Privacy Policy

PRIVACY POLICY

Africa Financial Inclusion Summit & Expo

Effective Date: 28 September 2026
Last Updated: 28 September 2026

1. INTRODUCTION

The Africa Financial Inclusion Summit & Expo (“Africa Financial Inclusion Summit”, “we”, “us”, “our”) respects your privacy and is committed to protecting the personal information entrusted to us.

This Privacy Policy explains how we collect, use, store, disclose and protect personal information when you:

  • visit or use our website;

  • register for or attend our conferences, summits, exhibitions, networking events or related activities;

  • apply or agree to participate as a speaker;

  • enquire about sponsorship, exhibition or partnership opportunities;

  • subscribe to newsletters or other communications;

  • communicate with us by email, telephone, social media or other channels;

  • purchase tickets, registrations, sponsorships, exhibition packages or other services;

  • participate in surveys, competitions or promotional activities; or

  • otherwise interact with us.

This Privacy Policy is intended to comply with applicable South African data-protection and privacy legislation, including the Protection of Personal Information Act 4 of 2013 (“POPIA”), and other applicable laws.

POPIA establishes conditions for lawful processing of personal information and provides rights to individuals regarding their personal information. (Government of South Africa)

If you do not agree with this Privacy Policy, please do not provide personal information to us or use the relevant services of the website.

2. WHO WE ARE

The Africa Financial Inclusion Summit & Expo is an African financial-services and fintech industry event bringing together financial institutions, fintech companies, regulators, investors, policymakers, development organisations, technology companies, professional advisers, entrepreneurs and other stakeholders.

For purposes of applicable data-protection legislation, the organisation responsible for determining the purposes and means of processing personal information will generally act as the Responsible Party under POPIA.

Where we process information on behalf of another organisation, our relationship may instead be governed by an applicable data-processing or contractual arrangement.

Organisation: Africa Financial Inclusion Summit & Expo
Website: https://www.afi-africa.africa/
Privacy contact: afi@afi-africa.africa

Where applicable, our Information Officer or designated privacy representative will deal with privacy-related requests.

3. PERSONAL INFORMATION WE MAY COLLECT

Depending on your interaction with us, we may collect the following categories of information.

3.1 Identity and professional information

This may include:

  • name and surname;

  • job title and designation;

  • organisation/company;

  • industry or sector;

  • professional biography;

  • professional interests;

  • country and city;

  • business contact information;

  • LinkedIn or other professional social-media information where voluntarily provided.

3.2 Contact information

We may collect:

  • email address;

  • telephone/mobile number;

  • business address;

  • postal address;

  • website address;

  • communication preferences.

3.3 Event and registration information

When you register for an event, we may collect:

  • event selected;

  • registration type;

  • attendance information;

  • dietary requirements;

  • accessibility requirements;

  • networking preferences;

  • accommodation or travel information where required for event administration;

  • special requests;

  • participation history.

3.4 Speaker information

If you apply or participate as a speaker, we may collect:

  • speaker name;

  • organisation;

  • designation;

  • professional biography;

  • photograph;

  • presentation topic;

  • abstract;

  • professional profile;

  • contact details;

  • speaker requirements;

  • travel or availability information where necessary.

Speaker profiles, photographs, biographies and related information may be publicly displayed for event promotion where appropriate and where permitted.

3.5 Sponsor and exhibitor information

We may collect:

  • organisation details;

  • contact-person information;

  • job title;

  • billing information;

  • sponsorship/exhibition requirements;

  • marketing materials;

  • logos;

  • delegate information;

  • contractual information.

3.6 Payment information

Where you purchase a registration, sponsorship, exhibition package or other service, payment may be processed through a third-party payment provider.

We may receive transaction-related information such as:

  • payment status;

  • transaction reference;

  • amount paid;

  • date of transaction;

  • payment method;

  • billing information.

We generally do not store complete credit-card or banking-card details on our own systems where payment is processed by a third-party payment provider.

3.7 Communications

We may retain correspondence and information contained in:

  • emails;

  • enquiries;

  • telephone communications;

  • contact forms;

  • speaker applications;

  • registration communications;

  • customer-support requests.

