Privacy Policy

iWorldAfric ("iWorldAfric", "we", "us", or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what data we collect when you visit iworldafric.com or contact us, how we collect and use it, how long we keep it, who we share it with, and the rights you have over it. It applies to this website and the services offered through it.

We process personal data in line with the Kenya Data Protection Act, 2019 and, where it applies to you, the EU and UK General Data Protection Regulation (GDPR). iWorldAfric is the data controller for the personal data described in this policy.

What data do we collect?

We collect only the data we need to respond to you, to consider you for a role, and to keep the website working and secure. Specifically, we collect:

Data you give us directly

• Job application data — when you apply for a role through our careers pages: your first name, last name, email address, telephone number (optional), a link to your resume or CV, an optional portfolio link, an optional LinkedIn profile link, your cover letter, and the role you are applying for.
• Contact and enquiry data — when you email or call us using the addresses and numbers published on this site, we receive whatever you choose to include: typically your name, email address, telephone number, the name of your organisation, and the content of your message.

Data collected automatically

• Usage and device data — pages you view, the approximate time you spend on them, the site or search engine that referred you, your browser type and version, your device type, your operating system, your language setting, and your approximate geographic location (country or city level, derived from your IP address). Google Analytics collects this only if you have allowed analytics cookies; if you have not, none of it is collected.
• Technical and security data — your IP address, the date and time of your request, and the resources you requested, recorded in the server logs of our hosting provider and our backend systems.
• Cookie and identifier data — the analytics cookies described in the Cookie Policy. These are set only after you allow them.

What we do not collect

We want to be equally clear about what this website does not do:

• This website does not take payments and does not collect card numbers or any other payment details.
• This website does not host user accounts. Sign-in and registration links direct you to our separate administration application, which has its own access controls.
• We do not ask for special category data (such as health, race, religion, political opinions, or biometric data) and we ask that you do not include it in a cover letter or an enquiry.
• We do not buy personal data from data brokers and we do not sell your personal data.

How do we collect your data?

You provide some data to us directly, and some is collected automatically:

• When you submit a job application using the application form on a job listing page. The form is sent to our recruitment backend when you press submit.
• When you contact us by clicking an email or telephone link on this site, or by writing to or calling us directly.
• When you browse the site, through cookies and similar technologies set by Google Analytics. We load Google Analytics only after you have allowed analytics cookies, so if you refuse, or simply never answer the notice, this collection does not happen at all.
• Through server logs generated automatically by our hosting provider and our backend API whenever your browser requests a page, an image, or data.
• Through images and assets served from our content storage, which your browser requests directly, meaning your IP address is visible to that storage provider.

Search filters on our careers pages (such as location or job type) are applied in your browser and are not transmitted to or stored by us.

How will we use your data?

We use your personal data only for the purposes below, and each purpose has a lawful basis:

We do not use your personal data to make decisions about you by automated means alone, and we do not carry out profiling that produces legal or similarly significant effects. We will not use your data for a new, unrelated purpose without telling you first and, where the law requires it, obtaining your consent.

How do we store your data?

Your data is stored on servers operated by our hosting and infrastructure providers, and in the databases of our administration backend. Some of these providers operate outside Kenya, including in the United States and the European Union, so your data may be transferred and stored outside your country of residence. Where we transfer personal data internationally, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses and the contractual commitments in our providers' data processing agreements.

Security measures

We take appropriate technical and organisational measures to protect your data, including:

• Encryption of all traffic to and from this website using HTTPS/TLS.
• Encryption of stored data at rest by our hosting, database, and object storage providers.
• Access controls and authentication on our administration systems, so that only authorised personnel can reach application and enquiry data, on a need-to-know basis.
• Validation and sanitisation of data submitted through our forms, and sanitisation of content rendered on the site, to guard against injection and cross-site scripting attacks.
• Security headers and transport hardening on the web application.
• Logging and monitoring of our infrastructure so we can detect and investigate incidents.

No method of transmission over the internet and no method of electronic storage is completely secure. While we work to protect your personal data, we cannot guarantee absolute security. If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the Office of the Data Protection Commissioner of Kenya, and any other regulator that has jurisdiction, within 72 hours of becoming aware of it where the law requires, and we will notify you directly where the breach is likely to result in a high risk to you.

