Skip to main content

African Technology Policy Studies Network

X-twitter Linkedin Facebook Youtube Instagram

Privacy Policy

African Technology Policy Studies Network (ATPS) · atpsnet.org

Effective date: 11 November 2026 · Last updated: 11 November 2026

1. Introduction

The African Technology Policy Studies Network (“ATPS”, “we”, “us”, “our”) operates the website https://atpsnet.org (the “Website”). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains what personal data we collect, why we collect it, how we use, share, store and protect it, and the rights you have over it.

This Policy is issued in accordance with the laws of Kenya, in particular:

  • the Data Protection Act, 2019 (“DPA”) and its Regulations (the Data Protection (General) Regulations, 2021, and the Data Protection (Registration of Data Controllers and Data Processors) Regulations, 2021);
  • the Kenya Information and Communications Act, 1998 (“KICA”) and its consumer protection and electronic transactions provisions;
  • the Computer Misuse and Cybercrimes Act, 2018;
  • the Information and Communications Technology Authority Order, 2013, and the standards and guidelines issued under it; and
  • the National ICT Policy (2019) and its related guidelines.

By using the Website, registering as a member, or subscribing to our communications, you acknowledge that you have read and understood this Policy.

2. Who We Are (Data Controller)

For the purposes of the DPA, ATPS is the data controller for personal data collected through the Website.

  • Organisation: African Technology Policy Studies Network (ATPS)
  • Physical address: 8th Floor, The Chancery, Valley Rd, Nairobi, Kenya.
  • Postal address: P.O Box 10081 00100
  • Email: info@atpsnet.org

3. Personal Data We Collect

We collect only the data that is necessary for the purposes described in this Policy (data minimisation).

3.1 Membership registration

When you register as a member of the network, we may collect:

  • full name, title, gender (where provided), and date of birth or age bracket (where required);
  • email address, telephone number, and postal address;
  • country and city of residence, and nationality;
  • institution or organisation, job title or position, area of expertise or research interest, and membership category;
  • login credentials (username and a securely hashed password);
  • profile information you choose to add (biography, photo, social media links); and
  • records of your membership status, renewals, and participation in ATPS activities.

3.2 Subscriptions and newsletters

When you subscribe to our newsletters, publications, alerts or other updates, we collect your email address.

3.3 Enquiries and other interactions

If you contact us through forms, email or other channels, or register for events, webinars, calls for papers or surveys, we collect the information you provide and the content of your communication.

3.4 Data collected automatically

When you visit the Website, we and our service providers may automatically collect:

  • IP address, browser type and version, device type, operating system, and language settings;
  • pages visited, time and date of visits, referring URLs, and time spent on pages; and
  • cookie and similar-technology data (see Section 9).

3.5 Sensitive personal data

We do not intend to collect sensitive personal data as defined in the DPA (such as health status, ethnic or social origin, religious or philosophical beliefs, political opinions, or biometric data). Please do not submit such data to us unless we expressly request it for a specific, lawful purpose, in which case we will obtain your explicit consent and apply additional safeguards.

3.6 Children

The Website and membership are intended for adults. We do not knowingly collect personal data of children (persons under 18) unless it is done with the consent of a parent or guardian and in the best interests of the child, as required by section 33 of the DPA. If you believe a child has provided us data without such consent, contact us and we will delete it.

4. How We Use Your Personal Data and Our Lawful Bases

Under section 30 of the DPA, we process personal data only where we have a lawful basis. The table below summarises our purposes.

Purpose Examples Lawful basis
Creating and managing your membership Registering you, verifying your details, managing your account and renewals Performance of a contract / steps at your request; consent
Sending subscribed content Newsletters, policy briefs, publications, event notices Consent (which you may withdraw at any time)
Delivering our mission Administering the network, facilitating research collaboration, running programmes and events, producing internal analytics Legitimate interest; consent where required
Responding to enquiries Replying to messages, providing support Legitimate interest; consent
Website security and operation Preventing unauthorised access, fraud and misuse, diagnosing faults Legitimate interest; legal obligation
Improving the Website Understanding usage and improving content and design Consent (for non-essential cookies); legitimate interest
Legal and regulatory compliance Responding to lawful requests, keeping records Legal obligation

We will not use your personal data for a purpose that is incompatible with the purpose for which it was collected without informing you and, where required, obtaining your consent.

5. Direct Marketing and Communications

We will send you newsletters and promotional or similar communications only where you have subscribed or otherwise consented, or where permitted by law. Every message will include a clear, free way to opt out, and you may unsubscribe at any time by using the “unsubscribe” link or contacting us. Opting out of marketing does not stop essential service messages about your membership or account (such as security or account notices).

