Africa Tourism Summit is operated by Zawira Media Group, Nairobi, Kenya. This policy explains what we collect, why, and what control you have over it, across the website, the newsletter, event registration, and the Shop. It applies from the moment you land on this site through anything you buy, subscribe to, or register for.

Jump to a section: 1. What We Collect · 2. How We Use It · 3. Cookies & Advertising · 4. Shop, Payments & Digital Products · 5. Event & Summit Registration · 6. Sharing & Subprocessors · 7. International Data Transfers · 8. Your Rights · 9. Data Security & Retention · 10. Contact & Updates · Frequently Asked Questions

Effective Date: August 14, 2026 · Last Updated: August 27, 2026 · Data Controller: Zawira Media Group, Riadha House, Aerodrome Road, Nairobi, Kenya

1. What We Collect

Directly from you: name, email, phone number, organisation, job title, country of residence, billing details (Shop purchases and event registration), delegate category, and message content submitted through Contact or the newsletter form.

Automatically: IP address, browser and device type, referring URL, pages viewed, time on page, and interaction data, collected through Google Site Kit (Analytics + Search Console).

From the Shop specifically: order history, product downloads, download timestamps, and payment confirmation status. We do not store card numbers or M-Pesa PIN data, that is handled entirely by the payment processor (see Shop & Payments).

2. How We Use It

We use this data to deliver what you asked for, a newsletter issue, a Shop purchase, an event credential, a response to your enquiry, and to understand how the site is performing so we can improve it. We do not sell personal data, and we do not use it to train external AI systems.

Legal basis (GDPR): consent (newsletter, cookies), contract performance (Shop orders, event registration), legitimate interest (site performance, fraud prevention), and legal obligation (tax and financial records).

3. Cookies & Advertising

Essential cookies run the site, session management, cart persistence in the Shop, and security. These cannot be disabled without breaking core functionality.

Performance cookies (Google Site Kit / Analytics) tell us which pages and pillars are working. Data is aggregated; we do not track you as an individual across other sites through this.

Advertising cookies. Where we run display advertising (Google AdSense, Google Ad Manager, or comparable programmatic networks), those partners may place cookies, including the DoubleClick cookie, to serve and measure ads based on your visits to this and other sites. We do not control third-party cookie behaviour once a partner’s script loads; review their policies independently.

You can accept, reject, or customise non-essential cookies through the consent banner shown on your first visit, adjustable any time via Manage Cookie Preferences (link in site footer). Opt out of personalised advertising directly through Google Ads Settings (adssettings.google.com) or your device’s ad settings.

Cookie Table

4. Shop, Payments & Digital Products

The Shop sells digital products, tools, and, where applicable, physical or affiliate-linked items. Purchases are processed through M-Pesa (STK Push), Paystack, Flutterwave, or Wise, depending on your region and product. We do not receive or store your card number, M-Pesa PIN, or full payment credentials, those are handled entirely within the payment processor’s secure environment, and we receive only a transaction confirmation and the billing details needed for your receipt.

Digital product downloads are tied to your order confirmation and email address. If you request a refund or dispute a purchase, we review your download and access logs tied to that specific order solely to verify the claim, see Terms of Use, Shop Terms for the full investigation process. If you request a refund or deletion of purchase history, see Your Rights.

Several digital products and software tools sold in the Shop are developed and distributed through DelzHub, our affiliated technology and software distribution entity within the DelzGlobal group of platforms. Where DelzHub is the product source, applicable data handling for that specific product follows DelzHub’s own processing terms, referenced at the point of purchase, this policy governs data collected directly through this website regardless of which entity built the underlying product.

Affiliate links within Shop or editorial content are disclosed at point of use per our Editorial Standards, Commercial Independence. We do not receive your data through affiliate partners unless you complete a transaction on their site directly, that exchange is governed by their own privacy policy, not ours.

5. Event & Summit Registration

Delegate registration for events under Events & Summits collects professional credentials, institutional affiliation, delegate category, and payment data where applicable. This is used strictly for credential verification, event administration, and security management. Closed-door session participation may require an additional confidentiality agreement, disclosed at the point of registration, not buried here.

We do not sell personal data. We share only what’s operationally necessary, with:

Payment processors, M-Pesa, Paystack, Flutterwave, Wise (transaction processing only)

Email service provider, for newsletter delivery and transactional receipts

Analytics, Google Site Kit (aggregated, not individually identifying to us)

Advertising networks, where display ads are active, per Cookies & Advertising

Event partners, only where you’ve registered for a co-hosted session, and only the fields necessary for that session

DelzHub, for products sourced through DelzHub, order and licensing data necessary to deliver and support that specific product

Legal authorities, where required by law

Full subprocessor agreements and data-processing terms for institutional partners are available on request through Contact, Legal & Rights. These sit outside this public policy because they contain partner-specific contractual terms, not general user data practices.

7. International Data Transfers

As a continental platform with processors and service providers operating outside Kenya, some data may be processed in the EU, UK, or US. Where that happens, we rely on standard contractual clauses and equivalent safeguards recognised under the Kenya Data Protection Act, 2019, GDPR, and UK GDPR.

8. Your Rights

Depending on your jurisdiction, you can access, correct, delete, or export your data, object to or restrict processing, and withdraw consent at any time. California residents may request disclosure of data categories collected and request deletion under CCPA/CPRA. To exercise any of these, use Contact, Legal & Rights, we respond within 30 days, sooner where the law requires it.

Newsletter unsubscribe is one click, in every email we send. Transactional messages tied to an active Shop order or event registration will still be sent where operationally necessary, even after unsubscribe.

9. Data Security & Retention

We run SSL encryption, access controls, and vendor compliance checks across hosting, payment, and email infrastructure. No digital transmission is entirely secure, and we do not claim otherwise. Data is retained only as long as needed to fulfil the purpose it was collected for, or as required by Kenyan tax and regulatory law, typically no more than seven years for financial records, shorter for marketing data absent continued engagement.

Data Retention Schedule

This platform is not directed at individuals under 16. We do not knowingly collect data from minors.

10. Contact & Updates

We may update this policy as our technology stack or legal obligations change. Material changes will carry a revised effective date above. For privacy-specific enquiries, use the Legal & Rights pathway on Contact, or write directly to [email protected].

Registered Office: Riadha House, Aerodrome Road, P.O. Box 4030-00506, Nairobi, Kenya

Frequently Asked Questions

Does Africa Tourism Summit sell my data to third parties?

No. We do not sell personal data. Limited data is shared with processors who help run the site, payment processors, email delivery, hosting, under the terms set out in the Sharing & Subprocessors section above, and only as needed to deliver the service you requested.

Can I request that my data be deleted?

Yes. Contact us using the Privacy pathway on our Contact page and we will process deletion requests in line with the rights described in Section 8 above, subject to any legal retention requirements (e.g., transaction records for tax purposes).

Does this policy apply if I’m not in Kenya or the EU?

Yes. This policy applies to everyone who uses the site, regardless of location. Readers in the EU/EEA have GDPR rights; readers in Kenya have Data Protection Act rights; we apply the same baseline protections to all users as a matter of practice, not just where legally required.