Who we are
This website is operated by PRISMA Africa (“we”, “us”). Requires owner/legal review: legal entity name, registration number, registered address and the country whose law primarily applies
For privacy questions or requests contact info@prisma-africa.com. Requires owner/legal review: named data controller / responsible party, Information Officer or Data Protection Officer, and any EU or UK representative if required
What we collect
| Source | Information |
|---|---|
| Enquiry form (required) | Your name, work email, business or organisation, and your message. |
| Enquiry form (optional) | Phone, country, the topic you choose, and whether you ask to receive email updates (with the date you asked). |
| Recorded with an enquiry | Submission date, the website as source, and the version of this policy shown to you. |
| Privacy choices | A prisma_consent cookie recording your choices, their date and the policy version. No identifier. |
| Technical data | Our hosting provider processes data such as IP address, browser type and request logs to deliver and secure the website. |
| Analytics (only if enabled and allowed) | Pages visited, approximate location and device information, collected by Google Analytics only after you opt in. See the cookie policy. |
Please do not send sensitive personal data or confidential business records through the enquiry form. A privacy request you prepare on our privacy request page is sent from your own email app; the website does not store it.
Why we use it and our legal bases
Which law applies depends on where you are and where PRISMA Africa is established. Requires owner/legal review: confirm the applicable laws and the mapping below
| Purpose | EU / UK GDPR | South Africa POPIA | Kenya DPA 2019 | Nigeria NDPA 2023 |
|---|---|---|---|---|
| Reply to your enquiry and discuss possible support | Steps before a contract at your request; legitimate interests (Art. 6(1)(b), (f)) | Contract steps; legitimate interests (s. 11(1)(b), (f)) | Contract steps; legitimate interests (s. 30) | Contract steps; legitimate interests (s. 25) |
| Occasional email updates, only if you tick the box | Consent (Art. 6(1)(a); PECR / ePrivacy rules) | Consent (s. 11(1)(a); s. 69) | Consent (s. 30; s. 37) | Consent (s. 25) |
| Operate and secure the website, prevent spam | Legitimate interests in a secure, working website | |||
| Remember your privacy choices | Strictly necessary; legitimate interests and compliance with consent rules | |||
| Website analytics, only if enabled and allowed | Consent, which you can withdraw at any time | |||
You do not need to consent to anything for us to answer your enquiry. This website does not sell personal information, use it for advertising or make automated decisions about you.
Who receives it
- Wix.com — website hosting and the content management system where enquiries are stored, including platform security and error monitoring.
- Google — only if analytics is enabled on this site and you allow it.
- PRISMA Africa advisors who need the enquiry to respond to you.
- Professional advisers or authorities where the law requires it.
Requires owner/legal review: confirm data processing agreements with Wix and any other processors (for example the email provider used to reply, a CRM, or a content-delivery network such as Cloudflare if used by the host)
International transfers
Our service providers may process information outside your country, including outside Africa. Requires owner/legal review: the safeguard relied on for each transfer (for example standard contractual clauses, an adequacy decision or another mechanism permitted by POPIA s. 72, the Kenya DPA Part VI or the NDPA)
How long we keep it
- Enquiries that do not lead to an engagement: Requires owner/legal review: retention period, e.g. a set number of months
- Information about clients: Requires owner/legal review: retention period linked to contractual, tax and professional obligations
- Email-update consent: until you withdraw it or unsubscribe.
- Privacy choices cookie: 180 days, or until you clear it.
Your rights
Depending on the law that applies to you, you can ask us to:
- give you access to, or a copy of, your personal information;
- correct inaccurate or incomplete information;
- delete it, or restrict how we use it;
- stop using it where we rely on legitimate interests (objection), and stop direct marketing at any time;
- provide it in a portable, machine-readable format where applicable;
- withdraw consent at any time, without affecting earlier use.
Use the privacy request page or email info@prisma-africa.com. We will verify your identity before disclosing, changing or deleting anything, and respond within the period the applicable law requires.
Complaints
Please contact us first so we can try to help. You may also complain to a data protection authority, for example:
- Kenya — Office of the Data Protection Commissioner (odpc.go.ke)
- South Africa — Information Regulator (inforegulator.org.za)
- Nigeria — Nigeria Data Protection Commission (ndpc.gov.ng)
- United Kingdom — Information Commissioner’s Office (ico.org.uk)
- European Union — the supervisory authority where you live or work (edpb.europa.eu)
Security
The website is served over HTTPS, collects only what is needed to reply, and applies browser security headers. Requires owner/legal review: confirm that access to stored enquiries is limited to authorised PRISMA staff (Wix collection permissions)
Children
This website is intended for businesses and is not directed at children.
Changes to this policy
We will update the version and date above when this policy changes. If the change affects optional cookies, we will ask for your choices again.