1. Information We Collect
We collect information you provide directly to us when engaging with our consulting services, enrolling in TAFA Academy, using our interactive diagnostics, subscribing to intelligence dispatches, or interacting with our website:
A. Business Consultation & Inquiry Information
- Contact Identification: Full name, professional email address, telephone/WhatsApp number, job title, and organization name.
- Operational Context: Company size, industry sector, technological stack details, and specific operational or AI transformation goals shared during consultation scheduling.
B. TAFA Academy Enrolment Data
- Learner Details: Name, personal or corporate billing email, phone number, professional background, and selected educational tracks.
- Payment & Transaction Information: Payments for Academy cohorts are processed through certified third-party payment gateways (including Paystack). TAFA does not store complete debit/credit card numbers or CVVs on our servers.
C. Interactive Assessment & Newsletter Dispatches
- Diagnostic Self-Check: Answers submitted to our enterprise AI maturity self-check (such as current AI usage level, data governance posture, and workforce training scale).
- Newsletter Subscriptions: Work email address provided to receive The African AI Executive Memo.
2. How We Use Your Information
We process collected data exclusively for legitimate commercial, educational, and operational purposes:
- To schedule, prepare, and conduct customized 30-minute AI Growth Audits and executive briefings.
- To administer Academy cohort enrolments, issue verified course certificates, and provide live classroom access.
- To send bi-weekly executive intelligence memos, research benchmarks, and syllabus updates (with instant opt-out functionality).
- To analyze aggregated website performance and improve user experience across African bandwidth conditions.
3. Confidentiality of Client Data in AI Engagements
As an enterprise AI advisory and implementation practice, we adhere to strict data segregation and model safety protocols:
- Zero Model Training on Client Data: We do not upload, share, or submit client proprietary data, internal code repositories, or customer databases to train public or commercial third-party Large Language Models (such as public ChatGPT or Claude).
- Enterprise NDA Standards: All diagnostic assessments, system architecture engagements, and custom model implementations are protected under rigorous mutual Non-Disclosure Agreements (NDAs).
- Private & Localized Deployments: Solutions engineered for clients utilize zero-retention API endpoints, isolated vector knowledge bases, and strict access control boundaries.
4. Data Sharing and Third-Party Processors
We do not sell, rent, or trade your personal or corporate information. We only share information with trusted service providers necessary to operate our business under strict confidentiality agreements:
- Payment Processors: Paystack (PCI-DSS compliant) for processing Academy course fees.
- Cloud & Infrastructure Providers: Secure enterprise hosting, encrypted form processing backends, and reliable email transmission gateways.
- Legal Compliance: When required by enforceable court orders, regulatory directives (e.g., Central Bank or statutory authorities), or applicable law.
5. Data Retention & Security
We implement appropriate technical, administrative, and physical safeguards to prevent unauthorized access, loss, or alteration of your personal data. We retain lead and client data only as long as necessary to fulfill the operational purpose for which it was collected or to comply with statutory legal and accounting retention periods.
6. Your Legal Rights
Under applicable pan-African data protection legislation (including NDPR and POPIA), you hold the following rights regarding your personal information:
- Right to Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete information.
- Right to Erasure ("Right to be Forgotten"): Request deletion of your personal records where retention is no longer legally justified.
- Right to Opt-Out: Unsubscribe from marketing or newsletter communications at any time using the one-click unsubscribe link in our emails.
7. Contact Our Data Protection Officer
If you have questions regarding this Privacy Policy, wish to exercise your data rights, or require an Enterprise Data Processing Agreement (DPA) for your organization, please contact us at:
TalentFlow Africa — Data Governance & Legal Desk
Email: privacy@talentflowafrica.com
General Inquiries: contact@talentflowafrica.com