3.8 Website and technical information

When you use our website, certain technical information may automatically be collected, including:

  • IP address;

  • browser type;

  • device type;

  • operating system;

  • pages visited;

  • approximate location derived from technical information;

  • referring website;

  • date and time of visits;

  • interaction with website content;

  • cookies and similar technologies.

4. HOW WE COLLECT PERSONAL INFORMATION

We may collect personal information:

  • directly from you;

  • when you complete an online registration form;

  • when you submit a speaker application;

  • when you contact us;

  • when you subscribe to communications;

  • when you purchase a product or service;

  • through our website;

  • through event-registration systems;

  • through sponsors, exhibitors or event partners where legally permitted;

  • through publicly available professional sources;

  • through social-media platforms;

  • through cookies and analytics technologies; and

  • from service providers assisting us with event administration.

Where we collect personal information from third parties or publicly available sources, we will use it in accordance with applicable law.

5. PURPOSES FOR WHICH WE PROCESS PERSONAL INFORMATION

We process personal information only for legitimate and defined purposes.

These purposes may include:

Event administration

  • processing registrations;

  • issuing tickets and confirmations;

  • managing attendance;

  • communicating event information;

  • organising speakers and sessions;

  • managing exhibitors and sponsors;

  • arranging networking activities;

  • administering event logistics.

Communication

  • responding to enquiries;

  • sending registration confirmations;

  • sending event updates;

  • providing information requested by you;

  • communicating changes to event dates, venues or programmes.

Marketing

Subject to applicable law and your preferences, we may send information concerning:

  • Africa Financial Inclusion Summit & Expo;

  • related conferences and events;

  • speaking opportunities;

  • sponsorship opportunities;

  • exhibition opportunities;

  • industry publications;

  • relevant services and programmes.

South African law places specific requirements on electronic direct marketing, including consent requirements in circumstances covered by POPIA. (Justice South Africa)

Business administration

We may process information for:

  • accounting;

  • invoicing;

  • payment reconciliation;

  • contract administration;

  • customer relationship management;

  • fraud prevention;

  • security;

  • auditing;

  • legal compliance;

  • dispute resolution.

Website improvement

We may use technical and usage information to:

  • maintain website security;

  • analyse website traffic;

  • understand user behaviour;

  • improve website functionality;

  • improve user experience;

  • identify technical problems.

6. LAWFUL BASIS FOR PROCESSING

We will process personal information in accordance with applicable law and, where required, rely on an appropriate lawful basis.

Depending on the circumstances, processing may be based on:

  • your consent;

  • performance of a contract or steps taken at your request before entering into a contract;

  • compliance with a legal obligation;

  • legitimate business purposes where legally permitted;

  • protection of rights or legitimate interests; or

  • another lawful basis recognised by applicable law.

Where processing is based on consent, you may withdraw that consent subject to applicable legal or contractual limitations.

7. DIRECT MARKETING

We may communicate with you regarding events, conferences, sponsorships, exhibitions, speaking opportunities and related services.

Where applicable, electronic direct marketing will be conducted in accordance with POPIA and other applicable laws.

POPIA section 69 regulates direct marketing by electronic communications, including email, SMS and similar communications, and generally requires consent unless a statutory exception applies. (Justice South Africa)

Every applicable marketing communication should provide a clear and reasonably accessible mechanism for opting out or unsubscribing.

You may request that we stop sending marketing communications at any time by:

  • clicking the unsubscribe link in an applicable marketing email;

  • emailing us at afi@afi-africa.africa; or

  • contacting us through our website.

An unsubscribe request from marketing communications will not necessarily prevent us from sending essential transactional or service-related communications, such as registration confirmations, payment information, event changes or security notices.

8. INFORMATION FROM PUBLIC SOURCES AND PROFESSIONAL DIRECTORIES

Because the Summit operates within a professional B2B environment, we may research publicly available professional information concerning organisations and professional contacts for legitimate business and event-related purposes.

