Privacy Policy

Welcome to LEAF Africa. We are a proprietary website/application of LEAF Impact Limited, and we offer a platform that connects entrepreneurs, investors, and policymakers to drive innovation and unlock Africa’s economic opportunities. We focus on tackling key challenges through collaboration.

At LEAF Africa (“we”, “us”, or “our”), we understand how important the privacy of personal information is to our users and stakeholders (“you” or “your”) and we are committed to protecting your privacy on our website and mobile applications, and the confidentiality of any personal information provided to us.

This Privacy Policy applies to https://leafafrica.org/ and other websites owned and operated by us that are intended for use, including the mobile-optimised versions of these sites and our mobile device applications (“Apps”). We refer to these sites and Apps collectively as the Platform.

Consent

By accessing or using our services or products, you agree to the collection and use of information in accordance with this Policy. Once you provide consent, you may withdraw consent at any time by contacting us at hello@leafafrica.org. Consent withdrawal will not affect the lawfulness of any processing carried out before you withdraw your consent.

Information We Collect

When signing up on our Platform, we collect information about you. This may include:

1. Profile data such as your full name, email address, mailing address, location, age, and phone number.
2. Technical information such as device/browser type, IP address, pages accessed, mobile device ID or unique identifier, page view statistics, standard web log data, still and moving images, etc.
3. Marketing data such as users’ feedback.
4. Usage data such as time spent on our platforms (web, mobile, or USSD), when the application was opened, device data, and learning engagement metrics (time spent learning, lessons viewed, test scores, etc.).
5. Device type and settings such as hardware model and operating system version.
6. Log information including details of how our service is used, device event information, and IP address.
7. Unique application numbers such as application version number.
8. Unique identifiers such as preferred language, app activity, and other settings.
9. User online activity and digital footprint on the application, including videos, search terms, and other interactions with content on the app.

How We Use the Information We Collect

We will only use personal data provided for the following purposes:

1. To register you as a new user.
2. To manage your relationship with us.
3. To curate learning content.
4. To track learning progress.
5. To assess student performance, generate reports, and issue certificates.
6. To facilitate communication between users.
7. To tailor our service offerings to your interests.
8. To enable us to create content most relevant to you and to improve our services generally.
9. To provide personalised support.
10. To make the Platform easier for you to use by not having to enter information more than once.
11. To manage risk, or to detect, prevent, and/or remediate fraud or other potentially prohibited or illegal activities.
12. To send periodic emails and marketing materials regarding your interest in our products and services.

We also use this information to offer users personalised content. We associate an identifier that is unique to the Platform with the videos you have watched and terms you have searched for to recommend content likely to be of interest to you, subject to the controls described in this Policy.

Information We Share

We will not disclose any user information provided to us to any third party except in the following circumstances:

Upon Consent

We will first obtain your explicit consent, or, if you are a minor, your parent’s or legal guardian’s consent, before disclosing your information to any third party.

Legal Reasons

We may share individual user information with a third party (companies, organisations, or individuals) if we have a good-faith belief that access, use, preservation, or disclosure is reasonably necessary to:

• Perform a contract to which you are a party, or take steps at your request before entering into a contract.
• Comply with legal obligations, regulations, legal processes, or enforceable governmental requests.
• Protect your vital interests or those of another person.
• Enforce applicable Terms of Service, including investigating potential violations.
• Detect, prevent, or otherwise address fraud, security, or technical issues.
• Protect against harm to rights, property, or safety of LEAF Africa, our users, or the public as required or permitted by law.

External Processing

We may provide user information to our affiliates or other trusted businesses or persons to process it on our behalf, based on our instructions and in compliance with this Policy and appropriate confidentiality and security measures.

Public Interest

We may disclose your information to a third party for the performance of tasks carried out in the public interest or in the exercise of an official authority vested in us.

Legitimate Interest

We may disclose your information to a third party for purposes of legitimate interests, which may include:

• Improving our services and user experience.
• Preventing fraud or criminal activity.
• Protecting our rights and interests, or those of our users or third parties.
• Complying with industry standards or best practices.
• Conducting research and analysis for internal business purposes.

We will ensure that our legitimate interests do not override your rights and freedoms, and we will implement appropriate safeguards to protect your information.

We may share aggregate information about the use of the Platform with third parties to show trends or meet reporting obligations with partners.

Third-Party Links

Our Platform may contain links to mobile applications owned and operated by third parties. These third-party mobile applications may have their own privacy policies, which may govern the collection and processing of your personal data. Review those policies, because this Policy does not apply. We have no responsibility or liability for the content, activities, and privacy practices of such third-party mobile applications.