How long we keep your data

We keep personal data only for as long as we need it for the purpose we collected it, and then delete it or anonymise it:

Sharing and disclosure of information to third parties

We do not sell, rent, or trade your personal data. We share it only with the service providers that operate this website and our systems, and only so far as they need it to provide their service to us. Each of them acts as our processor under a written agreement, except where noted. The providers we currently use are:

We may also disclose personal data:

• To professional advisers such as lawyers, auditors, and insurers, where they need it to advise us.
• To a regulator, court, or law enforcement agency where we are legally required to do so, or where disclosure is necessary to protect our rights, your safety, or the safety of others. We review every such request and disclose only what we are legally obliged to disclose.
• To a buyer or successor entity if iWorldAfric is involved in a merger, acquisition, or sale of assets. We will notify you before your data becomes subject to a different privacy policy.

This site links to third-party websites, including our profiles on Facebook, X, and LinkedIn. Following those links takes you to sites we do not control. We are not responsible for their content or privacy practices, and we encourage you to read their privacy policies. We do not embed social media tracking pixels or advertising tags on this website.

Your data protection rights

Under the Kenya Data Protection Act, 2019 and the GDPR, you have the following rights over your personal data. They are free to exercise.

• The right to be informed — to know how we collect and use your personal data. This policy is how we provide that information.
• The right of access — to ask for a copy of the personal data we hold about you.
• The right to rectification — to ask us to correct personal data that is inaccurate, or to complete data that is incomplete.
• The right to erasure — to ask us to delete your personal data where there is no good reason for us to keep it. This is sometimes called the right to be forgotten.
• The right to restrict processing — to ask us to pause our use of your personal data, for example while we check whether it is accurate.
• The right to object — to object to our processing your personal data where we rely on legitimate interests, including objecting to analytics.
• The right to data portability — to ask us to transfer the personal data you gave us to you or to another organisation in a structured, commonly used, machine-readable format.
• The right to withdraw consent — where we rely on your consent, to withdraw it at any time. Withdrawing consent does not affect the lawfulness of processing carried out before you withdrew it. For analytics cookies, withdrawing is one click on Cookie settings in the footer of any page.
• The right not to be subject to automated decision-making — we do not make decisions about you by automated means alone.
• The right to lodge a complaint — to complain to a data protection authority, as set out below.

To exercise any of these rights, email privacy@iworldafric.com. We may ask you for information to confirm your identity before we act, so that we do not disclose your data to someone else. We will respond within 30 days. If your request is complex or you have made several requests, we may extend that period and will tell you if we do.

If you are unhappy with how we have handled your personal data or your request, you have the right to complain to a supervisory authority. In Kenya, this is the Office of the Data Protection Commissioner (www.odpc.go.ke). If you are in the European Economic Area or the United Kingdom, you may complain to your local data protection authority. We would appreciate the chance to address your concerns before you approach a regulator, so please do contact us first.

Cookies

Cookies are small text files that a website places on your device when you visit it. They let the site recognise your browser on later visits or as you move between pages, and they can store information such as a randomly generated identifier or a preference you have set. Cookies set by the site you are visiting are called first-party cookies; cookies set by another organisation, such as an analytics provider, are called third-party cookies. This site also uses your browser's local storage, a related technology that we use to cache website content so pages load faster, and to remember the cookie choice you make below. That cache holds published website content and your own choice, not personal data about you, and it is never sent to us.

For the full list of the individual cookies we set, including their names and how long they last, see our Cookie Policy.

How do we use cookies?

We use cookies to understand how visitors use our website so that we can improve it. We ask before we set any of them. On your first visit a notice appears at the foot of the page offering Accept all, Reject all, and Manage preferences, and no analytics cookie is set and no analytics request is sent until you choose to allow it. Refusing is one click, exactly like accepting, and nothing on this website stops working if you refuse. Cookies are commonly grouped into the following categories:

• Strictly necessary cookies — required for the website to function and to be kept secure. These cannot be switched off in our systems. We do not currently set any cookies in this category on this website.
• Preference cookies — remember choices you make, such as your language or region, so the site can behave the way you prefer. We do not currently set any cookies in this category. We do use your browser's local storage to cache website content and to remember the cookie choice you make, which you can clear at any time from your browser settings.
• Analytics cookies — let us count visits and traffic sources and see which pages are the most and least popular, so we can measure and improve the site. We use Google Analytics 4 for this purpose, only with your consent, and these are the only cookies set on this website. The information these cookies collect is aggregated for reporting.
• Marketing and advertising cookies — used to build a profile of your interests and show you targeted advertising on other sites. We do not use marketing or advertising cookies, we do not run advertising pixels on this website, and we do not share analytics data with advertising networks.

