Terms & Privacy Policy

This Privacy and Data Protection Policy ("Policy") explains how Story Link Africa Limited and Thando Productions, operating together as a joint venture (collectively, "the Organisers", "we", "us" or "our"), collect, use, share, store and protect the personal data of individuals who register for, attend, or otherwise engage in/with the event known as Jirani, a curated event bringing together founders, CEOs, CFOs, investors and other professionals across the various industry sectors, including associated panels, networking sessions, wellness activities, entertainment, and food and beverage services as may be applicable from event-to-event (the "Event").

This Policy is issued in compliance with the Data Protection Act, 2019 (Kenya) and its subsidiary regulations, including the Data Protection (General) Regulations, 2021 (collectively, the "DPA"), and applies to all personal data processed by the Organisers in connection with the Event.

For the purposes of the DPA, the Organisers act as joint data controllers in respect of personal data collected for and at the Event and their obligations and liability hereunder shall be joint only and not several.

If you have any questions about this Policy or how your personal data is handled, please contact us using the details above during ordinary business hours in Kenya.

We collect the following categories of personal data in connection with the Events:

1. Registration and ticketing data

Tickets for the Event are sold and processed through Hustlesasa or such other third-party ticketing platform as we may designate in view of our commercial requirements and to meet customer needs (the "Ticketing Partner"). The Ticketing Partner is an independent third-party. In the ordinary course of ticket sales, the Ticketing Partner shares the following attendee information with the Organisers:

• Full name
• Phone number
• Email address
• Organisation/company name and job title (where provided)

The Ticketing Partner processes your payment and booking details under its own privacy policy, which governs how it collects and handles your information at the point of purchase. We encourage you to review the Ticketing Partner's privacy policy separately, as the Organisers are not responsible for the Ticketing Partner's own data processing practices prior to the data being shared with us.

2. Photographs and audio-visual recordings

Photographs, video and/or audio recordings may be taken during the Event, including during panels, networking sessions, wellness activities and entertainment segments, for archival, promotional and marketing purposes (including use on our website, social media, sponsor materials and future event promotion).

3. Information you provide directly

This may include information shared during registration forms, sign-in sheets, business card exchanges at networking sessions, feedback forms, or direct communication with the Organisers.

We do not knowingly collect sensitive personal data (e.g. health, biometric or financial account data) beyond what is reasonably necessary for event logistics (e.g. dietary or accessibility requirements you voluntarily disclose to us for catering or wellness activity purposes).

We process personal data for the following purposes, and on the following legal bases under the DPA:

As part of the curated, business-matchmaking nature of the Event, the Organisers will share basic attendee information (namely: name, organisation, job title, and where relevant, industry sector) with the Event's official sponsors in advance of the Event, for the purpose of facilitating relevant introductions, targeted networking, sponsor engagement and future direct marketing.

We will not share your personal phone number or email address with sponsors without your separate, explicit consent. If you do not wish for your basic attendee information to be shared with sponsors in this manner, you may opt out by contacting us at jiranihq@gmail.com prior to the Event.

Sponsors receiving this information are required to handle it in accordance with applicable data protection law and are not authorised to use it for purposes beyond the Event unless you separately engage with them directly.

By attending the Event, you acknowledge and consent to the Organisers taking photographs, video and/or audio recordings of you during the Event, and to such content being used for archival, promotional, marketing and social media purposes relating to the Event and future events in the series.

Due to the nature of each Event we cannot guarantee that you will be excluded from all media but we endeavour to remove any media that is posted contrary to your request at such reasonable early opportunity upon becoming aware of your request.

Right to request take-down

If you wish to have a specific photograph or recording of you removed from our promotional materials, website or social media channels, you may submit a take-down request to jiranihq@gmail.com, identifying yourself and, where possible, the specific image or content. We will use reasonable efforts to action such requests within twenty one (21) business days, save that:

• we may be unable to remove content that has already been published by third parties (e.g. reshared by attendees, sponsors or media outlets) outside our direct control; and
• group or crowd shots where you are not the primary subject may be retained where removal is not reasonably practicable. In such cases we may take reasonable alternative measures to adhere to your request including (without limitation) blurring or AI removal from or alteration of the photo.

Designated media/press areas or professional photography zones at the Event will be clearly signposted, and attendees who do not wish to be photographed may identify themselves to event staff for reasonable accommodation (e.g. being seated outside primary camera sightlines).

We will retain personal data collected in connection with the Event for a period of no longer than twenty four (24) months from the date of the Event, after which it will be securely deleted or anonymised, save that:

• photographs and recordings used for ongoing archival or promotional purposes may be retained for longer where consent has been given and not withdrawn;
• data may be retained for a longer period where required to comply with a legal obligation, tax requirements, resolve a dispute, or enforce our agreements.

As a data subject, you have the following rights in relation to your personal data:

• Right to be informed of the use to which your personal data is to be put;
• Right to access your personal data held by us;
• Right to correction of inaccurate, outdated or incomplete personal data;
• Right to object to the processing of your personal data, in whole or in part;
• Right to deletion or destruction of your personal data, subject to applicable exceptions;
• Right to withdraw consent at any time, without affecting the lawfulness of processing before withdrawal and to erasure of your data thereafter;
• Right to data portability, where applicable;
• Right to restrict processing in certain circumstances.

To exercise any of these rights, please contact us at jiranihq@gmail.com. We will respond in accordance with the timelines prescribed under the DPA.

You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC), Kenya, if you believe your personal data has been processed unlawfully:

Website: www.odpc.go.ke

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction, including restricted access to attendee data, secure storage systems, and confidentiality obligations imposed on staff, sponsors and service providers who handle personal data on our behalf.

We engage third-party service providers (including the Ticketing Partner, venue, catering, photography/media, and wellness/entertainment vendors) to support delivery of the Event. Where such providers process personal data on our behalf, we require them to do so only for the purposes instructed and in a manner consistent with the DPA. Where a third party (such as the Ticketing Partner) acts as an independent controller of your data (e.g. for payment processing), their own privacy policy will govern that specific processing.

Where any personal data is transferred outside Kenya (for example, where a service provider's servers are located abroad), such transfers will only be made in compliance with the cross-border transfer requirements of the DPA, including where applicable, verification that the receiving jurisdiction has adequate data protection safeguards, or that appropriate contractual safeguards are in place.

We may update this Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be published on https://jiraniglobal.co/ with a revised "Last updated" date.

For any questions, requests, or complaints regarding this Policy or your personal data, please contact the following persons and we will endeavour to respond within a reasonable timeline: