Privacy Policy

CGK Africa Connect (“CGK Africa”, “we”, “us” or “our”) operates the website www.cgkafricaconnect.org and the events, programmes and services offered through it (together, the “Platform”).

For the purposes of applicable data-protection law, CGK Africa is the data controller responsible for the personal data described in this Policy. Our registered address is Uhuru Heights, Mezzanine Floor, Dar es Salaam, Tanzania.

This Policy explains what personal data we collect, why we collect it, how we use and share it, how long we keep it, and the rights available to you. It is designed to meet the requirements of the Personal Data Protection Act, 2022 of the United Republic of Tanzania (the “PDPA”) and its Regulations, and to align with international standards including the EU General Data Protection Regulation (GDPR).

This Policy applies to personal data we process about visitors to the Platform, people who register for or attend our events, newsletter subscribers, people who contact us, and applicants responding to opportunities we publish.

The Platform may contain links to third-party websites, sponsors, partners and payment providers that we do not control. This Policy does not apply to those third parties, and we encourage you to review their privacy notices separately.

We collect the following categories of personal data:

• Event registration data | your full name, email address, telephone number, organisation and stakeholder type (for example, founder, investor, SME or partner).
• Enquiry data | the name, email address, telephone number, subject and message you submit through our contact form.
• Subscription data | the email address you provide to receive our newsletter and updates.
• Transaction data | where an event is paid, the ticket tier selected and payment-confirmation details. Card and mobile-money credentials are processed by our payment providers and are not stored by us.
• Technical and usage data | IP address, device and browser type, pages viewed and similar information collected automatically through cookies and analytics.

We do not intentionally collect sensitive personal data (such as health, religious or political information). Please do not submit such data through the Platform unless we expressly request it and obtain your written consent as required by the PDPA.

We collect personal data directly from you when you register for an event, subscribe to our newsletter, complete the contact form, or otherwise communicate with us. We also collect certain technical data automatically when you use the Platform, and we may receive limited data from partners, sponsors or payment providers acting on our behalf.

We use personal data to:

• register you for events, manage attendance and issue confirmations or tickets;
• process payments and keep records of transactions;
• respond to your enquiries and provide customer support;
• send you newsletters, event invitations and updates where you have subscribed or where permitted by law;
• connect founders, investors, businesses and partners with relevant opportunities;
• operate, secure, analyse and improve the Platform; and
• comply with our legal, regulatory and accounting obligations.

Under the PDPA and comparable international frameworks, we rely on one or more of the following lawful bases:

• Consent | for newsletter subscriptions and optional communications, which you may withdraw at any time.
• Performance of a contract | to register you for an event and provide the services you request.
• Legal obligation | to meet financial, tax and regulatory requirements.
• Legitimate interests | to operate, secure and improve the Platform, where these interests are not overridden by your rights and freedoms.

We do not sell your personal data. We share it only as necessary and with appropriate safeguards, including with:

• service providers who host our Platform, deliver email, provide analytics or process payments on our behalf;
• event partners, sponsors or venues where this is necessary to deliver an event you have registered for, and where you have been informed;
• professional advisers such as auditors and lawyers; and
• public authorities, regulators or courts where required by law or to protect our legal rights.

Where we share data with processors, they act only on our documented instructions and are bound by confidentiality and data-protection obligations.

Some of our service providers may process personal data outside the United Republic of Tanzania. In accordance with Sections 31 and 32 of the PDPA, we transfer personal data abroad only where the destination provides an adequate level of protection, where appropriate safeguards (such as contractual clauses) are in place, or where you have given your consent. You may contact us for more information about the safeguards we apply.

We keep personal data only for as long as necessary for the purposes set out in this Policy, including to satisfy legal, accounting or reporting requirements. Event and transaction records are generally retained for the period required by applicable financial and tax law; subscription data is retained until you unsubscribe. When data is no longer needed, we securely delete or anonymise it.

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, loss or destruction, including access controls, encryption in transit and restricted administrative access. No method of transmission or storage is completely secure; where we are legally required to do so, we will notify you and the Personal Data Protection Commission of any personal-data breach that affects your rights.

Subject to the conditions and exemptions in the PDPA, you have the right to:

• Access | obtain confirmation of, and a copy of, the personal data we hold about you.
• Rectification | have inaccurate or incomplete data corrected or updated.
• Erasure | request deletion or blocking of your personal data where permitted.
• Objection and restriction | object to or restrict certain processing, including direct marketing.
• Withdraw consent | withdraw consent at any time, without affecting processing already carried out.
• Lodge a complaint | refer a matter to the Personal Data Protection Commission.

To exercise any of these rights, contact us using the details in the “Contact Us” section below. We will respond within the timeframe required by the PDPA. We may ask you to verify your identity before acting on a request.

The Platform uses cookies and similar technologies to keep it functioning, remember your preferences and understand how it is used. You can control or disable cookies through your browser settings, although some features may not work correctly without them.

The Platform is intended for individuals aged 18 and over. We do not knowingly collect personal data from children without the consent of a parent or guardian as required by law. If you believe a child has provided us with personal data, please contact us so we can remove it.

We may update this Policy from time to time to reflect changes in our practices or the law. The “Last updated” date at the top of this page shows when it was last revised. Material changes will be notified through the Platform or by email where appropriate.

If you have questions about this Policy or wish to exercise your rights, please contact us:

• By email: hello@cgkafricaconnect.org
• By phone: +255 757 071 587
• By post: CGK Africa Connect, Uhuru Heights, Mezzanine Floor, Dar es Salaam, Tanzania

You also have the right to lodge a complaint with the Personal Data Protection Commission (PDPC) of Tanzania at www.pdpc.go.tz.