Examples may include:

  • company websites;

  • public professional profiles;

  • publicly available business directories;

  • publicly published organisational contact information;

  • conference and industry directories;

  • public regulatory or association information.

We will seek to use such information responsibly and in accordance with applicable law.

We do not represent that information obtained from public sources is always complete or accurate.

9. SHARING PERSONAL INFORMATION

We may share personal information where reasonably necessary for the purposes described in this Privacy Policy.

Recipients may include:

  • event-registration providers;

  • payment processors;

  • website hosting providers;

  • CRM providers;

  • email marketing providers;

  • IT and technology service providers;

  • analytics providers;

  • event venues;

  • accommodation and travel providers where relevant;

  • event production companies;

  • sponsors and exhibitors where appropriate;

  • professional service providers;

  • legal, accounting and auditing advisers;

  • regulators, government authorities or law-enforcement agencies where legally required.

We require appropriate service providers to handle personal information securely and only for authorised purposes.

10. SPONSORS, EXHIBITORS AND EVENT PARTNERS

Some events may involve sponsors, exhibitors, strategic partners and other participating organisations.

Where permitted and appropriately disclosed, we may facilitate networking or business connections between delegates and participating organisations.

We will not sell personal information to third parties simply for the purpose of allowing them to independently market unrelated products or services.

Where personal information is shared with a sponsor, exhibitor or partner for marketing purposes, we will do so only where permitted by applicable law and based on an appropriate legal basis.

You may object to such processing or withdraw applicable consent.

11. PUBLICATION OF SPEAKER AND EVENT INFORMATION

If you participate as a speaker, sponsor, exhibitor, moderator, panellist or other public participant, you acknowledge that certain professional information may be published for event-related purposes.

This may include:

  • your name;

  • photograph;

  • job title;

  • organisation;

  • professional biography;

  • presentation title;

  • session information.

Such information may appear on:

  • our website;

  • event programmes;

  • social media;

  • promotional material;

  • press releases;

  • speaker announcements;

  • event presentations;

  • digital marketing materials.

Where you provide information specifically for public speaker promotion, you should ensure that you are authorised to provide that information.

12. PHOTOGRAPHY, VIDEO AND EVENT RECORDINGS

Africa Financial Inclusion Summit & Expo events may be photographed, filmed or recorded.

Images, video or audio recordings may be used for:

  • event documentation;

  • reporting;

  • promotional purposes;

  • social media;

  • future event marketing;

  • websites;

  • presentations;

  • publications.

Where appropriate, event attendees may be notified through signage, registration terms or other communications.

If you have a specific concern regarding photography or recording, please contact us before or during the event.

13. COOKIES

Our website may use cookies and similar technologies.

Cookies may be used to:

  • make the website function correctly;

  • remember preferences;

  • improve website performance;

  • understand website usage;

  • measure marketing effectiveness;

  • provide relevant content;

  • maintain security.

Cookies may include:

Essential cookies

Required for basic website functionality.

Analytics cookies

Used to understand how visitors interact with the website.

Functional cookies

Used to remember preferences and improve functionality.

Marketing cookies

Where enabled and legally permitted, these may be used to measure campaigns or provide relevant advertising.

You may configure your browser to refuse or delete cookies. Disabling certain cookies may affect website functionality.

14. THIRD-PARTY WEBSITES

Our website may contain links to third-party websites, including:

  • payment providers;

  • social-media platforms;

  • registration platforms;

  • accommodation providers;

  • sponsors;

  • exhibitors;

  • event partners;

  • other external websites.

Once you leave our website, the privacy practices of the third-party website will apply.

We are not responsible for the privacy practices, security or content of third-party websites.

We recommend reviewing the privacy policy of each third-party service before submitting personal information.

15. SOCIAL MEDIA

We may operate or maintain social-media profiles and may use social-media platforms for event promotion and communication.

Interactions with social-media platforms are governed by the privacy policies of those platforms.

We may receive information that you voluntarily provide through interactions with our social-media pages, subject to the platform’s policies and applicable law.

