Legal · Privacy

This policy explains how we collect and use personal data across the Africa Re at 50 website, mobile app, admin portal, and on-site operations (together, the "Africa Re at 50 Services"). The website and app share a single account: you register at anniversary.africa-re.com and, once approved, sign in to the mobile app with the same email and password.

By using the Africa Re at 50 Services, you accept this policy.

This anniversary is hosted by African Reinsurance Corporation ("Africa Re"), and delivered by the Planning Committee.

Africa Re is the primary Data Controller for all Africa Re at 50 operations: registration, visa facilitation, logistics, and event delivery.

We collect only what we need to register you, deliver the anniversary, support your travel and on-site needs, comply with law, and keep the event safe. Required fields are marked at the point of collection.

Account

Email, hashed password (we never see your password in plain text), one-time passcodes for verification, sign-in tokens, and your role on the app (guest, staff, or admin).

Profile

Name, gender, nationality, country and city of residence, organisation, job title, phone number, biography, LinkedIn URL, profile photo (optional), and guest category.

Identity, visa, and travel (sensitive)

Where you request visa support or accreditation requires it: passport details and biographic-page scan, or national ID details for local guests; visa application data and accompanying family member details; flight, arrival, and departure information. We treat this data as sensitive and apply additional safeguards.

Accommodation, dining, and on-site preferences

Hotel selection, check-in and check-out dates, room type, shuttle requirement, dietary requirements and allergies, accessibility needs, and emergency contact.

Group, sponsor, and speaker data

If you register a group, sponsor the anniversary, or speak at it, we collect the additional contact or session data needed for that role.

Collected automatically

IP address and approximate region inferred from it, browser and device information, app and screen events, language and time zone. The mobile app additionally receives a push token from APNs (iOS) or Firebase Cloud Messaging (Android) so we can deliver notifications. The website stores draft registration state in your browser so you can resume if you close the tab.

On-site events

When your QR badge is scanned, we record the guest ID, checkpoint, timestamp, and the staff device that performed the scan. Scans made offline are queued on the device and synced when the network returns.

Stored on your device

If you enable biometric sign-in, your credentials are held in your device's secure storage. Biometric data never leaves your device. The admin scanner uses the camera to read QR codes locally; no video is recorded or uploaded.

What we do not collect

We do not collect precise or background location, contacts, microphone audio, or your photo library. We do not use advertising or marketing cookies, advertising SDKs, or cross-site or cross-app tracking. We do not sell or rent personal data, and we do not share it for behavioural advertising.

Contract

Registration and delivery of Africa Re at 50 services you signed up for.

Legal obligation

Immigration and health and safety records.

Legitimate interests

Safety, fraud prevention, service improvement, internal administration. You can object at any time.

Consent

Optional marketing and any genuinely optional processing. Withdrawable at any time.

We do not use your data for automated decisions that produce legal or similarly significant effects.

We share data only with the parties below, and only what they need.

Hosting and infrastructure

Our primary cloud hosting is provided by Amazon Web Services (AWS). We also use a small number of supporting providers for database hosting, deployment, transactional email, and mobile build delivery. Push notifications are delivered through Apple Push Notification service (APNs) on iOS and Firebase Cloud Messaging on Android. All processors operate under written data processing agreements and only on our instructions. A current list of subprocessors is available on request from support@africa-re.com.

Hotels and travel partners

Where you ask us to arrange accommodation, shuttles, or tours, we share the minimum information the partner needs (name, dates, room type, accessibility or dietary needs, pickup point). The hotel becomes an independent controller for any additional data you provide on arrival.

Host-country authorities

We share passport and visa information with the Nigeria Immigration Service, the Ministry of Foreign Affairs, or equivalent authorities where the law requires.

Professional advisers, auditors, and insurers

Under duties of confidentiality.

Legal claims and safety

Where we are legally compelled, or where disclosure is necessary to protect guests, staff, or the public, or to defend legal claims.

We do not authorise our processors to use your data for their own purposes.

Africa Re at 50 is organised from Nigeria, and some of the providers that help us run it operate in other countries, so your personal data may be processed outside your home country. Wherever it is processed, we protect it to the standard set out in this policy: we put appropriate safeguards in place with our providers and apply technical measures such as encryption in transit and at rest, access controls, and audit logging. To ask about the safeguards that apply to your data, email support@africa-re.com.

We keep personal data only for as long as we need it for the purposes set out in this policy or to meet legal obligations.

Account, profile, and event records

While your account is active, plus up to 24 months after the anniversary.

Visa, passport, and travel data

Up to 12 months after the anniversary.

On-site scan logs

Up to 24 months for safety, capacity, and audit.

Survey and feedback data

Up to 24 months, then anonymised.

At the end of each period we delete or anonymise the data so it no longer identifies you.

Depending on where you live, you have some or all of the following rights, and we honour them worldwide where practical:

• Access, rectification, erasure, restriction, portability, and objection to processing.
• Withdraw consent at any time, without affecting prior processing.
• Delete your account . See the dedicated steps in Delete your account below.
• Lodge a complaint with the Nigeria Data Protection Commission, your EEA supervisory authority, the UK Information Commissioner's Office, or the California Privacy Protection Agency, as applicable.

To exercise any right, email support@africa-re.com. We respond within 30 days and may request proof of identity. There is no fee unless the request is manifestly unfounded or excessive.

California residents

Have rights under the CCPA and CPRA to know, delete, correct, opt out of sale or sharing (we do neither), and limit use of sensitive personal information.

Children

Africa Re at 50 is a professional event and is not directed to children under 16. We do not knowingly collect personal data from children under 16.

We protect data with TLS 1.2 or higher in transit, encryption at rest, access controls and logging, and secure authentication. We carry out periodic security testing and code review before the anniversary.

If a personal data breach is likely to result in a risk to your rights, we will notify the Nigeria Data Protection Commission and, where required, affected guests without undue delay, following the GDPR 72-hour benchmark for international guests.

Guests can message each other directly through the app. We provide tools to keep that space safe and we act on the data those tools generate.

Reports

You can report another guest, a message, or other content from the More menu on a profile or chat header. We collect the reason you select (harassment, impersonation, spam, inappropriate content, safety concern, or other), any note you add, and a reference to the reported item. Reports are reviewed by our moderation team and may result in a warning, suspension, or removal of the reported account. We retain reports and moderation records for up to 24 months, even after either party deletes their account.

Blocks

You can block and unblock other guests from Profile › Privacy & Safety › Blocked guests. A block hides each user from the other in the directory and search, prevents messages in either direction, hides existing threads, and suppresses related push notifications. We retain blocks while either account is active and clear them on account deletion.

Prohibited content

The Africa Re at 50 Services may not be used to send or share content that harasses, threatens, or intimidates another person; impersonates another individual or organisation; contains hate speech, sexually explicit material, or content that exploits minors; promotes violence or illegal activity; is spam, fraud, or unsolicited advertising; or violates the rights of any third party. We may remove content, restrict accounts, or terminate access without notice for serious or repeated violations.

The Africa Re at 50 website uses a small number of strictly necessary cookies and local-storage keys to keep you signed in and to preserve your in-progress registration. We do not use advertising, marketing, or third-party analytics cookies on the website.

The mobile app does not use browser cookies. It requests camera and photo library access only for QR scanning and profile photos.

We may update this policy as the anniversary approaches. When we make a material change, we will update the date at the top, post a notice on anniversary.africa-re.com/privacy, and ask for your consent or notify you by email where the change expands how we use your data.

For privacy questions, requests, or to exercise any of your rights, contact our Data Protection Officer.