Privacy notice

This notice explains what personal information AfricaNextGen ("we", "us", "our") collects when you use our website at africanextgen.com, register your interest in our events, or contact us, and how we look after it.

1. Who we are

AfricaNextGen is the data controller responsible for the personal information collected through this site. You can reach us at:

2. Information we collect

We only collect information that you actively provide to us through our forms. This typically includes:

• Your name and (work) email address
• Organisation, role, and country
• The nature of your interest in an event or partnership
• Any message you choose to send us

We also collect minimal technical data needed to keep the site secure, including your IP address and a coarse request fingerprint, which we use for rate-limiting and abuse prevention. This data is retained only as long as needed for those purposes.

3. How we use your information

We use the information you provide to:

• Respond to your enquiry or registration of interest
• Send you event-related updates that you have consented to
• Coordinate with partners on confirmed engagements
• Protect our forms and infrastructure from abuse

We will not use your information for unrelated marketing and we will not sell it to third parties.

4. Legal basis (UK GDPR)

Where data protection law applies, we rely on:

• Consent— given when you submit a form; you can withdraw it at any time.
• Legitimate interest— in operating a secure platform and responding to enquiries directed at us.
• Legal obligation— where we are required by law to keep certain records.

5. Who we share it with

We share your information only with the trusted processors needed to deliver the service:

• Supabase— managed Postgres hosting for event and enquiry records.
• Vercel— hosting for the website and server functions.
• Cloudflare— security challenge service (Turnstile) used on our forms.

These processors handle data on our behalf under written agreements that restrict how they may use it. We do not disclose your information to other third parties without your consent, except where required by law.

6. International transfers

Some of our processors operate infrastructure outside the United Kingdom. Where data is transferred internationally, we rely on mechanisms recognised under UK GDPR (such as the UK International Data Transfer Addendum and Standard Contractual Clauses) to make sure your information remains protected.

7. Retention

We retain enquiries and registrations for as long as needed to coordinate the relevant programme, and for a reasonable period afterwards for record-keeping. You can ask us to delete your record at any time.

8. Your rights

Under UK GDPR you have the right to:

• Access a copy of the personal information we hold about you
• Ask us to correct or delete that information
• Object to or restrict how we process it
• Ask for a portable copy in a machine-readable format
• Withdraw your consent at any time
• Lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk

To exercise any of these rights, contact us at support@africanextgen.com.

9. Security

Form submissions are protected by transport encryption (HTTPS), server-side validation, rate limiting, automated bot challenges, and database row-level security. Administrative access is restricted to allow-listed accounts only.

10. Cookies

We do not set advertising or tracking cookies. The site relies only on cookies that are strictly necessary to keep your session secure and to enable administrative access. For the full list and their purposes, see our cookies policy.

11. Updates to this notice

We may update this notice from time to time. Material changes will be reflected in the "Last updated" date at the top of the page.

12. Contact us

For any privacy-related question, email support@africanextgen.com or use the contact form and select “Privacy” as the topic. We aim to respond within a reasonable time.