AfriConnect Exchange

Data Controller

The Data Controller for AfriConnect Exchange is Africonnect Exchange CIC. If you have any questions or requests regarding personal data, please contact:privacy@africonnect-exchange.org.

Data Protection Officer (DPO)

Africonnect Exchange CIC has not appointed a separate Data Protection Officer. Please use the mailbox above for privacy related requests.

Table of contents

1. Introduction
2. What We Collect
3. How We Use Your Information
4. Cookies
5. Data Retention
6. Your Rights
7. International Users
8. Data Sharing
9. Security
10. Contact Us

1. Introduction

AfriConnect Exchange (a project of Africonnect Exchange CIC) is committed to protecting your personal data. This policy explains what we collect, why we collect it, and how you can control it. This policy applies to personal data processed by AfriConnect Exchange in connection with the services we provide.

2. What We Collect

We may collect the following types of personal data:

• Identity Data: Name, email address, contact details
• Profile Data: Services offered, location, biography
• Usage Data: Login activity, page views, interactions
• Payment Data: Processed securely via third-party providers (e.g., Stripe, PayPal)

3. Why We Collect It

We collect your data to:

• Create and manage your account
• Connect you with services and community members
• Improve platform performance and security
• Comply with legal obligations, including GDPR

Legal bases for processing

We rely on one or more of the following legal bases to process personal data: consent, performance of a contract, compliance with legal obligations, and our legitimate interests where appropriate. When we rely on consent you have the right to withdraw it at any time by contacting the address below or changing your cookie preferences.

4. Your Rights

Under the UK GDPR, you have the right to:

• Access your personal data
• Correct inaccurate or incomplete data
• Delete your data ("right to be forgotten")
• Withdraw consent at any time
• Object to certain types of processing
• File a complaint with the Information Commissioner's Office (ICO)

To exercise any of these rights please contact us at privacy@africonnect-exchange.org. We will respond within the timescales required under applicable law.

5. Data Sharing

We do not sell your data. We only share it with:

• Trusted service providers (e.g., hosting, analytics, payment processors)
• Legal authorities when required by law

We take care to only share the minimum necessary information with service providers and we ensure appropriate contractual safeguards and data processing agreements are in place. Where data is transferred outside the UK/EEA we rely on approved transfer mechanisms such as adequacy decisions or standard contractual clauses.

6. Data Security

We use reasonable administrative, technical and physical safeguards to protect personal data. Examples of these measures include:

• SSL encryption
• Secure servers
• Role-based access controls
• Regular security audits

While we use reasonable security measures, no system is 100% secure. Please contact us if you suspect a data breach or have any security concerns.

7. Cookies

We use cookies to improve your experience and to support the features described on our Cookie Policy page. You can manage cookie preferences via your browser or using the cookie preferences banner. For more details, see our Cookie Policy.

Data retention

We retain personal data in accordance with legal and business requirements, for example:

• Account details and profile data: retained while the account is active and up to 3 years after account closure unless required longer for legal reasons.
• Transaction and order data: retained for 7 years to comply with tax and accounting obligations.
• Messages and support logs: retained for up to 3 years for dispute and operational support.
• Analytics logs and cookies: retained for up to 24 months depending on cookie type (see Cookie Policy).

Children’s data

Our platform is intended for users 18 years or older. We do not knowingly collect personal data from children under 18. If you believe we have collected data about a child, please contact us to request deletion.

Automated decision-making

We may use automated systems for certain processes (e.g., fraud detection). If automated decision-making results in legal effects or significantly affects you, you have rights to request human review, where required by law.

8. Third-Party Services

AfriConnect Exchange may link to or integrate with third-party services, such as payment processors, analytics providers, or social media platforms. These services operate independently and have their own privacy policies and practices. We encourage users to review those policies before engaging with third-party services.

Regional Rights (UK GDPR / Data Protection Act 2018)

If you are located in the United Kingdom, you have specific rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. These include:

• Right of access – You can request a copy of the personal data we hold about you.
• Right to rectification – You can ask us to correct inaccurate or incomplete data.
• Right to erasure – You can request deletion of your personal data under certain conditions.
• Right to restrict processing – You can ask us to limit how we use your data.
• Right to data portability – You can request your data in a structured, commonly used format.
• Right to object – You can object to processing based on legitimate interests or direct marketing.

To exercise these rights, please contact us at privacy@africonnect-exchange.org. Include your jurisdiction (e.g., UK) to help us process your request efficiently.

9. Updates to This Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated via email or platform notice.

10. Contact Us

For privacy questions or data requests, contact: