Data Protection & Privacy Statement

Africa Trade Portal collects personal data only where there is a lawful basis to do so, including:

• The consent of the Data Subject
• Provision of trade-related information, market exposure, and allied services to the Data Subject
• Offer of employment to the Data Subject
• Performance of a contract to which the Data Subject is a party
• Compliance with a legal obligation
• Protection of the vital interests of a person in line with Data Privacy regulations
• Performance of a task carried out in the public interest
• Legitimate interests of Africa Trade Portal, except where overridden by the rights and freedoms of the Data Subject

Africa Trade Portal is committed to full compliance with data protection regulations, including the Data Protection Laws of the country, the General Data Protection Regulation of the European Union (GDPR), and other applicable Data Privacy regulations.

These laws afford you the following rights regarding your personal data:

Africa Trade Portal acts as both "controller" and "processor" of the personal data you provide. We collect only the basic personal and business data necessary to deliver our services:

We require your personal and business information to provide the services described on this Portal, in full compliance with applicable Data Protection and Privacy regulations. Specifically, your data enables us to:

• Provide your business and products with visibility and access to markets across Africa
• Support you in accessing funding options for your business
• Fulfil contractual and regulatory obligations

Your consent is required to make these services available to you in accordance with applicable law and regulation.

All personal data collected by Africa Trade Portal will be held and processed at our facilities at our Headquarters, or at the location of any authorised service providers (third parties), as applicable. We will take all reasonable and appropriate measures to ensure that your personal and business data is handled securely and in a controlled manner.

All personal data collected may be shared with authorised third parties and service providers as necessary to complete the services requested by our patrons, in accordance with applicable Data Protection Laws.

Africa Trade Portal may also disclose your personal and business data where:

• Required to do so by law or legal process
• Requested by law enforcement or other government officials
• Necessary to prevent physical harm, financial loss, or in connection with an investigation of suspected illegal activity
• Necessary to protect the vital interests of a person
• Required to enforce our Terms and Conditions
• Necessary to protect our property, services, and legal rights
• Required to support auditing, compliance, and corporate governance functions
• Required to comply with any applicable laws or regulations

Cyber security compliance is a core priority for Africa Trade Portal. We implement appropriate physical, electronic, and managerial measures to protect your data:

Africa Trade Portal and its users share a joint responsibility in protecting against online fraud and scams. You are responsible for ensuring that your personal login details — including your User ID and Password — are not compromised:

• Do not knowingly or accidentally share, provide, or facilitate unauthorised use of your login credentials.
• Never write down or share your User ID or Password with any person.
• If you believe your credentials have been disclosed to a third party, or have been lost or stolen, notify Africa Trade Portal immediately.

If you believe your personal data has been violated, you are entitled to contact our Data Protection Unit. Upon receipt of your complaint, Africa Trade Portal will, within a reasonable timeframe, notify you of:

• ATP's position regarding the complaint and any action taken or planned; or
• The date by which you will be informed of ATP's position, in line with data privacy requirements.

Remedies include: investigating and reporting to appropriate authorities, recovering the personal data, correcting inaccuracies, and enhancing controls around the affected data.

Where you share personal and business data of third parties with Africa Trade Portal — including directors, officers, and authorised signatories — you are responsible for, and warrant that you have obtained, their written consent for the processing and transfer of their personal data in connection with your contract with us and the services provided to you.

Africa Trade Portal reviews this Privacy Statement regularly and reserves the right to make changes at any time to reflect developments in our business activities or legal obligations. All updates will be published on our website.

For any questions, concerns, or comments regarding this Privacy Statement, please reach out to our Data Protection Unit: