Legal

Privacy Policy

Effective date: 26 September 2026. Last updated: 26 September 2026.

This policy explains how CAMEL Africa collects, uses, shares and protects personal data when you visit camelafrica.org or use the CAMEL Africa partnership platform at app.camelafrica.org. It also explains the choices and rights you have. If you have questions, email ceo@camelafrica.org.

1. Who we are

CAMEL Africa ("CAMEL Africa", "we", "us" or "our") operates a collaboration platform where African organisations, including NGOs, civil society organisations and social enterprises, connect with funders, enterprises, regulators and other partners. Our work is guided by our framework of Collaboration, Accountability, Monitoring, Evaluation and Learning. CAMEL Intel is the market intelligence arm of CAMEL Africa. We are based in Nigeria and we are the data controller for the personal data described in this policy.

2. What this policy covers

This policy applies to our website (camelafrica.org), the CAMEL Africa platform (app.camelafrica.org), CAMEL Intel services, and any emails or other communications we send. It does not apply to third party websites or services that we link to. Those services have their own privacy policies.

3. Information we collect

Information you give us

Information from Google when you use Google Sign-In

If you choose to sign in with Google, Google shares the following with us, with your permission: your name, email address, email verification status and profile picture. We request only the basic sign-in permissions (openid, email and profile). We do not request access to your Gmail, Google Drive, Contacts, Calendar or any other Google data.

Information collected automatically

4. How we use your information

We use personal data to:

  • create and manage your account and sign you in securely, including through Google Sign-In;
  • build and display your organisation profile and calculate its profile completion;
  • suggest matches between organisations and partners and process introduction requests and messages;
  • verify organisations and keep the platform trustworthy;
  • send service messages, such as account confirmations, password resets, introduction notifications and changes to our terms;
  • send updates about programmes, events and CAMEL Intel insights, where you have agreed or where the law allows, and you can opt out at any time;
  • monitor, maintain and improve the website and platform, fix problems and understand how features are used;
  • detect, prevent and respond to fraud, abuse, security incidents and violations of our Terms of Service; and
  • comply with legal obligations and enforce our rights.

5. Legal bases for processing

Where data protection law requires a legal basis, including the Nigeria Data Protection Act 2023, the EU and UK General Data Protection Regulation and South Africa's Protection of Personal Information Act, we rely on: performance of our contract with you (to provide the platform); your consent (for example, Google Sign-In, optional marketing and non-essential cookies); our legitimate interests in running, securing and improving a trusted partnership network, balanced against your rights; and compliance with legal obligations. Where we rely on consent, you can withdraw it at any time.

6. How we use data received from Google

CAMEL Africa's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

  • We use your Google name, email address and profile picture only to create your account, sign you in, and show your name and picture within the platform.
  • We do not sell Google user data, and we do not use or transfer it for advertising, including retargeting or personalised ads.
  • We do not use Google user data to determine credit-worthiness or for lending purposes.
  • We do not use Google user data to develop, improve or train generalised artificial intelligence or machine learning models.
  • We transfer Google user data only to service providers who help us run the platform (such as our hosting and authentication providers), where necessary to provide or improve user-facing features, for security, or to comply with the law.
  • Our staff do not read your Google user data unless you give us permission, it is necessary for security purposes such as investigating abuse, or it is required by law.

You can remove CAMEL Africa's access to your Google account at any time from your Google Account settings at myaccount.google.com/permissions. This stops future sharing but does not delete data we already hold. To delete that data, see section 9.

7. How we share information

We do not sell or rent your personal data. We share it only as follows:

  • With other members: the public parts of your organisation profile (such as name, type, country, sectors, description, website and verification status) are visible to other signed-in members so that matching can work. When you send or accept an introduction, the other organisation sees your name and the details needed to connect. Private fields and your email address are not shown publicly.
  • With service providers: companies that process data on our behalf under contract, including Google (Firebase Authentication, Cloud Firestore and Google Cloud hosting), Vercel (application hosting), Webflow (website hosting) and our email and domain providers. They may only use the data to provide services to us.
  • For legal reasons: where required by law, regulation, court order or a lawful request from authorities, or to protect the rights, safety and property of our users, the public or CAMEL Africa.
  • In a business change: if CAMEL Africa is involved in a merger, acquisition, restructuring or sale of assets, personal data may transfer as part of that transaction, subject to this policy.
  • With your consent: in any other case where you ask us to or agree that we may.

8. International transfers, security and retention

International transfers. Our service providers may store or process data outside your country, including in the United States and the European Union. Where we transfer personal data across borders, we rely on safeguards recognised by applicable law, such as adequacy decisions, standard contractual clauses or your consent.

Security. We use industry standard measures to protect personal data, including encryption in transit (HTTPS), managed authentication, access controls that limit who can read each record, and security rules that let members read and edit only their own organisation's private data. No system is completely secure, so we cannot guarantee absolute security. If we become aware of a breach that affects your personal data, we will notify you and the relevant regulator where the law requires.

Retention. We keep personal data for as long as your account is active and as needed to provide the platform. If you delete your account, we delete or anonymise your personal data within 30 days, except where we must keep limited records for legal, tax, security or dispute resolution purposes. Backups are overwritten on a rolling basis within 90 days.

9. Your rights and choices

Depending on where you live, you may have the right to access your personal data, correct it, delete it, restrict or object to its processing, receive a copy in a portable format, and withdraw consent at any time. You can:

  • view and edit most of your information directly in your account and organisation profile;
  • request deletion of your account and all associated data by emailing ceo@camelafrica.org from the email address on your account with the subject line "Delete my account", or by using the delete option in your account settings once available. We will confirm and complete deletion within 30 days;
  • unsubscribe from marketing emails using the link in any email; and
  • revoke Google Sign-In access at myaccount.google.com/permissions.

We will respond to requests within 30 days and may need to verify your identity first. If you are not satisfied with our response, you may complain to your data protection authority. In Nigeria this is the Nigeria Data Protection Commission (ndpc.gov.ng). In South Africa it is the Information Regulator, and in the EU or UK it is your local supervisory authority.

10. Cookies

We use essential cookies and local storage to keep you signed in and keep the service secure. With your consent where required, we may also use analytics cookies to understand how the site is used. You can control cookies through your browser settings. Blocking essential cookies may stop the platform from working properly.

11. Children

CAMEL Africa is a professional platform for organisations and is not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.

12. Links to other services

Our website and platform may link to websites and services run by others, including partner organisations. We are not responsible for their privacy practices, so please read their policies.

13. Changes to this policy

We may update this policy from time to time. We will change the "Last updated" date above and, if the changes are significant, notify you by email or through the platform before they take effect.

14. Contact us

For privacy questions or to exercise your rights, contact CAMEL Africa at ceo@camelafrica.org. Please also read our Terms of Service.