PRIVACY POLICY
Effective date: March 5, 2026
1. Introduction
This Privacy Policy (the “Policy”) explains how the School of American Law in Africa team (“SAL Africa”, “we”, “us”) collects and processes personal data when you visit and use our website https://salkentlaw.com.ng (the “Website”) or interact with us via the Website.
This Policy is intended for visitors/applicants/participants from African countries who submit enquiries, registrations, or applications via the Website. It describes (i) what personal data we process, (ii) why and on what legal basis, (iii) who we share it with, (iv) how long we keep it, and (v) your rights.
We process personal data in accordance with the EU General Data Protection Regulation (“GDPR”) where it applies. For applicants/participants from African countries, we also aim to comply with applicable data protection requirements in your jurisdiction, to the extent they apply to our processing (for example, South Africa’s Protection of Personal Information Act, 2013 (“POPIA”), Nigeria’s Nigeria Data Protection Act, 2023 and related regulations, Kenya’s Data Protection Act, 2019 and regulations, and similar frameworks).
Where local laws provide additional rights or require specific notices, we will apply those requirements to the relevant processing where applicable.
This Policy does not apply to third‑party websites that may be linked from the Website. Please review their privacy notices separately.
2. Data Controller and Data Protection Officer
Data controller.
The data controller for personal data processed via the Website is SAL Africa (the team operating the Website as part of the Center of American Law).
Contact (Website enquiries).
E-mail: hello@salkentlaw.com.ng
Phone: +1 224 431 5937
Data Protection Officer (DPO).
Taras Polianskyi
E-mail: t.polianskyi@centerofamericanlaw.com
If GDPR or other applicable data protection laws apply to your interaction with us (for example, if you are located in certain African countries), you may contact our DPO with any data protection questions or requests.
3. Personal Data We May Collect
Depending on how you use the Website, we may process the following categories of personal data:
- Identity and contact data: such as your name, surname, e‑mail address, phone number, and the information you include in your message.
- Professional data: such as your employer/organisation, job title, and professional background where you provide it (e.g., in applications).
- Application/admissions data: such as CV, cover letter, education and experience information, references (if provided), and other documents you submit when applying to the SAL Africa program.
- Event and communication data: such as your registration details for events/webinars, your attendance, and your communication preferences.
- Technical and usage data: such as IP address, device and browser type, operating system, referral source, pages viewed, and approximate location derived from IP.
- Cookies and similar technologies: used to operate the Website and (where applicable) to analyse Website use (see Section 6).
We do not intentionally collect special categories of data (e.g., health data) through the Website. Please avoid submitting sensitive information unless it is necessary and you choose to provide it.
4. How We Collect Personal Data
We collect personal data in the following ways:
- Information you provide directly, e.g., via contact forms, event registration forms, or by contacting us by e‑mail/phone.
- Information you submit when applying to the SAL Africa program via the Website application form or by e‑mail.
- Information collected automatically when you browse the Website (technical logs and cookies).
5. Purposes and Legal Bases for Processing
We process personal data only where permitted by applicable law. Under the GDPR (where it applies), we rely on one or more of the following legal bases: performance of a contract/steps prior to entering into a contract, legitimate interests, consent, and compliance with legal obligations.
| Purpose | Examples of data |
| Website operation, security and improvements | Technical/usage data, cookies, logs |
| Responding to enquiries | Identity/contact data, message content |
| Processing applications to the SAL Africa program (admissions/selection) | Identity/contact, professional and application/admissions data |
| Creating/maintaining an applicant pool (optional, if you agree) | Application/admissions data |
| Event/webinar registration and management | Identity/contact, event data |
| Sending news, updates and marketing communications (if you opt in) | Identity/contact, communication preferences |
6. Cookies and Similar Technologies
Cookies are small text files stored on your device when you visit a website. The Website may use:
- Strictly necessary cookies: required for the Website to work properly (e.g., security, language settings).
- Analytics cookies (optional): used to understand how visitors use the Website (e.g., via Google Analytics) and to improve the Website. Where required, we use such cookies only with your consent.
You can manage cookies through your browser settings and, where available, via the Website cookie preferences. If you disable cookies, parts of the Website may not function properly.
7. Who We Share Personal Data With
We may disclose and/or otherwise make available personal data, strictly on a need-to-know basis and only to the extent necessary for the purposes set out in this Policy, to the following categories of recipients:
- IT and hosting providers who support the Website and our communication tools;
- service providers for analytics (e.g., Google Analytics), if enabled;
- vendors involved in organising events (venue/streaming/registration tools), where applicable;
- professional advisers, where necessary; and
- public authorities or courts where we are required to do so by law.
We do not sell your personal data. Where third parties process data on our behalf, we require them to protect it and use it only for the specified purposes, under appropriate contractual safeguards.
8. International Transfers
Some of our service providers may process personal data outside the country where you are located (for example, cloud or analytics providers). Where GDPR applies and personal data is transferred to a country without an adequacy decision, we use appropriate safeguards such as Standard Contractual Clauses. Where data protection laws require additional measures for cross‑border transfers, we will implement such measures where applicable (e.g., contractual and security safeguards and, where required, demonstrating adequate safeguards to the relevant regulator).
9. Data Retention
We keep personal data only as long as necessary for the purposes described in this Policy, unless a longer retention period is required or permitted by law.
Typical retention approach:
- Enquiries: retained as long as needed to respond and for reasonable follow‑up, then archived or deleted.
- Applications: retained for the admissions cycle and a reasonable period afterwards for audit/record‑keeping; longer retention (e.g., applicant pool) only with your consent or where legally required.
- Event registrations: retained for event administration and follow‑up, then archived or deleted.
- Marketing subscriptions: retained until you unsubscribe/withdraw consent.
- Technical logs: retained for a limited period for security and troubleshooting.
10. Security
We implement reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure. However, no website or internet transmission is completely secure. Please use caution when sending information online.
11. Your Rights
Subject to applicable law (including the GDPR where it applies), you may have the right to: access your personal data; request correction; request deletion; request restriction; object to processing (including objection to direct marketing at any time); withdraw consent (where processing is based on consent); and request data portability (where applicable).
We do not use the Website to make decisions based solely on automated processing that produce legal or similarly significant effects for you. If this changes, we will update this Policy and provide the required information.
To exercise your rights, please contact us using the details in Section 2 (preferably by e‑mail). We may ask you to verify your identity before responding.
You also have the right to lodge a complaint with the competent supervisory authority. If you are located in an African country, this may include your national regulator.
12. Children
The Website is not directed to children under 18. If you are under 18, please do not submit personal data via the Website. If we learn that a child has provided personal data, we will delete it where required.
13. Changes to This Policy
We may update this Policy from time to time. The latest version will be posted on the Website with an updated effective date.