The Africa Practice group is committed to protecting your privacy.

1. This is a notice to inform you of our policy about all information that we record about you. It sets out the conditions under which we may process any information that we collect from you, or about you, or that you provide to us. It covers information that could identify you (“personal information”) and information that could not. In the context of the law and this notice, “process” means collect, store, transfer, use or otherwise act on information.
2. Our privacy policy complies with UK law including that required by the UK General Data Protection Regulation (GDPR). It has been compiled so as to comply with the law of every country or legal jurisdiction in which we aim to do business. If you think it fails to satisfy the law of your jurisdiction, we would like to hear from you.

Our Commitment

1. We will be clear in our dealings with you as to what information about you we will collect and how we will use it.
2. We will use personal information only for the purposes for which it was originally collected and we will make sure we delete it securely.
3. We do our very best to protect your privacy by using security technology appropriately. This means:
   1. we make sure that we have appropriate security measures to protect your information; and
   2. we make sure that when we ask another organisation to provide a service for us, they have appropriate security measures.

Knowing your rights

1. The law requires us to tell you about your rights and our obligations to you in regards to the processing and control of your personal data. We do this now, by requesting that you read the information provided at www.knowyourprivacyrights.org. The same website provides useful definitions of some of the key terms you will find in this notice. If you are uncertain about any aspect after reading this notice, or would like additional information you are welcome to contact us; for this purpose we have provided relevant contact details at the end of this notice.

Who we are

1. The Africa Practice group (“Africa Practice”) comprises Africa Practice Limited, a company registered in the UK with registration number 03920994 and its affiliates and subsidiary companies operating across Africa including principle trading offices in Senegal, Nigeria, Kenya, Tanzania, Botswana and South Africa. The address and contact details of all our office locations are to be found on our website at: www.africapractice.com 
2. Africa Practice is both a data controller and a data processor. That is, we directly control the processing of certain categories of your personal data as described below – and we may also process data on behalf of our clients under a suitable services contract. 

Specifically, under UK law:

• The data controller is : Africa Practice Limited, registered at: 4th Floor, Metroline House, 118 – 122 College Road, Harrow, Middlesex, England, HA1 1BQ.
• Our data protection officer is Murtaza Gulamhusein: [email protected]

The lawful bases on which we process information about you

1. The law requires us to determine under which of six defined bases we process different categories of your personal information, and to notify you of the basis for each category.
2. If a basis on which we process your personal information is no longer relevant then we shall immediately stop processing your data.
3. If the basis changes then if required by law we shall notify you of the change and of any new basis under which we have determined that we can continue to process your information.

Information we process because we have a contractual relationship with you

1. When you enter into a service or other contractual agreement with us, or create an account on an Africa Practice website, or otherwise agree to our terms and conditions, a contract is formed between you and us.
2. In order to carry out our obligations under that contract we will  process the information you give us. Some of this information may be personal information. We may use it in order to:

• verify your identity for security purposes or to detect and manage fraud and credit risk.
• manage a contractual relationship with you as a client or service provider, or affiliate or business partner, including updating and enhancing our records and the routine exchange of related information by various media
• provide you with suggestions and advice on strategies and actions or the purchase of additional products and services including those that may be available from third parties.
• Act as a Data Processor for personal information on third parties that we manage on your behalf in the context of a service contract and where you are therefore the Data Controller with legal responsibility to comply with relevant data protection and privacy legislation within your own jurisdiction.  

1. We may aggregate information provided to us under a contract and use it to provide class information, for example to monitor our performance with respect to a particular service we provide.
2. We shall ordinarily continue to process your personal information until the contract between us ends or is terminated by either party under the terms of the contract. However we may maintain a copy of this information on our contractual relationship for compliance purposes, or for research purposes or for the purposes of monitoring and improving our performance.
3. Our work for you may require us to pass your information to our third-party service providers, agents, subcontractors and other associated organisations for the purposes of completing tasks and providing the Services to you on our behalf.  However, when we use third party service providers, we disclose only the personal information that is necessary to deliver the Services and we have contracts in place that require them to keep your information secure and to guarantee compliance with all applicable data protection legislation.

Information we process for the purposes of legitimate interests

1. We may process your information on the basis there is a legitimate interest, either to you or to us, in doing so.  Under “legitimate interests” we can process your personal information if we have a genuine and legitimate reason and we are not harming any of your rights and interests.
2. Africa Practice’s core business includes the provision of business intelligence, thought leadership and strategic advisory services for a range of clients operating, or with interests in, the African continent, therefore we may process your personal information where:

• you are a media professional and there is a mutual interest between us to maintain each others personal information in order to exchange valuable information about activities, events, trends, businesses or people within each others areas of interest. 
• you browse our website or contact us by any means to ask for information in relation to our business, including job opportunities, or to ask for our advice.
• You are a professional with a constructive interest in furthering economic, social, political or commercial development in Africa and either (a) you are receiving an opt-in newsletter from us with information on events and current affairs on the continent or (b) we reasonably believe that you may be interested in hearing from us regarding opportunities to work under a services or other form of agreement, or to share professional insights to mutual advantage.
• you are a public official or other influential person with publicly stated positions on events or activities relating to the countries of Africa and where we may undertake research in order to enhance our knowledge and understanding of these events and related trends and this research legitimately includes your personal information including special category personal information such as political affiliations and interests.
• you have consented to participate in a survey or other information gathering exercise undertaken on our behalf or that of a client of Africa Practice.

