This Privacy Policy explains how the Global Africa Trade Association ("GATA", "we", "us") collects, uses, stores, and shares your personal and organisational data. We are committed to protecting your privacy and handling your information responsibly.
1 Introduction
1.1 GATA operates the website www.gata.africa and the GATA Member Portal (collectively, the "Platform"). In doing so, GATA processes personal data relating to applicants, Members, and visitors.
1.2 This policy applies to all personal data processed by GATA in connection with membership, events, communications, and use of the Platform. It should be read together with our Terms and Conditions and Membership Agreement.
2 Data Controller
2.1 The data controller for personal data processed by GATA is:
- Organisation: Global Africa Trade Association
- Address: Upper Hill, Nairobi, Kenya
- Email: privacy@gata.africa
- Phone: +254 700 000 000
3 Personal Data We Collect
| Category | Data Collected | Source |
|---|---|---|
| Registration Data | Organisation name, type, registration number, address, sector, employee count, website | Membership application form |
| Contact Data | Contact person name, job title, email address, phone number, LinkedIn profile | Membership application form |
| Payment Data | Invoice details, payment records, billing contact information. Card details are processed by our payment processor and are not stored by GATA. | Payment transactions |
| Usage Data | Login timestamps, pages visited, resources downloaded, event registrations, Member Portal activity | Automated collection via Platform |
| Communications | Email correspondence, support requests, event registrations, survey responses | Direct contact with GATA |
| Technical Data | IP address, browser type and version, device type, operating system, referring URL | Automated collection via Platform |
4 How We Use Your Data
We use the data we collect for the following purposes:
- Membership administration: Processing and managing membership applications, renewals, upgrades, and cancellations;
- Service delivery: Providing access to the Member Portal, trade resources, and other membership benefits;
- Communications: Sending membership notices, renewal reminders, event invitations, newsletters, and trade intelligence updates (where you have consented);
- Events management: Registering you for events, issuing attendance confirmations, and managing event logistics;
- Payments: Processing membership fee invoices and payments;
- Member Directory: Displaying your organisation's profile to other Members as part of the Member Directory (limited to name, tier, sector, and country unless you provide additional profile information);
- Platform improvement: Analysing usage patterns to improve the Platform's functionality and user experience;
- Legal compliance: Meeting our obligations under applicable laws, including anti-money laundering, sanctions, and data protection legislation;
- Security: Detecting, preventing, and responding to fraud, abuse, or security incidents.
5 Legal Bases for Processing
| Processing Activity | Legal Basis |
|---|---|
| Processing your membership application and managing your membership | Performance of a contract (Membership Agreement) |
| Processing membership fee payments | Performance of a contract |
| Sending mandatory membership communications (invoices, policy updates, tier changes) | Performance of a contract / Legitimate interests |
| Sending newsletters, event invitations, and trade intelligence updates | Consent (you may withdraw at any time) |
| Displaying your profile in the Member Directory | Performance of a contract / Legitimate interests |
| Analysing Platform usage for improvements | Legitimate interests |
| Fraud prevention and platform security | Legitimate interests / Legal obligation |
| Compliance with legal and regulatory obligations | Legal obligation |
6 Data Sharing
6.1 GATA does not sell, rent, or trade personal data. We share data only in the following circumstances:
- Member Directory: Your organisation's name, membership tier, sector, and country are visible to other GATA Members via the Member Portal. You may request to limit this information by contacting privacy@gata.africa.
- Service providers: We engage trusted third-party providers for IT hosting, email delivery, payment processing, and event management. These providers are bound by confidentiality and data processing agreements and may only process data on our instructions.
- Events: Where GATA co-hosts events with partner organisations, limited attendee information (name, organisation, tier) may be shared with the co-host for event management purposes. This will be disclosed in the relevant event registration.
- Legal requirements: We may disclose data where required by law, court order, or regulatory authority, or where necessary to protect GATA's legal rights or the safety of Members.
7 International Data Transfers
7.1 GATA is based in Kenya and primarily processes data within Kenya and other African jurisdictions. Some of our service providers may process data in other countries, including the European Economic Area, United Kingdom, or United States.
7.2 Where data is transferred outside Kenya, GATA ensures appropriate safeguards are in place, such as standard contractual clauses, adequacy decisions, or equivalent protections.
8 Data Retention
8.1 We retain personal data for the duration of active membership and for seven (7) years after membership ends, to satisfy legal, accounting, and audit obligations.
8.2 Usage and technical data (logs, IP addresses) are retained for twelve (12) months.
8.3 Marketing consent records are retained indefinitely to demonstrate compliance, but the underlying communication preferences are updated in real time when you unsubscribe.
8.4 Data related to financial transactions is retained for seven (7) years from the transaction date in line with tax and financial record-keeping requirements.
9 Your Data Rights
You have the following rights in relation to your personal data:
Right of Access
Request a copy of the personal data GATA holds about you.
Right to Rectification
Request correction of inaccurate or incomplete data.
Right to Erasure
Request deletion of your data (subject to legal retention obligations).
Right to Portability
Receive your data in a structured, machine-readable format.
Right to Object
Object to processing based on legitimate interests, including direct marketing.
Right to Restriction
Request that processing be restricted while a dispute is resolved.
Withdraw Consent
Withdraw marketing consent at any time without affecting lawfulness of prior processing.
Right to Complain
Lodge a complaint with the Office of the Data Protection Commissioner of Kenya (ODPC).
To exercise any of these rights, contact: privacy@gata.africa. We will respond within thirty (30) days.
10 Cookies
10.1 The Platform uses cookies and similar technologies to improve your experience. Cookies we use include:
- Strictly necessary cookies: Required for login sessions and security. Cannot be disabled.
- Functional cookies: Remember your preferences (language, display settings). Disabled by default; activated on your consent.
- Analytics cookies: Help us understand how the Platform is used. Only activated with your consent.
10.2 You may manage cookie preferences through your browser settings or via the cookie consent banner on first visit to the Platform. Disabling strictly necessary cookies will prevent you from using certain features.
11 Children's Privacy
The Platform is not intended for use by persons under the age of 18. GATA does not knowingly collect personal data from minors. If we become aware that we have collected data from a person under 18, we will delete it promptly.
12 Changes to This Policy
GATA may update this Privacy Policy from time to time. Material changes will be communicated to Members by email and notified via the Member Portal with at least thirty (30) days' notice. The effective date at the top of this document will be updated accordingly. We encourage you to review this policy periodically.
13 Contact & Complaints
For any privacy-related queries, requests, or complaints, please contact our Data Protection Officer:
- Email: privacy@gata.africa
- Address: Data Protection Officer, GATA Secretariat, Upper Hill, Nairobi, Kenya
If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Data Protection Commissioner of Kenya (ODPC) at odpc.go.ke.