Skip to main content
AFROPORTUNITY

Data protection

Privacy policy

What we collect, why, how long we keep it and how you stay in control. This site sets no cookies and uses no third-party trackers.

Last updated[TO BE COMPLETED: date of last update]

Data controller

AFROPORTUNITY is the controller of the personal data processing described in this document.

The site addresses counterparts based in West Africa and in international markets, the European Union included. This policy is therefore drafted in line with Regulation (EU) 2016/679, known as the GDPR, which sets the most demanding standard applicable to our exchanges.

It covers this site alone. Exchanges that follow the signature of an NCNDA or a mandate are governed by those contracts.

Data controller
AFROPORTUNITY — [TO BE COMPLETED: exact legal name]
Registered office
Office 301, Westburry Tower, Business Bay, Dubai, United Arab Emirates
Data protection
[TO BE COMPLETED: contact details of the data protection officer, or a statement that no officer has been appointed]

Data we collect

The site creates no accounts, offers no personal area and processes no payments. The only collection of personal data takes place when you submit the contact form.

The fields submitted are precisely the following:

  • First and last name — required
  • Company or organisation — required
  • Email address — required
  • Telephone number — required
  • Country — required
  • Sector concerned: mining, infrastructure, energy or other — required
  • Nature of the requirement: funding, technical partner, offtake, EPC or other — required
  • Project stage: concept, permit, feasibility or production — required
  • Indicative project size — required
  • Reference of a published opportunity, where your enquiry concerns a specific file — optional
  • Your message — required
  • The language in which you are viewing the site — captured automatically

Two technical items are recorded with your submission: the IP address the request came from and the time it was received. They serve only to limit automated submissions — five per hour per IP address — and to keep a record of the enquiry.

The form also carries a hidden field and a timestamp marking when you began filling it in, both intended to screen out bots. Neither holds any data about you.

The content of your message stays under your control: include only what is needed to open a conversation.

Purpose of the processing

The data submitted is used to handle your deal enquiry: to qualify it, to respond to it and, where appropriate, to move to the contractual steps — counterparty checks, NCNDA, mandate.

It is used for nothing else. In particular, there is:

  • no unsolicited marketing
  • no profiling and no fully automated decision-making
  • no sale, rental or sharing of contact files with third parties
  • no targeted advertising

Legal basis

The processing rests on two grounds provided for by the GDPR:

  • The performance of pre-contractual steps taken at your request, within the meaning of Article 6(1)(b), where your message is intended to open a business relationship.
  • The legitimate interest of AFROPORTUNITY, within the meaning of Article 6(1)(f), in responding to a professional approach and in protecting its form against automated submissions.

No processing relies on consent, since the site sets no trackers.

Recipients

Your data is accessible:

  • to the people at AFROPORTUNITY responsible for qualifying enquiries, limited to what each of them needs to see;
  • to the site’s host, Hostinger International Ltd, which hosts the files and delivers the emails, acting as a processor.

No data is passed to a third party for commercial purposes.

Your identity and that of your project are disclosed to a counterparty — investor, EPC contractor, trader, family office — only with your agreement and under an NCNDA. That is the very principle of how we work.

Retention periods

Data is not kept indefinitely:

Enquiry taken no further
[TO BE COMPLETED: period selected, for example 12 months from the last exchange]
Business relationship engaged
The term of the mandate, then the 24-month contractual tail period, then [TO BE COMPLETED: applicable statutory archiving period]
Form log
[TO BE COMPLETED: purge period for the log holding the IP address and timestamp, for example 12 months]
Rate limiting
One rolling hour, then automatic deletion

Once these periods expire, the data is deleted or anonymised.

Transfers outside the European Union

AFROPORTUNITY works the West Africa ↔ World corridor. Your data may therefore be accessed from our offices in Guinea, Senegal, Côte d’Ivoire, Burkina Faso and the United Arab Emirates, and, once an NCNDA has been signed, disclosed to counterparties in Europe, North America and the Gulf. Some of these destinations lie outside the European Union. We would rather state this plainly than leave it unsaid.

Where a destination country is not covered by an adequacy decision of the European Commission — which is the case for our West African offices and for the United Arab Emirates — the transfers concerned are framed by [TO BE COMPLETED: safeguards selected — European Commission standard contractual clauses, or reliance on a derogation under Article 49 of the GDPR].

Location of the hosting servers: [TO BE COMPLETED: country of the data centre selected with the host].

Security

The site is served over HTTPS. Incoming enquiries are accessible to a small number of people, through password-protected mailboxes. The enquiry log is not publicly exposed. We apply the principle of minimisation: we ask only for what is useful in qualifying a file.

No arrangement offers absolute security. Do not attach confidential documents to a first message: sensitive items — titles and permits, technical reports, financial statements — are exchanged once an NCNDA has been signed, through a channel agreed between the parties.

Cookies and local storage

This site sets no cookies. No consent banner is therefore needed, and there is nothing for you to refuse. In practice, there is:

  • no analytics cookie
  • no advertising tracker and no tracking pixel
  • no third-party analytics service
  • no embedded social media button

One item only is stored in your browser: your language preference, kept in local storage under the key afp-locale. It never leaves your device, is sent to no server and serves only to display the site again in the language you chose.

You can delete it at any time by clearing site data in your browser settings. The site will carry on working normally.

Your rights

You hold rights over the data that concerns you:

  • Access — to obtain confirmation that processing exists and a copy of the data held.
  • Rectification — to have inaccurate or incomplete data corrected.
  • Erasure — to request deletion of the data, subject to our retention obligations.
  • Restriction — to request the temporary freezing of processing you contest.
  • Objection — to object, on grounds relating to your particular situation, to processing based on legitimate interest.
  • Portability — to receive the data you provided to us, in a machine-readable format.
  • Post-mortem directives — to determine what becomes of your data after your death.

To exercise these rights, write to us at the address below, stating what your request concerns.

A reply is provided within one month. That period may be extended by two months where the request is complex or where several requests are made: you are informed accordingly, with reasons given for the extension. Proof of identity may be requested where there is reasonable doubt as to the identity of the applicant.

Complaint to a supervisory authority

If you consider that the processing of your data is not compliant, send your complaint to us first: most situations are settled directly.

You retain in any event the right to lodge a complaint with a supervisory authority. If you reside in the European Union, this is the data protection authority of your country of residence, your place of work or the place of the alleged infringement — in France, the Commission nationale de l’informatique et des libertés (CNIL).

Competent authority at AFROPORTUNITY’s registered office: [TO BE COMPLETED: competent data protection authority and its contact details].

Changes to this policy

This policy may be amended to reflect a change to the site, a change of tool or a regulatory development. The date of the last update appears at the top of the page.

Any substantial change is flagged on this page. We encourage you to re-read it before each new submission of the form.

Read the legal notice