Privacy Policy

The African Agricultural Technology Foundation (AATF) is the data controller responsible for your personal data in connection with ACAT 2027.

We collect personal data through your registration, payment, and interaction with the ACAT 2027 website, including: full name, email address, phone number, organisation and designation, passport/national ID number, country, gender, dietary requirements and accessibility needs, payment method and reference, transaction details, IP address, and browser/session data.

We do not directly collect or store credit card numbers — card payments are handled entirely by PesaPal on their PCI-DSS compliant platform.

Dietary and accessibility data constitutes special category data and is processed solely to provide appropriate Conference facilities.

We use your personal data to: process and manage your Conference registration; process payment and issue receipts; send confirmation, QR code, and event information; manage on-site check-in and accreditation; prepare the delegate directory shared with attendees and sponsors; comply with visa and government reporting requirements; send ACAT programme updates; send future AATF event communications (with your consent); improve our website and registration system; and prevent fraud and ensure website security.

We rely on the following legal bases:

• Contract performance: Processing necessary to fulfil your registration.
• Legal obligation: Compliance with Kenyan, Rwandan, or other applicable law.
• Legitimate interests: Operating and improving our events, preventing fraud, communicating relevant information.
• Consent: Where we rely on consent (e.g. marketing communications), you may withdraw at any time.

We share your personal data only where necessary:

• PesaPal Limited — payment processing only.
• Kigali Convention Centre — venue management, security, and catering (name, dietary needs, session data).
• Other delegates — your name, organisation, and country may appear in the delegate directory.
• AATF partners and sponsors — aggregated, anonymised statistics only. Individual data is not shared with sponsors without your explicit consent.
• Government and regulatory authorities — where required by law or court order.
• IT service providers — hosting, email, and CRM providers acting as data processors under agreements.

We do not sell, rent, or trade your personal data to third parties for commercial purposes.

AATF operates across multiple African countries. Your data may be processed in Kenya, Rwanda, Nigeria, or other countries where AATF or its service providers operate. Where data is transferred outside your home country, we ensure appropriate safeguards are in place, including contractual protections consistent with the Kenya Data Protection Act, 2019.

After the applicable period, your data will be securely deleted or anonymised.

Under the Kenya Data Protection Act, 2019 and other applicable laws, you have the right to: access your personal data; request correction of inaccurate data; request deletion where there is no lawful reason to retain it; restrict processing in certain circumstances; receive your data in a portable format; object to processing based on legitimate interests or for direct marketing; withdraw consent at any time; and lodge a complaint with the relevant data protection authority.

To exercise any of these rights, please email ACATDelegates@aatf-africa.org. We will respond within 30 days. We may need to verify your identity before processing your request.

This website uses essential cookies required for login sessions, registration form progress, and security (CSRF protection) — these cannot be disabled. We also use analytics cookies to understand how visitors use the site; these are anonymised and do not identify individuals.

You can control cookies through your browser settings. Disabling essential cookies may prevent the registration system from functioning correctly.

We implement appropriate technical and organisational measures to protect your personal data, including: HTTPS/TLS encryption for all data transmission; hashed storage of passwords; role-based access controls; and regular security reviews.

In the unlikely event of a data breach affecting your rights and freedoms, we will notify you and the relevant authorities as required by law.

ACAT 2027 is a professional conference intended for adults (18 years and over). We do not knowingly collect personal data from individuals under the age of 18. If you become aware that a child has provided us with personal data, please contact us immediately and we will take steps to delete such data.

For any privacy-related queries, requests, or complaints, please contact us:

If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Data Protection Commissioner of Kenya at www.odpc.go.ke.

This Privacy Policy may be updated from time to time. Material changes will be notified to registered delegates by email.