Cookies

Our Platforms use cookies (small files containing a string of characters), which we place on your computer if you agree. These cookies allow us to uniquely identify your browser and distinguish you from other users. This helps us track preferences and provide a personalised experience.

The cookies we use are analytical cookies. They help us recognise and count visitors and see how visitors move around the Platforms, so we can improve performance and usability.

We do not share the information the cookies collect with any third parties.

User Profiles

Every registered user has a unique personal profile and a unique personal identification number (User ID), which helps ensure only you can access your profile.

When you register, we create your profile, assign a User ID, then send an activation link to your email. This User ID is uniquely yours and helps you move seamlessly across our Platforms without re-entering information you have already provided.

Retention of Personal Information

We keep personal information for as long as required for the purpose it is processed for, or for tax, accounting, regulatory, or legal purposes. We may retain personal data longer in the event of a complaint or where we reasonably believe there is a prospect of litigation.

If you no longer wish to hear from us, you may notify us and we will keep minimum information needed to ensure no future contact is made. We actively review and securely delete (or anonymise) personal information when it is no longer needed.

Your Legal Rights

You have the right to:

1. Request access to your personal data (a “data subject access request”), including information about purpose, categories, recipients, storage period, rights, complaints, source, and automated decision-making/profiling. A data subject access request may attract an administrative fee.
2. Request correction of inaccurate or incomplete personal data (subject to verification).
3. Request erasure of personal data where there is no good reason for continued processing, subject to legal limitations (which will be communicated where applicable).
4. Object to processing where we rely on legitimate interest, and object to direct marketing. Where applicable, we may demonstrate compelling legitimate grounds overriding your rights.
5. Request transfer of your personal data in a structured, commonly used, machine-readable format, where applicable. This request may attract an administrative fee.
6. Withdraw consent at any time where processing is based on consent (without affecting prior lawful processing). Withdrawal may affect access to some products or services.
7. Restriction of processing pending resolution of a request, an objection, or legal claims.

Data Security

We implement reasonable security measures to protect the security and integrity of your personal information, including access controls, firewalls, data encryption, and physical security to prevent loss, alteration, unauthorised disclosure, or unauthorised use.

We store and process personal information on our server logs in Nigeria. Where we transfer data to another country, we ensure an adequate level of protection in accordance with the Nigeria Data Protection Act, 2023, including via laws, binding corporate rules, contractual clauses, codes of conduct, or certification mechanisms.

Access to your personal data is limited to employees, agents, and contractors on a need-to-know basis, and they are bound by confidentiality and process data only under our instructions.

We have procedures to manage suspected personal data breaches and will notify you and applicable regulators where legally required.

Our Platforms use SSL/TLS to secure transmission of your personal data. You should see a padlock icon and an https:// address when you are using secure pages.

You also have a role in protecting your information. Do not share your username and password.

While we maintain reasonable safeguards, the internet is not a fully secure medium and we cannot guarantee that security breaches will never occur. We are not responsible for actions of hackers or unauthorised third parties that breach our reasonable security procedures.

Nigerian Data Protection Act 2023 Compliance

This Privacy Policy is in compliance with the Nigerian Data Protection Act 2023 (NDPA 2023). We implement appropriate technical and organisational measures to process personal data in line with NDPA 2023 and other applicable data protection laws. By using our Platform, you acknowledge processing in accordance with this Policy and NDPA 2023.

Online Privacy Policy Only

This Policy applies only to information collected on our Platform and not to information collected offline.

Changes to Our Privacy Policy

We may amend or modify this Privacy Policy from time to time and will post changes on this page. You are responsible for reviewing this Policy whenever you submit information or use our services. Continued use signifies acceptance of changes.

Where a revision is material or the purpose of processing changes, we will notify you via email or via a pop-up/redirection when you log in to our Platform.

Disclaimer

We do not represent or warrant the condition or functionality of our Platform(s), suitability for use, or guarantee uninterrupted or error-free service. No liability shall lie for risks associated with use, including risks to your computer, software, or data being damaged by viruses or other files transmitted or activated via our Platform(s) or your access to it. We do not guarantee reliability of information on our Platform(s), particularly information shared by third-party users.

Service Provider

LEAF Africa’s service is provided by LEAF Impact Limited.

Contact Us

Users may contact us directly with any questions or concerns at hello@leafafrica.org.

Note: Ensure your public contact email is spelt correctly everywhere it appears.