Privacy Notice
Last updated: 28 October 2026
Who we are
Ngao Africa helps companies and institutions build strategic partnerships in and through East Africa. People share information with us when they request our research, ask for a conversation or work with us, and we owe it to them to treat that information with care. This notice explains what we collect, why we collect it, how we look after it, and the rights you have over it. You can reach us about anything in it at joe@ngaoafrica.com or on +254 727 998 363.
What we collect
When you request Upstream or complete one of our forms, we collect your name, work email address, organization, role and, if you choose to give it, your LinkedIn profile; and your answers about the partnership you are planning, such as its kind, markets, stage, value, timing and what stands in its way. When you write to us, speak with us or work with us, we keep the correspondence and the information needed to serve you. Our website provider may record basic information about visits, such as pages viewed and the type of device used, in the way described in its own notices.
We do not ask for sensitive personal data, and we ask you not to include it in your answers.
Why we use it, and on what basis
To send you what you asked for: Upstream and the summary of your partnership plan. We rely on your consent, which you give on the form.
To reply to you and, where you ask, to arrange a conversation: again on the basis of your consent.
To send you future editions of Upstream and occasional briefings, only if you tick the separate box that asks for them. You can unsubscribe at any time by replying to any message or writing to us.
To understand, in aggregate, which partnerships companies are planning, so that our research is useful. Anything we publish from this is anonymous and never identifies you or your organization.
To keep records we are required to keep if you become a client, on the basis of our legal obligations.
Who sees it
Your information is seen only by Ngao Africa. We do not sell it, rent it or share it with anyone for their own purposes. We use trusted service providers to run our work, for example: Google, for our forms, email, spreadsheets and documents, and Squarespace, for our website. They process data on our behalf and under their own security and data protection commitments. If you become a client, legal services are provided through Maina Ndirangu & Co. Advocates, who will receive the information needed to act for you.
Transfers outside Kenya
Our service providers store data on servers that may be outside Kenya. We transfer data only where the Data Protection Act, 2019 allows it, including where appropriate safeguards are in place and where you have consented to the transfer by submitting the form.
How long we keep it
We keep information from our forms for 24 months after our last contact with you, unless you ask us to delete it sooner or you become a client, in which case we keep client records for as long as the law requires. We then delete it or make it anonymous.
How we protect it
We keep your information in accounts protected by strong passwords and two-step verification, limit access to those who need it, and do not copy it into other systems without reason.
Your rights
You have the right to be told how your data is used; to see the data we hold about you; to ask us to correct it or delete it; to object to its use; and to withdraw your consent at any time, without affecting what was done before. To use any of these rights, write to joe@ngaoafrica.com. We will reply within the time the law allows, and usually much sooner.
Changes to this notice
We will update this notice when our practices change, and show the date of the latest version at the top.