Privacy Policy

Last updated: August 2026

1. Introduction

African Academy of Neurology (AFAN) ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website africaneurology.com (the "Website") and use our services.

2. Data Controller

AFAN is the data controller for the personal data we collect through this Website.
Contact: afaneurology.info@gmail.com
Address: 21 Upper Towers Road, Muizenberg, Cape Town 7945, Rep. South Africa

3. Lawful Basis for Processing

We process your personal data under the following lawful bases:

  • Consent: For newsletter subscriptions, contact form submissions, and cookie usage.
  • Contract: For account registration and authentication.
  • Legitimate Interests: For website administration, security, and session management.
  • Legal Obligation: For compliance with applicable laws and regulations.

4. Information We Collect

We collect the following categories of personal data:

  • Identity Data: Name, email address, and professional status (HCP self-declaration).
  • Technical Data: IP address, browser type, device information, and usage data.
  • Authentication Data: Session tokens and account credentials (stored securely).
  • Communication Data: Messages submitted via our contact form.
  • Marketing Data: Email address for newsletter subscriptions (only with explicit consent).

5. How We Use Your Data

  • To provide and maintain our Website and services.
  • To process registrations, newsletter subscriptions, and contact requests.
  • To send administrative information and respond to inquiries.
  • To improve our Website and user experience.
  • To protect against fraud and unauthorised access.
  • To comply with legal obligations.

6. Data Sharing and Disclosure

We share your data with the following third-party processors:

  • Resend: For sending contact form emails. Privacy Policy: resend.com/legal/privacy-policy
  • Hostinger: For web hosting. Privacy Policy: hostinger.com/privacy
  • Vercel Blob: For image and file storage. Privacy Policy: vercel.com/legal/privacy-policy
  • Turso/LibSQL: For database services. Privacy Policy: turso.tech/privacy

We also use development scripts served from Supabase storage for visual editing and route messaging during site development. These do not process personal data for our core operations.

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

7. Data Retention

  • Account data is retained for the duration of your account. Upon deletion, your data is removed from our database within 30 days.
  • Newsletter subscriptions are retained until you unsubscribe or request deletion.
  • Contact form submissions are not stored in our database. Messages are sent directly to our email via Resend and are not retained on our servers.
  • Session data expires automatically after 7 days. Expired sessions are periodically cleaned up from our database.
  • Authentication tokens and credentials are stored securely with expiry dates managed by our authentication provider.

8. Your Rights

Under UK/EU GDPR, you have the following rights:

  • Right to Access: Request a copy of your personal data.
  • Right to Rectification: Request correction of inaccurate data.
  • Right to Erasure: Request deletion of your personal data.
  • Right to Restriction: Request limitation of processing.
  • Right to Data Portability: Request transfer of your data.
  • Right to Object: Object to processing based on legitimate interests.
  • Right to Withdraw Consent: Withdraw consent at any time.

To exercise any of these rights, please visit our Data Subject Rights page or contact us at afaneurology.info@gmail.com.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including encryption, secure authentication, and regular security assessments. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

10. Cookies

We use cookies and similar technologies to enhance your experience. For detailed information about the cookies we use, please see our Cookie Policy.

11. Children's Privacy

Our Website is not intended for children under the age of 18. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

13. Complaints

If you have a complaint about how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) in the UK or your local data protection authority in the EU.