How to manage cookies

You are in control of the cookies on your device, and you can refuse or remove them at any time. Blocking analytics cookies will not stop you from using any part of this website.

The most direct way is on this website itself: Cookie settings reopens the choice you were offered on your first visit, and the same link sits in the footer of every page. Turning analytics off there stops the measurement immediately and deletes the analytics cookies already on your device. The methods below work as well, and do not depend on us at all.

Opt out of Google Analytics

To stop Google Analytics from measuring your visits to this and other websites, install the Google Analytics Opt-out Browser Add-on. You can also block analytics cookies in your browser settings, or use a browser or extension that blocks trackers.

Manage cookies in your browser

Every major browser lets you see the cookies stored on your device, delete them, and block cookies from specific sites or from all sites. The instructions for the most common browsers are here:

• Google Chrome
• Mozilla Firefox
• Apple Safari
• Microsoft Edge

Most browsers also offer a private or incognito window, which discards cookies when you close it. Clearing your browser's site data for iworldafric.com will also remove the local storage cache described above. Full details are in our Cookie Policy.

Do Not Track

Do Not Track (DNT) is a browser setting that asks websites not to track you. Global Privacy Control (GPC) is a similar, more recent signal. There is still no agreed industry or legal standard for how a website must interpret either signal.

This website honours both. If your browser sends a DNT or a GPC signal, the analytics switch in our cookie notice starts in the off position and the notice says so, so analytics stays off unless you deliberately turn it on yourself. We never read these signals as permission, and we never use the presence or absence of one to track you or to build a profile about you.

You do not have to rely on a browser signal, because analytics on this website is off for everyone until it is switched on. If you send no signal at all and simply ignore the notice, nothing is measured. You can change your decision at any time through Cookie settings in the footer. The Google Analytics Opt-out Browser Add-on and your browser cookie settings remain available and work independently of us, and you may object to analytics processing at any time by emailing privacy@iworldafric.com.

Children's privacy

This website and our services are intended for businesses and for adults. They are not directed to children, and we do not market to children. We do not knowingly collect personal data from any child under the age of 18, which is the age of majority under Kenyan law, and we do not knowingly collect personal data from any child under the age of 13, the threshold set by the United States Children's Online Privacy Protection Act (COPPA).

Our careers pages are open only to applicants who are legally eligible to work, and we ask that nobody under 18 submit a job application or otherwise send us their personal data. Under the Kenya Data Protection Act, 2019, processing the personal data of a child requires the consent of a parent or guardian and must be in the best interests of the child.

If you are a parent or guardian and you believe your child has given us personal data, please contact privacy@iworldafric.com with enough detail for us to find the record. We will verify your request, delete the data from our systems, and confirm the deletion to you. If we discover on our own that we have collected personal data from a child without the required parental consent, we will delete it promptly.

Privacy policy changes

We review this Privacy Policy regularly and may update it to reflect changes in how we work, in the technology we use, or in the law. When we make a change, we will post the revised policy on this page and update the "Last updated" date at the foot of this page, so you can always see when it last changed.

If we make a material change — for example, if we begin using your personal data for a new purpose, or start sharing it with a new category of recipient — we will give you prominent notice before the change takes effect. Where we have your contact details and the law requires it, we will notify you directly by email, and where the change relies on your consent we will ask for that consent before we act on it. Your continued use of the website after a change takes effect means you accept the revised policy. We encourage you to review this page from time to time.

Contact our Data Protection Officer

If you have any question about this Privacy Policy, about how we handle your personal data, or if you want to exercise any of your rights, please contact our Data Protection Officer:

• Data Protection Officer, iWorldAfric
• Email: privacy@iworldafric.com
• General enquiries: support@iworldafric.com
• Telephone: +254 794 545 474
• Postal address: Phileo Place, Nairobi, Kenya

We aim to acknowledge every privacy enquiry within 5 working days and to resolve it within 30 days. You also have the right to complain to the Office of the Data Protection Commissioner of Kenya, as described under Your data protection rights above.