16. INTERNATIONAL DATA TRANSFERS

Because our events serve delegates and organisations across Africa and internationally, some personal information may be processed or stored outside South Africa.

This may occur where we use:

  • international cloud providers;

  • email platforms;

  • CRM systems;

  • payment processors;

  • analytics services;

  • event-management systems;

  • other international technology providers.

Where personal information is transferred across borders, we will take appropriate steps to comply with applicable legal requirements.

POPIA regulates cross-border transfers of personal information and imposes conditions on certain transfers to third parties outside South Africa. (Government of South Africa)

Where appropriate, contractual safeguards, adequate-protection requirements, consent or another legally recognised mechanism may be used.

17. INFORMATION SECURITY

We take reasonable technical and organisational measures to protect personal information against:

  • unauthorised access;

  • loss;

  • theft;

  • misuse;

  • alteration;

  • accidental destruction;

  • unlawful disclosure;

  • unauthorised processing.

Security measures may include:

  • access controls;

  • password protection;

  • encryption where appropriate;

  • secure hosting;

  • restricted access to personal information;

  • staff confidentiality obligations;

  • monitoring and security procedures;

  • secure backup procedures;

  • vendor security controls.

No internet-based system can be guaranteed to be completely secure.

You should therefore avoid sending highly confidential information through ordinary email unless specifically requested through an appropriate secure process.

18. DATA BREACHES

If we become aware of a security compromise involving personal information, we will assess the incident and take appropriate steps in accordance with applicable law.

Where legally required, affected individuals and/or the Information Regulator will be notified.

We may also take measures including:

  • securing affected systems;

  • investigating the incident;

  • limiting further access;

  • restoring systems;

  • engaging specialist advisers;

  • notifying relevant parties;

  • implementing corrective measures.

19. DATA ACCURACY

We seek to maintain accurate and relevant personal information.

You may contact us if:

  • your name has changed;

  • your job title has changed;

  • your organisation has changed;

  • your contact details are incorrect;

  • other information we hold about you is inaccurate or outdated.

We may request reasonable verification before changing personal information.

20. DATA RETENTION

We will not retain personal information indefinitely without a legitimate reason.

Personal information may be retained for as long as reasonably necessary to:

  • fulfil the purpose for which it was collected;

  • provide services;

  • maintain business records;

  • comply with legal or regulatory requirements;

  • resolve disputes;

  • enforce agreements;

  • protect legitimate business interests.

When personal information is no longer required, we will take reasonable steps to securely delete, destroy or anonymise it.

POPIA generally requires personal information not to be retained longer than necessary for the purpose for which it was collected, subject to recognised exceptions. (InfoRegulator)

21. YOUR PRIVACY RIGHTS

Subject to applicable law, you may have rights including the right to:

  • request access to personal information we hold about you;

  • request correction of inaccurate information;

  • request deletion where legally applicable;

  • object to certain processing;

  • withdraw consent where processing relies on consent;

  • object to direct marketing;

  • request information regarding how your personal information is being used;

  • lodge a complaint concerning the processing of your personal information.

South African public bodies and organisations commonly provide mechanisms for data subjects to request access, correction, deletion or objection in accordance with POPIA. (National Treasury of South Africa)

22. HOW TO EXERCISE YOUR RIGHTS

To make a privacy request, please contact:

Email: afi@afi-africa.africa

Please clearly identify:

  • your name;

  • the organisation you represent, where applicable;

  • the nature of your request;

  • the email address associated with your records;

  • any information necessary for us to identify the relevant record.

We may need to verify your identity before processing a request.

We will respond within the period required by applicable law.

23. COMPLAINTS

If you have concerns about how we process your personal information, we encourage you to contact us first so that we can investigate and attempt to resolve the matter.

You may also have the right to lodge a complaint with the Information Regulator of South Africa.

The Information Regulator is responsible for monitoring and enforcing compliance with POPIA and PAIA. (eServices)

Information Regulator of South Africa

Website: https://inforegulator.org.za/

24. CHILDREN’S PERSONAL INFORMATION

Our website and professional events are primarily intended for adults and professional participants.

