Privacy Policy
How Cities Africa collects, uses and protects your personal information, in line with South Africa’s Protection of Personal Information Act (POPIA) and, where it applies, the EU General Data Protection Regulation (GDPR).
Last updated 22 October 2026
Draft, pending legal review. This text has not yet been approved by Cities Africa and may change.
Who we are
This website is operated by Cities Africa [registered legal name and registration number to be confirmed], Suite D-3, First floor, Park Lane West Building, 194 Bancor Avenue, Menlyn Maine, Waterkloof Glen, Pretoria, 0181, South Africa.
Cities Africa is the responsible party for the personal information described in this policy. Our Information Officer is [name to be confirmed], who can be reached at info@citiesafrica.org.
What we collect
We only collect what we need:
- Enquiries: your name, organisation, email address, country (optional), the type of enquiry and your message.
- Newsletter: your email address, the language of the site you signed up on, and a record of your consent.
- Cookies: your cookie choice, and analytics information only if you allow it. See our Cookie policy.
- Technical logs: our hosting providers keep standard server logs, such as IP addresses and browser type, to keep the site secure and working.
Why we use it
- To respond to your enquiry. We rely on your consent, which you give when you send the form.
- To send you the newsletter. We rely on your consent, which you can withdraw at any time using the unsubscribe link in every email.
- To keep the website secure and working. We rely on our legitimate interest in running a safe website.
We do not sell your personal information, and we do not use it for automated decisions or profiling.
Transfers outside South Africa
Some of our service providers are located outside South Africa. Where personal information is transferred, we make sure the recipient is bound by law, binding agreements or corporate rules that give it a level of protection substantially similar to POPIA, as section 72 of POPIA requires.
How long we keep it
- Enquiries: for 24 months after our last contact with you [to be confirmed], unless a longer period is needed for an ongoing partnership.
- Newsletter: until you unsubscribe. We then keep only your email address and the date you unsubscribed, so we do not contact you again.
- Server logs: for the period set by our hosting providers, typically no more than 30 days [to be confirmed].
How we protect it
Information is sent over encrypted connections (HTTPS). Access to enquiries and subscriber records is limited to authorised Cities Africa staff with individual accounts. We review our safeguards regularly and will notify you and the Information Regulator if a security compromise affects your information.
Your rights
You have the right to:
- ask whether we hold personal information about you, and for a copy of it;
- ask us to correct or delete it;
- object to our use of it, or withdraw your consent at any time;
- unsubscribe from the newsletter using the link in any email.
To make a request, email info@citiesafrica.org. We will respond within 30 days and may need to confirm your identity first.
Complaints
If you are unhappy with how we have handled your information, please contact us first so we can put it right. You also have the right to complain to the Information Regulator (South Africa) at www.inforegulator.org.za, or, if you are in the European Union, to your local data protection authority.
Changes to this policy
We may update this policy as our work develops. The date at the top of the page shows when it last changed.