Data Protection Notice

01

What this notice is, and which law applies

This notice sets out, in regulatory terms, how personal data is processed for the 10th Africa Energy Summit. It sits alongside the Privacy Policy, which covers the same processing in plainer language, and the two are built from the same set of facts so that they cannot contradict each other.

The governing law is the Nigeria Data Protection Act 2023, together with the Commission’s General Application and Implementation Directive 2025. This page is still reached at its original NDPR address because that is the address people have and search for; the Nigeria Data Protection Regulation 2019 ceased to be the operative instrument when the Directive was issued.

---

02

Data controller and contact

Solewant Group, Km 16 East–West Road, Rumuodomaya, Port Harcourt, Rivers State, Nigeria is the data controller.

Everything on this page — enquiries, rights requests, complaints — goes to seti@solewantgroup.com, which reaches the person responsible for data protection at the summit secretariat. It is a role address rather than an individual’s, so that a request still arrives when somebody is away or has moved on.

---

03

Categories of personal data

The following are processed for registration and event delivery.

• Identity data — full name, job title and organisation
• Contact data — email address, telephone number and country
• Image data — the badge portrait uploaded during registration
• Transaction data — booking reference, pass category, quantity and payment status
• Attendance data — check-in scans and session access records
• Correspondence — enquiries sent through the contact form and our replies
• Technical data — IP address, browser and device information, and the campaign tag on the link you arrived through

No special-category data is asked for. Do not send health, religious or political information through the registration form or the contact form; if an accessibility or dietary need means you must tell us something of the kind, say so to the secretariat directly and it is used for that purpose alone and deleted after the event.

---

04

Lawful basis for processing

Each purpose is tied to one basis.

• Performance of a contract — issuing passes, taking payment, admitting you to the summit
• Legitimate interest — event administration, venue safety, fraud prevention and aggregate reporting. Weighed against your interests, and none of it involves profiling you
• Consent — marketing about future editions, and retention of your badge photograph beyond the period below
• Legal obligation — tax, accounting and statutory reporting

---

05

Badge photographs

Portraits exist to produce your badge and attendance card. They are held outside the ordinary media library, are never used for facial recognition, and are not given to sponsors or exhibitors.

Portrait format, 4:5, at least 1200 × 1500 pixels, JPG or PNG, up to 8MB. Deleted 90 days after the summit unless you have agreed we may keep yours.

---

06

Processors and recipients

Data is disclosed to the following, each engaged under a written agreement that binds them to our instructions and to confidentiality.

• Flutterwave — payment processing. Card details are entered on Flutterwave’s own hosted page and never reach this site
• Paystack — held as an alternative payment route, used only if Flutterwave is unavailable
• Email and SMS delivery providers — sending confirmations, passes and joining instructions
• Hosting and infrastructure providers — running the website and the registration system
• Badge production partners — printing passes at the venue
• Connect Marketing Services — campaign delivery and reporting, as a processor acting on Solewant’s instructions

---

07

Cross-border transfers

Several of those providers operate infrastructure outside Nigeria, so personal data is transferred abroad in the ordinary course of registering you.

Such transfers are made only where the Commission has found the destination adequate, or under a transfer instrument of the kind the Act recognises — standard contractual clauses, binding corporate rules, or an approved code — so that the protection travels with the data. We will tell you which applies to a given provider if you ask.

---

08

Retention

Set by purpose, and nothing is kept indefinitely by default.

• Registration and attendance records — 24 months after the summit, for audit, finance and planning
• Badge photographs — deleted 90 days after the summit, unless you have agreed we may keep yours for future editions
• Payment and invoice records — as long as Nigerian tax law requires
• Enquiries sent through the contact form — 12 months after the matter is closed
• Marketing consents — until you withdraw them

---

09

Your rights, and how to use them

You have the right to be informed, the right of access, and the rights to rectification, erasure, restriction and portability, as well as the right to object to processing and to withdraw a consent you have given.

Send the request to seti@solewantgroup.com, saying which right you are using and the email address you registered with. We answer within 30 days. We may ask you to confirm your identity first, and we will say so quickly rather than at the end of the thirty.

There is no charge for any of this.

---

10

Automated decisions

No decision producing a legal or similarly significant effect is made about you by automated means. Exhibitor and media accreditation is decided by a person, and a declined application is told why.

---

11

Complaints

Raise it with us first and we will try to put it right. If you are still not satisfied you may complain to the Nigeria Data Protection Commission, which can investigate and direct us to act. Complaining to the Commission costs nothing and leaves your other legal rights untouched.

---

12

Breach notification

Where a personal data breach is likely to risk your rights and freedoms, we notify the Commission within 72 hours of becoming aware of it. Where the risk to you is high we tell you directly and without waiting, in language that says what happened and what to do about it.