individual rights;
• compliance with law or a binding regulatory duty;
• public-interest or official functions, where a lawful mandate applies.

Where processing depends on consent, you may withdraw that consent. Withdrawal does not affect processing that was lawful before withdrawal.

Who may receive information

We may share the minimum necessary information with:

• authorised programme personnel and advisers who need it for their role;
• hosting, communications, form, event, analytics, security and document-service providers acting under appropriate obligations;
• programme partners where the enquiry requires joint follow-up and sharing is lawful;
• professional advisers, auditors, insurers and funders where necessary;
• regulators, courts, law-enforcement or public authorities where lawfully required;
• a successor organisation in a lawful restructuring, subject to appropriate safeguards.

We do not sell personal information. We do not disclose it to unrelated parties for their independent marketing without an appropriate legal basis.

Working across borders

United Africa 2063 is a continental initiative, and information may be accessed or processed in Kenya, South Africa or another country where an authorised partner or service provider operates. Privacy protections may differ between countries.

Where applicable law requires it, cross-border transfers will use an approved legal mechanism, contractual protection, an adequacy basis, consent or another permitted safeguard. We will also limit access and apply proportionate technical and organisational controls.

Website technologies

Cookies and similar technologies may be used to operate the website, remember preferences, understand performance and protect against misuse. Non-essential cookies should be activated only where the applicable consent or lawful basis has been obtained.

You can manage cookies through the website’s consent controls, where provided, and through browser settings. Blocking some cookies may affect functionality.

How long information is kept

Personal information is kept only for as long as reasonably necessary for the purpose collected, including follow-up, programme administration, security, audit and legal requirements. Retention decisions consider:

• the nature and sensitivity of the information;
• the duration of the relationship or enquiry;
• contractual, financial, regulatory or limitation periods;
• the risk created by continued storage;
• whether information can be anonymised instead of retained.

When information is no longer needed, it should be securely deleted, destroyed or irreversibly anonymised.

How information is protected

We use proportionate administrative, technical and physical safeguards intended to protect information against loss, unauthorised access, misuse, alteration or disclosure. These may include access controls, secure hosting, authentication, encryption where appropriate, backups, logging, staff responsibilities and provider due diligence.

No internet service can guarantee absolute security. If a breach creates a legally reportable risk, we will follow applicable notification and response requirements.

Choices and requests

Subject to applicable law and relevant exceptions, you may have rights to be informed, access personal information, correct inaccurate information, request deletion or restriction, object to certain processing, withdraw consent, request portability, challenge qualifying automated decisions and complain to a regulator.

We may need to verify identity before acting. A request may be limited or refused where permitted by law, for example to protect another person’s rights or preserve information required for a legal claim. Where required, reasons will be provided.

Information about children

The website is intended for a general audience and is not designed to knowingly collect personal information directly from children without appropriate authorisation. A person under 18 should involve a parent or guardian before submitting personal information, registering for a programme or contacting us.

If you believe information about a child was submitted without appropriate authority, contact us so it can be assessed and, where required, removed.

External sites and communications

The website may link to WhatsApp, mapping services, social platforms, media, document hosts, payment or event services. These services operate under their own privacy terms.

For example, the contact form on this site may open a pre-filled WhatsApp message for you to review and send. Once WhatsApp opens, information you send is also processed under WhatsApp’s terms and privacy policy. Review third-party policies before sharing information.

Updates to this policy

We may revise this policy when programme activities, technology, service providers or legal requirements change. The current version will be posted on this page with its effective date. Material changes may also be communicated through a prominent website notice or another appropriate channel.