6. We Do Not Share Your Personal Data

We do not sell, rent or share your personal data with any third party for their own purposes. Your data is used only by ATPS for the purposes in Section 4, and we do not make your membership details visible to other members, partners or funders. Only two limited situations involve your data being handled outside ATPS’s direct control:

  • Systems we rely on: our hosting, email delivery and website security providers store or process data on our behalf. They act only on our instructions, under written confidentiality and security obligations, and may not use your data for their own purposes.
  • Legal obligation: we will disclose personal data only where required by law, a court order, or a lawful request from a competent authority (such as the Office of the Data Protection Commissioner or law enforcement), or where necessary to establish or defend legal claims.

7. Transfers Outside Kenya

Some of our service providers or servers may be located outside Kenya. Where we transfer personal data out of Kenya, we do so in line with sections 48 to 50 of the DPA and the General Regulations, by ensuring that the recipient is subject to appropriate safeguards (such as adequate data protection laws or binding contractual commitments), or that you have given your consent, or that another lawful ground applies. Where the law requires certain data to be processed within Kenya, we will comply.

8. Data Security

We implement appropriate technical and organisational measures, in line with section 41 of the DPA, to protect personal data against unauthorised access, loss, alteration, disclosure or destruction, including:

  • encrypted connections (HTTPS/TLS) across the Website;
  • hashed and protected passwords, and role-based access controls for staff and administrators;
  • regular software, plugin and server updates, and security monitoring and backups;
  • confidentiality obligations for staff and contractors; and
  • incident response procedures.

Personal data breaches. If a breach is likely to result in a risk to your rights and freedoms, we will notify the Office of the Data Protection Commissioner (ODPC) within 72 hours of becoming aware of it, and will notify affected individuals without unreasonable delay where there is a real risk of harm, as required by section 43 of the DPA.

Your responsibility. Please keep your login credentials confidential and tell us immediately if you suspect unauthorised use of your account. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

9. Cookies and Similar Technologies

The Website uses cookies, small text files stored on your device, to function and to understand how it is used.

  • Strictly necessary cookies: needed for login, security and core features. These cannot be switched off.
  • Preference cookies: remember your settings and choices.
  • Analytics cookies: help us understand traffic and improve the Website. These are used only with your consent where required.

You can manage or delete cookies through your browser settings or our cookie banner (where provided). Disabling some cookies may affect how the Website works. The Website may contain links to third-party sites or embedded content (for example, social media or video platforms) that set their own cookies and are governed by their own privacy policies.

10. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, as required by section 39 of the DPA, unless a longer period is required by law.

  • Membership data: for the duration of your membership and for 3 years afterwards for record-keeping, audit and legal purposes.
  • Newsletter subscriptions: until you unsubscribe or withdraw consent.
  • Enquiries: for 3 months after the matter is closed.
  • Website logs and analytics: for 12 months.

When data is no longer needed, we securely delete or anonymise it.

11. Your Rights

Under section 26 of the DPA, you have the right to:

  1. be informed of the use to which your personal data is to be put;
  2. access your personal data in our custody;
  3. object to the processing of all or part of your personal data;
  4. correction of false or misleading data about you;
  5. deletion of false or misleading data about you (erasure);
  6. data portability, where applicable, to receive your data in a structured, commonly used format; and
  7. withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.

You also have the right not to be subject to a decision based solely on automated processing that significantly affects you, and to object to the use of your data for direct marketing.

How to exercise your rights. Email us at [DPO/contact email] or write to the address in Section 2. We may need to verify your identity first. We will respond within the timelines set by the DPA and its Regulations, generally within 30 days, and will not charge a fee unless a request is manifestly unfounded or excessive, as permitted by law.

Right to complain. If you are unhappy with how we handle your data, please contact us first so we can try to resolve the matter. You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC), Kenya (website: https://www.odpc.go.ke).

12. Lawful Use of the Website and Cybersecurity

In line with the Computer Misuse and Cybercrimes Act, 2018, users must not use the Website to commit or facilitate any offence, including unauthorised access to computer systems or data, interference with data or systems, introduction of malicious code, identity theft or impersonation, or the publication of false or unlawful content. To protect the Website and our members, we may log activity, restrict or suspend accounts, and preserve and disclose relevant data to law enforcement or the competent authorities where required by law.

13. Electronic Communications and Consumer Protection

In keeping with the Kenya Information and Communications Act and its consumer protection regulations, we will handle electronic communications and transactions fairly and transparently, give clear information about the services we provide, keep records of electronic transactions as required by law, and provide a means of making enquiries and complaints.

The Website may link to external websites operated by partners, members or other organisations. We are not responsible for their content or privacy practices, and we encourage you to read their privacy policies.

15. Changes to This Policy

We may update this Policy from time to time to reflect changes in our practices, technology, or the law. The updated version will be posted on this page with a new “Last updated” date. Where changes are significant, we will take reasonable steps to notify you (for example, by email or a notice on the Website), and where required, we will seek your consent again.

16. Contact Us

For questions about this Policy or how we handle your personal data:

African Technology Policy Studies Network (ATPS)
Attention: Data Protection Officer
Email: info@atpsnet.org
Telephone: +254 020 2714092
Address: 8th Floor, The Chancery, Valley Rd, Nairobi, Kenya