1. Where we process your information on this basis, we do after having given careful consideration to:

• whether the same objective could be achieved through other means
• whether processing (or not processing) might cause you harm
• whether you would expect us to process your data, and whether you would, in the round, consider it reasonable to do so.

Profiling

1. We may analyse your personal information to create a profile of your interests and preferences for our legitimate business purposes including the provision of advisory services, or so that we can contact you with information relevant to you. 

Information we process because we have a legal obligation

1. We are subject to the law like everyone else. Sometimes, we must process your information in order to comply with a statutory obligation. For example, we may be required to give information to legal authorities if they so request or if they have the proper authorisation such as a search warrant or court order. This may include your personal information.

Job application and employment

1. If you send us information in connection with a job application, we may keep this in case we decide to contact you at a later date.
2. If we employ you, we will collect and process information about you and your work from time to time throughout the period of your employment. This information may include special category information such as medical records. It will be used only with your permission and for purposes directly relevant to your employment. After your employment has ended, we may keep your file for a reasonable period of time before destroying or deleting it.

Data may be processed outside the United Kingdom (UK)

1. Africa Practice’s group structure means that we routinely share personal information for the purposes set out in this notice outside of the UK.
2. Additionally we may use outsourced services including those of data processors in countries outside the UK from time to time in any aspect of our business. 
3. Accordingly data obtained within the UK or any other country could be processed outside the UK.
4.  If we or our service providers transfer any information outside the UK, it will only be done with the relevant protection (stated under UK law) being in place and specifically the following safeguards will apply:

• the processor is within the same corporate group as our business or organisation and abides by the same binding corporate rules regarding data processing.
• the data protection provisions in our contracts with data processors are governed by Standard Contractual transfer clauses written by or approved by the relevant supervisory authority in the UK.

Google Analytics

1. We use Google Analytics on our sites for anonymous reporting of site usage and for advertising on the site. If you would like to opt-out of Google Analytics monitoring your behaviour on our sites please use this link (https://tools.google.com/dlpage/gaoptout/)

Internet Based Advertising

1. We use Linkedin, Facebook, Twitter (‘X’) and other advertising services and as such may place tracking codes on our website so that we can manage the effectiveness of these campaigns.  We do not store any personal data within this type of tracking.

Cookies

1. Cookies are text files put on your computer to collect standard internet log information and visitor behaviour information.  This information is then used to track visitor use of the website and to create statistical reports on website activity.  For more information visit www.aboutcookies.org or www.allaboutcookies.org.
2. You can set your browser not to accept cookies and the above websites tell you how to remove cookies from your browser.  

Our use of remarketing

1. Remarketing involves placing a cookie on your computer when you browse our website in order to be able to serve to you an advert for our products or services when you visit some other website.
2. We may use a third party to provide us with remarketing services from time to time. If so, then if you have consented to our use of cookies, you may see advertisements for our products and services on other websites.

How long will we hold your data for?

1. We will routinely review and consider our legitimate need to maintain your personal information and delete it when this legitimate need no longer applies. We would not normally expect to maintain your personal information outside of a contractual or other mutually agreeable relationship for longer than seven years

Security precautions in place about data collected

1. Africa Practice maintains all personal information securely protected by secure passwords, ssl encryption, physical protections, effective internal policies and training  and through relationships with secure accredited data processors. 
2. However non-sensitive details (your email address etc.) may routinely be sent over the Internet, and this can never be guaranteed to be 100% secure. As a result, while we strive to put adequate protections in place we cannot guarantee the 100% security of any such information.
3. Where you hold or transmit any personal information via any websites or systems controlled by Africa Practice we make our best effort to ensure its security on our systems. Where we have given (or where you have chosen) a password which enables you to access certain parts of our websites, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.

Access to your information, correction and deletion

1. You have important rights with respect to your personal information:

• the right to make a Subject Access Request to receive copy of information that we hold about you
• the right to ask us to correct or remove information you think is inaccurate
• the right to ask us to completely delete all information that we hold about you.

1. If you wish to exercise any of these rights please email or write to us at the following address: Murtaza Gulamhusein, Africa Practice Limited, 4th Floor, Metroline House, 118 – 122 College Road, Harrow, Middlesex, England, HA1 1BQ.. Email : [email protected]

Changes to our Privacy Policy

1. We keep our privacy policy under regular review and we will place any updates on this web page.  This privacy policy was last updated in September 2024 and the Version number is 1.4 in line with the GDPR guidelines.

How you can complain

1. If you are not happy with our privacy policy or if you have any complaint, then you should tell us by email to [email protected].
2. If a dispute is not settled then we hope you will agree to attempt to resolve it by engaging in good faith with us in a process of mediation or arbitration. You have the additional right to lodge a complaint with the Information Commissioner’s Office. This can be done at https://ico.org.uk/concerns/