We do not knowingly seek to collect personal information from children except where permitted by applicable law and where appropriate consent or another lawful basis exists.

If we become aware that personal information relating to a child has been collected unlawfully, we will take reasonable steps to address the situation.

25. SENSITIVE PERSONAL INFORMATION

We generally do not require sensitive personal information to register for or participate in our events.

We ask users not to submit unnecessary sensitive information through ordinary website forms or email.

Where sensitive personal information is legitimately required, we will process it only where permitted by applicable law and with appropriate safeguards.

26. AUTOMATED DECISION-MAKING AND PROFILING

We do not intend to make significant decisions about individuals solely through automated processing unless permitted by applicable law and appropriate safeguards are in place.

Where applicable, individuals may have rights relating to automated decision-making under POPIA.

27. THIRD-PARTY SERVICE PROVIDERS

We may use third-party providers for:

  • website hosting;

  • domain and infrastructure services;

  • registration management;

  • payment processing;

  • CRM;

  • email distribution;

  • analytics;

  • marketing;

  • cloud storage;

  • cybersecurity;

  • customer support.

Such providers may process personal information on our behalf.

We seek to select providers that provide appropriate security and privacy safeguards.

28. BUSINESS TRANSFERS

If our business, website, event portfolio or relevant assets are sold, transferred, reorganised or merged, personal information may form part of the transferred business assets.

Any such transfer will remain subject to applicable privacy laws and appropriate safeguards.

29. LEGAL DISCLOSURES

We may disclose personal information where reasonably necessary to:

  • comply with a legal obligation;

  • respond to a lawful request from a regulator or government authority;

  • protect our rights or property;

  • investigate fraud or unlawful activity;

  • protect the safety of individuals;

  • enforce contractual rights;

  • defend legal claims.

30. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect:

  • changes in our services;

  • changes in technology;

  • changes in our data-processing practices;

  • changes in applicable legislation;

  • regulatory guidance;

  • improvements to our privacy practices.

The updated version will be published on our website with a revised “Last Updated” date.

Where required, we will provide additional notice of material changes.

31. GOVERNING LAW

This Privacy Policy is primarily governed by the laws of the Republic of South Africa, including applicable provisions of POPIA and other relevant legislation.

Where you participate in an Africa Financial Inclusion Summit event from another country, additional privacy laws may apply depending on the circumstances.

32. CONTACT US

For questions, privacy requests, corrections, objections, withdrawals of consent or other privacy matters, please contact:

Africa Financial Inclusion Summit & Expo

Email: afi@afi-africa.africa

Website: https://www.afi-africa.africa/

Privacy / Information Officer:
[INSERT NAME AND CONTACT DETAILS]

33. IMPORTANT NOTICE

This Privacy Policy describes our intended privacy and data-processing practices. It should be read together with our website Terms & Conditions, Cookie Notice, Registration Terms, Refund/Cancellation Policy and any applicable event-specific notices.

Where there is a conflict between this Privacy Policy and a mandatory legal requirement, the applicable law will prevail.

Last Updated: 28 September 2026

Important implementation points

Before putting this live, I would make five practical additions to the website:

  1. Insert the actual legal entity name that owns/operates the Africa Financial Inclusion Summit. The website policy should not rely only on the event brand.

  2. Name your Information Officer/privacy contact. POPIA compliance involves an Information Officer framework, and the Information Regulator provides specific compliance mechanisms for organisations. (eServices)

  3. Create a separate Cookie Notice if your site uses Google Analytics, Meta Pixel, LinkedIn Insight Tag, advertising cookies or similar tracking.

  4. Put an explicit marketing consent/unsubscribe mechanism on registration forms. This is particularly important because POPIA specifically regulates electronic direct marketing. (Justice South Africa)

  5. Audit every third-party platform actually connected to the website — especially your payment gateway, registration system, Mail/CRM platform, Google Analytics, Meta/LinkedIn tracking, hosting provider and any WhatsApp/SMS system. The final policy should accurately reflect the platforms you actually use rather than claiming safeguards that have not been implemented.