Privacy Policy

1. Who We Are

Impact Axis is the data controller responsible for the personal data described in this Privacy Policy. We are based at Rond-point Express, Biyem-Assi, Yaoundé, Cameroon. If you have any questions about this Privacy Policy or how we handle your personal data, you can reach us using the contact details in Section 13.

2. Personal Data We Collect

We collect personal data in the following ways:

• Contact and inquiry data: name, email address, and any information you provide when you contact us through a form on the Site or by email;
• Newsletter data: first name, last name, and email address when you subscribe to our newsletter;
• Partner and applicant data: name, organization, role, and correspondence details when you engage with us as a partner, funder, ecosystem builder, applicant, or prospective collaborator;
• Usage data: information collected automatically as you browse the Site, such as your IP address, browser type, device information, pages visited, and referring pages, generally through cookies and similar technologies (see Section 9);
• Program and beneficiary data: where applicable, information about participants in our programs, including names, photographs, or testimonials used for reporting and storytelling purposes, always collected with appropriate consent.

3. Why We Process Your Data and Our Legal Basis

We process personal data for the following purposes, relying on the legal bases identified in Law No. 2024/017:

• To respond to your inquiries and correspond with you (based on your consent or, where you have contacted us to explore a partnership, in the context of pre-contractual discussions);
• To send newsletters and updates about our work, where you have subscribed (based on your consent, which you may withdraw at any time);
• To manage relationships with partners, funders, and collaborators, and to report on program activities and outcomes as required by our funding and partnership agreements (based on contractual necessity and our legitimate interests, and, where applicable, our legal obligations to funders);
• To operate, secure, and improve the Site (based on our legitimate interests in maintaining a functional and secure website);
• To comply with legal obligations under Cameroonian law.

4. How We Share Your Data

We do not sell your personal data. We may share personal data with:

• Service providers who support our operations, such as website hosting, email, and analytics providers, acting on our instructions and under appropriate confidentiality and data-protection commitments;
• International donors, funders, and partner organizations, where necessary for program reporting, grant administration, or joint initiatives — always limited to what is necessary for that purpose;
• Regulatory or judicial authorities, where required by law.

Where we share personal data with partners or service providers located outside Cameroon, we do so in accordance with Section 5 below.

5. International Data Transfers

Because we work with international donors and partner organizations, personal data may be transferred outside Cameroon. In accordance with Article 32 of Law No. 2024/017, we only transfer personal data to countries or organizations that ensure an adequate level of protection, or where appropriate safeguards are in place, such as contractual data-protection clauses with our partners and funders. Where required, we obtain your consent before transferring your personal data internationally.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, including to satisfy any legal, accounting, or reporting requirements attached to our funding and partnership agreements. Contact and newsletter data is generally retained until you ask us to delete it or unsubscribe; partner and program data is retained for the duration of the relevant relationship or program, plus any period required by our donor reporting obligations.

7. Your Rights

Under Law No. 2024/017, and consistent with internationally recognized data-protection standards, you have the right to:

• Be informed about how your personal data is processed;
• Access the personal data we hold about you, free of charge;
• Request correction of inaccurate or incomplete data;
• Request erasure of your personal data ("right to be forgotten"), subject to any legal or contractual retention obligations;
• Object to the processing of your personal data, including for direct marketing;
• Request portability of your data, where technically feasible;
• Withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact us using the details in Section 13. Once Cameroon's Personal Data Protection Authority is operational, you will also have the right to lodge a complaint with it.

8. Data Security

We implement reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or alteration, consistent with the security obligations set out in Law No. 2024/017. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Cookies and Similar Technologies

The Site may use cookies and similar technologies to operate correctly, remember your preferences, and understand how visitors use the Site. Some cookies are essential to the Site's operation; others, such as analytics cookies, are used only with your consent where required. You can control or disable cookies through your browser settings, though doing so may affect certain features of the Site.

10. Children's Privacy

The Site is not directed at children, and we do not knowingly collect personal data from children without appropriate consent from a parent or guardian. Where our programs involve participants who are minors, we collect and use any related personal data, images, or testimonials only with the appropriate consent of the minor's parent or guardian, and in line with our program safeguarding practices.

11. Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the competent authority and, where required, affected individuals, in accordance with Law No. 2024/017.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, our Site, or applicable law. The "Last updated" date at the top of this page indicates when it was last revised. We encourage you to review this page periodically.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at:

• Impact Axis — Rond-point Express, Biyem-Assi, Yaoundé, Cameroon
• Email: info@impact-axis.org
• Phone: +237 680 816 656

You may also contact Cameroon's National Agency for Information and Communication Technologies (ANTIC) or the Personal Data Protection Authority established under Law No. 2024/017 regarding matters within their respective mandates.