Privacy policy

Who we are

The data controller is the African Fine Coffees Association (AFCA), Plot 104, Block 5, Kibuga, Nsambya, Kampala, Uganda. For any privacy question or request, contact secretariat@afca.coffee.

What we collect and why

We only collect what we need to run the conference:

• Registration & contact details: name, email, telephone, country, organisation and job title: to process your registration, issue your badge, and contact you about the event.
• Dietary and accessibility requirements, where you choose to provide them, so we can cater for you and make the event accessible. This can be sensitive (special-category) information, so we collect it only with your explicit consent and use it solely for on-site arrangements.
• Payment information: handled entirely by our payment processor (see below). We never see or store your full card or mobile-money details; we retain only the order reference, amount and status.
• Exhibitor and sponsor enquiry details: company, contact and the information you submit: to respond to and manage your participation.

Lawful basis

We process registration and contact data to perform our contract with you (your registration) and for our legitimate interest in running the event. Dietary/accessibility data and marketing emails rely on your consent, which you can withdraw at any time.

Who processes your data on our behalf

We share the minimum necessary with trusted processors, under agreements that require them to protect your data:

• PesaPal: payment processing (cards, mobile money, bank). Your payment credentials go directly to PesaPal, not to us.
• Resend: sending your confirmation, badge and service emails.
• Supabase / Amazon Web Services: secure database and file hosting for the platform.

We do not sell your personal data, and we never share it for third-party marketing.

How long we keep it

We keep registration and order records for as long as needed to run the event and meet our legal and accounting obligations, then remove or anonymise them. You can ask us to delete your data sooner (see your rights below).

Security

Data is transmitted over encrypted connections and stored on access-controlled infrastructure. Payment card data never reaches our systems. We restrict staff access to what each role needs.

Cookies

We use only the cookies necessary to keep you signed in to your account and to secure forms. We do not use advertising or cross-site tracking cookies.

Your rights

You may ask us to access, correct, delete, or transfer your personal data, withdraw consent, or object to processing. To exercise any of these, email secretariat@afca.coffee. If you are in the EU/EEA and believe we have not handled your data properly, you may also complain to your local data-protection authority.

Changes

We may update this policy from time to time; the date above shows the latest revision.