Privacy Notice.

Who we are

This notice covers indaba.co, the website of Indaba (“we”, “us”). Other Indaba sites, including the Indaba Foundation, the Indaba Institute and the investor portal, have their own notices.

The short version

• Optional analytics and advertising cookies are used only if you agree in the cookie banner. You can change your choice at any time with “Cookie settings” at the foot of every page.
• We only receive personal information if you send it to us through one of our forms. Indaba Guide registration forms stay disabled until their storage provider is verified; until then they record nothing.
• Form submissions are emailed to the Indaba team so that we can reply. We do not sell personal information, and we do not use what you send through the forms for advertising.
• Please do not send us information about specific children.

When you browse

indaba.co is a set of static pages hosted on Amazon Web Services: Amazon CloudFront delivers the pages and Amazon S3 stores them, in the United States. As with any website, your browser’s request, including your IP address, passes through these services so that the page can be delivered and the service protected.

We have not switched on visitor access logs. Our fonts are served from this site rather than from a third party, so loading a page does not contact a font provider.

Analytics and advertising, only with your agreement

Every page loads Google Tag Manager, a Google service that manages our measurement tools. It starts with every analytics and advertising permission switched off (Google Consent Mode). What happens next depends on your choice in the cookie banner:

• Before you choose, or if you decline: no analytics or advertising cookies are set, and no Meta or LinkedIn tools load. Google’s tags may send Google limited signals without cookies or advertising identifiers (for example, that a page was viewed), which Google uses to estimate overall visitor numbers.
• Accept all: Google Analytics sets its cookies and records how the site is used, such as the pages viewed, how you arrived, your approximate location (from your IP address, which Google does not store) and your type of device. Advertising tools from Google Ads, Meta and LinkedIn also load; they tell us whether people reached the site through our advertising and help us show it to relevant audiences.

These providers process the data on our behalf and, for advertising, also as independent controllers under their own terms: Google (Google Ireland Limited and Google LLC), Meta Platforms Ireland and LinkedIn Ireland. Data is transferred to the United States. Your choice is stored in your browser for 12 months; the cookie notice lists every cookie.

When you use a form

The existing partner enquiry (“Build with Indaba”) and “Register interest” forms work as follows:

• What you type (such as your name, email address, organisation, role, country and message) and the options you choose are sent to our form service and emailed to the Indaba team through Amazon Simple Email Service (Amazon SES, in the United States, region us-east-1).
• The form may also record which page of this site you came from or sent it from, so that we understand the context of your message.
• Your IP address is held briefly in memory to limit how many forms, including rejected attempts, can be sent from one network in a short time, which protects the service from abuse. It is also included in the notification email to the team.
• Each form has a hidden field that people do not see or fill in. If it is filled in, we treat the submission as automated and nothing is emailed.
• The form service keeps an operational log for up to six months. The log contains no name, no message text and no full email address. It records only the domain of your email address (for example “example.org”), the options you selected, the country or region you entered, the page the form was on or that you came from, the length of your message, whether the submission succeeded and when it was sent.
• We reply by email, from the team’s own mailbox.

Guide preview forms and measurement

Until a dedicated Guide registration service is connected, the Guide priority-access and co-production pages use the “Register interest” form described above, so what you send there is emailed to the Indaba team in the same way. Before a dedicated service is activated, this notice will identify the provider, processing locations, retention and the people responsible for export, erasure and consent requests. Priority registration will cover the requested product updates; broader marketing is a separate optional choice.

Guide previews offer optional anonymous interaction measurement, off by default. The choice is saved in local storage as indaba-guide-measurement. No analytics provider currently receives these events. Form fields, email addresses and search text are excluded. A temporary session-storage entry remembers the page and link used to reach a Guide form. You can remove these entries through your browser’s site-data settings.

Why we use it

We use your details to reply to your enquiry and, if you registered interest, to tell you when there is news about the journey you chose. We rely on your agreement, which you give with the checkbox on each form, and on our legitimate interest in answering enquiries and keeping the forms free of abuse. For analytics and advertising we rely only on your agreement in the cookie banner.

Who can see it

The members of the Indaba team who handle enquiries. Our service providers process it on our behalf: Amazon Web Services (hosting, the form service and email delivery) and the provider of our team’s email. We do not sell personal information or share it for advertising. If your question is really for the Indaba Foundation or the Indaba Institute, we will tell you, and we will only pass your details on with your agreement.

Where it is processed

Our hosting and email delivery services are in the United States. If you write to us from elsewhere, including South Africa, the European Union or the United Kingdom, your information is transferred to and processed there.

How long we keep it

• Operational logs: up to six months, after which they are deleted automatically.
• Google Analytics data: for the retention period set in our account, at most 14 months.
• Enquiry and interest emails: for as long as we need them to handle your request and any conversation that follows. You can ask us to delete them at any time.

Children

This site is meant for adults. We do not collect information about children on this site, and the forms ask you not to include information about specific children. If you think a child’s information has been sent to us, tell us and we will delete it.

Your rights

You can ask to see the personal information we hold about you, to correct it or to delete it, and you can withdraw your agreement at any time. Write to greg@indaba.co or use the contact form. You may also complain to the data protection authority where you live, such as the Information Regulator in South Africa.

Cookies

Optional cookies only with your agreement. The cookie notice lists each one, and the one cookie used by the separate investor portal.

Changes to this notice

We will update this notice when the site changes, and change the date at the top of the page.

This notice will name the responsible legal entity once its registration is complete.