Your data, handled honestly.

Who we are

If you have any questions about this policy or about how we handle your data, contact us at info@talibahmedbensouda.com.

What we collect and why

Information you give us

• Contact form submissions — your name, email address, and the message you write. We use this solely to respond to your enquiry.
• Event registrations — your name and email when you register for a campaign event. We use this to confirm your place and send event updates.
• Account creation — name and email if you create a portal account. This is used to authenticate you and manage your access.

Information collected automatically

• Server logs — your IP address, browser type, pages visited, and timestamps. These are retained for up to 30 days for security and diagnostic purposes and are not used for profiling.
• Cookies and local storage — see our Cookie Policy for the full breakdown. In short: session tokens, CSRF protection, theme preference, and (with your consent) analytics.

Information we do not collect

We do not collect payment information, government-issued ID, or sensitive categories of personal data (health, religion, ethnicity, political opinions beyond your voluntary engagement with this campaign). We do not knowingly collect data from children under 13.

Legal basis for processing

We process your data on one of the following bases:

• Consent — where you have actively opted in (e.g. analytics cookies, joining our mailing list).
• Legitimate interests — where processing is reasonably necessary to run and improve the site, and those interests are not overridden by your rights (e.g. server security logs).
• Contract — where processing is necessary to fulfil a commitment you've made (e.g. processing an event registration).
• Legal obligation — where we are required by law to retain certain records.

How we use your information

• Responding to messages sent through the contact form.
• Confirming event registrations and sending event-related updates.
• Authenticating portal accounts and maintaining account security.
• Diagnosing technical issues and protecting against misuse.
• Improving the site based on anonymised usage patterns (only if analytics consent is given).

We will not use your information for any purpose materially different from the one for which it was collected without asking for fresh consent.

Who we share it with

We do not sell, rent, or trade your personal data. We share it only with:

• Resend — our transactional email provider, for sending confirmation and reply emails. Data is processed under their Data Processing Agreement.
• Hosting provider — our web host processes server traffic data to serve the site. This provider is contractually bound to process data only on our instructions.
• Legal authorities — if required by a valid court order or applicable law in The Gambia.

No data is transferred outside The Gambia except where the recipient provides equivalent data-protection safeguards (e.g. standard contractual clauses).

How long we keep it

• Contact enquiries — up to 2 years from the date of last correspondence, then securely deleted.
• Event registrations — up to 6 months after the event date.
• Portal accounts — for as long as the account is active. Inactive accounts are deleted after 12 months of no sign-in, with prior notice.
• Server logs — 30 days, then automatically purged.
• Analytics data — if collected with consent, retained in aggregated, anonymised form only.

Your rights

Under applicable data-protection law you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data (the "right to be forgotten"), subject to legal retention requirements.
• Restrict processing while a dispute is resolved.
• Object to processing based on legitimate interests or for direct marketing.
• Port your data to another service in a machine-readable format.
• Withdraw consent at any time where processing is consent-based, without affecting the lawfulness of prior processing.

To exercise any of these rights, email info@talibahmedbensouda.com. We will respond within 30 days. If you believe we have mishandled your data you have the right to lodge a complaint with the relevant data-protection authority in The Gambia.

Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include HTTPS encryption on all pages, hashed password storage, CSRF protection on all forms, and restricted access to production systems.

No method of transmission over the internet is 100% secure. If you discover a security vulnerability, please report it responsibly to info@talibahmedbensouda.com.

Changes to this policy

We may update this policy from time to time. Significant changes will be communicated by updating the "Last updated" date at the top of this page. We encourage you to review this page periodically.

Contact

Questions or requests about this policy:

info@talibahmedbensouda.com

For general enquiries, use the contact page.