Privacy Policy

Africa Climate and Energy Nexus ("AfCEN," "we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website https://africacen.org/ (the "Site") or use our Platform services.

It applies to all users, including Investors, Project Developers, and Data Contributors, in compliance with the Kenyan Data Protection Act 2019 (KDPA) and the General Data Protection Regulation (GDPR) of the European Union.

By using the Platform, you consent to our practices. If you do not agree, please do not use it.

Information We Collect

We collect:

• Personal Data: Name, email, phone, address, role (e.g., Investor), Know Your Customer (KYC) documents (identification, proof of address) for verified users.
• Project and Financial Data: For developers: project details, funding needs. For investors: investment preferences, transaction history.
• Usage Data: Internet Protocol (IP) address, browser type, pages visited, time stamps via cookies and analytics tools (e.g., Google Analytics).
• User-Generated Content: Uploaded data (e.g., hyperlocal climate metrics), which may include sensitive info (e.g., location data).
• Third-Party Data: From partners (e.g., sensors, government datasets) or integrations (e.g., blockchain for transactions).

We do not knowingly collect data from children under 13. If we discover such data, we will notify parents (if identifiable) and delete it within 10 days, in line with the Children's Online Privacy Protection Act (COPPA) principles and the Kenyan Data Protection Act 2019 (KDPA).

How We Use Your Information

We use data to:

• Provide and improve Platform services (e.g., matching projects, verifying uploads).
• Communicate (e.g., newsletters, updates—opt-out anytime).
• Process investments and rewards (e.g., tokenized transactions via blockchain).
• Ensure security and compliance (e.g., Know Your Customer [KYC]/Anti-Money Laundering [AML] checks).
• Potentially analyze trends for climate impact reporting.
• Comply with legal obligations.

We obtain explicit consent via opt-in mechanisms for non-essential processing (e.g., marketing or analytics beyond core services).

Cookies and Tracking Technologies

We use cookies for functionality (e.g., session management), analytics (e.g., user behavior), and advertising.

• A detailed list of cookies is available upon request.
• You can manage preferences via browser settings or our cookie banner.
• Third-party cookies (e.g., from Google) may track across sites.

Sharing Your Information

We share data only as necessary:

• Service Providers: For hosting, analytics, payment processing (e.g., blockchain partners), bound by written agreements per Article 28 of the General Data Protection Regulation (GDPR).
• Partners and Affiliates: For project matching or Decentralized Autonomous Organization (DAO) governance (anonymized where possible).
• Legal/Regulatory: To comply with laws (e.g., Kenyan Data Protection Act 2019 [KDPA], General Data Protection Regulation [GDPR] for European Union users).
• Business Transfers: In mergers/acquisitions.

We do not sell personal data. Data Contributors' uploads may be shared in aggregated form for public climate insights. In case of a data breach, we will notify affected users within 72 hours where required by law.

Data Security

We implement reasonable measures (e.g., encryption, access controls, blockchain audits) to protect data.

However, no system is fully secure - transmit at your own risk.

Our breach response plan includes immediate investigation and notification.

International Data Transfers

As a Kenyan entity, data is stored in Kenya and secure regions (e.g., European Union-compliant clouds).

Transfers outside Kenya follow safeguards like Standard Contractual Clauses under the General Data Protection Regulation (GDPR).

Your Rights

Depending on your location:

• Access, Correct, Delete: Request via admin@africacen.org.
• Opt-Out: From marketing or cookies.
• Portability: Receive your data in a structured format.
• Object/Withdraw Consent: At any time, without affecting prior processing.
• Restriction: On processing under certain conditions.

We respond within 30 days. Denied requests may be appealed within 15 days to admin@africacen.org. For General Data Protection Regulation (GDPR) rights, you may complain to the supervisory authority (e.g., Office of the Data Protection Commissioner in Kenya or relevant European Union body).

Retention

We retain data as long as needed for purposes: usage data for 1 year, financial data for 7 years per Kenyan tax laws, or as required by the Kenyan Data Protection Act 2019 (KDPA).

We then securely delete or anonymize it.

Third-Party Links

The Platform may link to external sites (e.g., partner funding portals).

We are not responsible for their privacy practices—review theirs.

Changes to This Policy

We may update this Policy, with notice via email or the Site.

Continued use constitutes acceptance.

Please check periodically for changes.

This Policy complies with the Kenyan Data Protection Act 2019 (KDPA) and the General Data Protection Regulation (GDPR) where applicable, promoting data equity for climate justice.