Data protection
Privacy policy
What we collect, why, how long we keep it and how you stay in control. This site sets no cookies and uses no third-party trackers.
Data controller
AFROPORTUNITY is the controller of the personal data processing described in this document.
The site addresses counterparts based in West Africa and in international markets, the European Union included. This policy is therefore drafted in line with Regulation (EU) 2016/679, known as the GDPR, which sets the most demanding standard applicable to our exchanges.
It covers this site alone. Exchanges that follow the signature of an NCNDA or a mandate are governed by those contracts.
- Data controller
- AFROPORTUNITY — [TO BE COMPLETED: exact legal name]
- Registered office
- Office 301, Westburry Tower, Business Bay, Dubai, United Arab Emirates
- Data protection
- [TO BE COMPLETED: contact details of the data protection officer, or a statement that no officer has been appointed]
Data we collect
The site creates no accounts, offers no personal area and processes no payments. The only collection of personal data takes place when you submit the contact form.
The fields submitted are precisely the following:
- First and last name — required
- Company or organisation — required
- Email address — required
- Telephone number — required
- Country — required
- Sector concerned: mining, infrastructure, energy or other — required
- Nature of the requirement: funding, technical partner, offtake, EPC or other — required
- Project stage: concept, permit, feasibility or production — required
- Indicative project size — required
- Reference of a published opportunity, where your enquiry concerns a specific file — optional
- Your message — required
- The language in which you are viewing the site — captured automatically
Two technical items are recorded with your submission: the IP address the request came from and the time it was received. They serve only to limit automated submissions — five per hour per IP address — and to keep a record of the enquiry.
The form also carries a hidden field and a timestamp marking when you began filling it in, both intended to screen out bots. Neither holds any data about you.
The content of your message stays under your control: include only what is needed to open a conversation.
Purpose of the processing
The data submitted is used to handle your deal enquiry: to qualify it, to respond to it and, where appropriate, to move to the contractual steps — counterparty checks, NCNDA, mandate.
It is used for nothing else. In particular, there is:
- no unsolicited marketing
- no profiling and no fully automated decision-making
- no sale, rental or sharing of contact files with third parties
- no targeted advertising
Legal basis
The processing rests on two grounds provided for by the GDPR:
- The performance of pre-contractual steps taken at your request, within the meaning of Article 6(1)(b), where your message is intended to open a business relationship.
- The legitimate interest of AFROPORTUNITY, within the meaning of Article 6(1)(f), in responding to a professional approach and in protecting its form against automated submissions.
No processing relies on consent, since the site sets no trackers.
Recipients
Your data is accessible:
- to the people at AFROPORTUNITY responsible for qualifying enquiries, limited to what each of them needs to see;
- to the site’s host, Hostinger International Ltd, which hosts the files and delivers the emails, acting as a processor.
No data is passed to a third party for commercial purposes.
Your identity and that of your project are disclosed to a counterparty — investor, EPC contractor, trader, family office — only with your agreement and under an NCNDA. That is the very principle of how we work.
Retention periods
Data is not kept indefinitely:
- Enquiry taken no further
- [TO BE COMPLETED: period selected, for example 12 months from the last exchange]
- Business relationship engaged
- The term of the mandate, then the 24-month contractual tail period, then [TO BE COMPLETED: applicable statutory archiving period]
- Form log
- [TO BE COMPLETED: purge period for the log holding the IP address and timestamp, for example 12 months]
- Rate limiting
- One rolling hour, then automatic deletion
Once these periods expire, the data is deleted or anonymised.
Transfers outside the European Union
AFROPORTUNITY works the West Africa ↔ World corridor. Your data may therefore be accessed from our offices in Guinea, Senegal, Côte d’Ivoire, Burkina Faso and the United Arab Emirates, and, once an NCNDA has been signed, disclosed to counterparties in Europe, North America and the Gulf. Some of these destinations lie outside the European Union. We would rather state this plainly than leave it unsaid.
Where a destination country is not covered by an adequacy decision of the European Commission — which is the case for our West African offices and for the United Arab Emirates — the transfers concerned are framed by [TO BE COMPLETED: safeguards selected — European Commission standard contractual clauses, or reliance on a derogation under Article 49 of the GDPR].
Location of the hosting servers: [TO BE COMPLETED: country of the data centre selected with the host].
Security
The site is served over HTTPS. Incoming enquiries are accessible to a small number of people, through password-protected mailboxes. The enquiry log is not publicly exposed. We apply the principle of minimisation: we ask only for what is useful in qualifying a file.
No arrangement offers absolute security. Do not attach confidential documents to a first message: sensitive items — titles and permits, technical reports, financial statements — are exchanged once an NCNDA has been signed, through a channel agreed between the parties.
Your rights
You hold rights over the data that concerns you:
- Access — to obtain confirmation that processing exists and a copy of the data held.
- Rectification — to have inaccurate or incomplete data corrected.
- Erasure — to request deletion of the data, subject to our retention obligations.
- Restriction — to request the temporary freezing of processing you contest.
- Objection — to object, on grounds relating to your particular situation, to processing based on legitimate interest.
- Portability — to receive the data you provided to us, in a machine-readable format.
- Post-mortem directives — to determine what becomes of your data after your death.
To exercise these rights, write to us at the address below, stating what your request concerns.
A reply is provided within one month. That period may be extended by two months where the request is complex or where several requests are made: you are informed accordingly, with reasons given for the extension. Proof of identity may be requested where there is reasonable doubt as to the identity of the applicant.
Complaint to a supervisory authority
If you consider that the processing of your data is not compliant, send your complaint to us first: most situations are settled directly.
You retain in any event the right to lodge a complaint with a supervisory authority. If you reside in the European Union, this is the data protection authority of your country of residence, your place of work or the place of the alleged infringement — in France, the Commission nationale de l’informatique et des libertés (CNIL).
Competent authority at AFROPORTUNITY’s registered office: [TO BE COMPLETED: competent data protection authority and its contact details].
Changes to this policy
This policy may be amended to reflect a change to the site, a change of tool or a regulatory development. The date of the last update appears at the top of the page.
Any substantial change is flagged on this page. We encourage you to re-read it before each new submission of the form.
Read the legal notice