PRIVACY POLICY

1. Introduction

The African CEO Council, legally incorporated as the African Council of Chief Executives, Inc. (“African CEO Council,” “the Council,” “we,” “us” or “our”), respects the privacy of its members, applicants, programme participants, partners, website visitors and other stakeholders.

This Privacy Policy explains how we collect, use, store, disclose and protect personal information obtained through our website, membership activities, events, publications, research, communications and institutional programmes.

By using our website, submitting information to the Council or participating in our activities, you acknowledge the practices described in this Policy.

2. Scope of this Policy

This Policy applies to personal information collected through:

• The African CEO Council website;
• Membership enquiries, nominations and applications;
• Member onboarding and administration;
• The members’ portal and private membership directory;
• Conferences, seminars, roundtables and other events;
• Executive-education and leadership programmes;
• Surveys, research and publications;
• Partnership and sponsorship enquiries;
• Newsletters and institutional communications;
• Business and investment missions;
• Email, telephone, electronic forms and official      correspondence;
• Photographs, audio recordings and videos from Council      activities; and
• Other programmes operated or administered by the      Council.

This Policy does not govern independent websites or services operated by third parties, even where links to those services appear on our website.

3. Information We May Collect

Depending on your relationship with the Council, we may collect the following categories of information.

3.1 Personal and professional information

This may include:

• Full name;
• Photograph;
• Gender, where voluntarily provided or required for      legitimate diversity monitoring;
• Nationality and country of residence;
• Job title and professional position;
• Company or institutional affiliation;
• Professional biography;
• Curriculum vitae;
• Professional qualifications;
• Employment and leadership experience;
• Industry and areas of expertise;
• Board and advisory appointments;
• Professional interests; and
• Publicly available professional information.

3.2 Contact information

This may include:

• Email address;
• Telephone or WhatsApp number;
• Business address;
• Postal address;
• Social-media profile; and
• Preferred communication method.

3.3 Membership information

Where you apply for or hold membership, we may collect:

• Membership application and eligibility information;
• Nomination or referral information;
• Supporting documentation;
• Membership category and status;
• Admission and renewal records;
• Membership identification number;
• Participation history;
• Committee and working-group interests;
• Declarations concerning conflicts of interest;
• Acceptance of the Council’s Code of Conduct;
• Disciplinary or compliance information, where      applicable; and
• Information required for membership administration and      due diligence.

3.4 Organisational information

Where you represent a company or institution, we may collect:

• Organisation name;
• Registration or incorporation information;
• Website address;
• Sector and principal activities;
• Countries of operation;
• Organisational profile;
• Approximate revenue category, where relevant to      approved membership arrangements;
• Name and position of authorised representatives; and
• Partnership, sponsorship or programme interests.

3.5 Event and programme information

When you register for or participate in an event or programme, we may collect:

• Registration details;
• Attendance records;
• Dietary, accessibility or special-assistance      requirements;
• Travel and accommodation information, where necessary;
• Speaker, facilitator or participant biography;
• Presentation materials;
• Session preferences;
• Feedback and evaluation responses;
• Photographs, audio recordings and video recordings; and
• Information required for certificates and programme      administration.

3.6 Payment and transaction information

Where payments are required, we may collect:

• Billing name and address;
• Invoice and receipt information;
• Membership or programme payment status;
• Transaction reference;
• Currency and amount paid; and
• Limited payment information provided by an authorised      payment processor.

The Council does not ordinarily store complete payment-card information. Payments may be processed by banks, payment gateways or other authorised financial-service providers subject to their own privacy and security policies.

3.7 Website and technical information

When you use our website, we may automatically receive information such as:

• Internet Protocol address;
• Browser and device type;
• Operating system;
• Pages visited;
• Date and time of access;
• Referring website;
• Approximate location derived from an IP address;
• Cookie identifiers;
• Website interactions; and
• Diagnostic and security information.

4. How We Collect Information

We may obtain personal information:

• Directly from you;
• From your company or institution;
• From a nominator, authorised representative or referral      source;
• Through membership and event forms;
• Through correspondence and meetings;
• From event organisers and institutional partners;
• From publicly available corporate websites and      professional profiles;
• From reputable business directories;
• From government or corporate registries;
• Through surveys and research;
• Through website cookies and analytics; and
• From service providers acting on our behalf.

Where another person provides information about you, we expect that person to have the appropriate authority or lawful basis to do so.

5. How We Use Personal Information

The African CEO Council may use personal information to:

• Evaluate membership enquiries, nominations and      applications;
• Verify eligibility, professional standing and      organisational information;
• Administer membership and renewals;
• Maintain membership records;
• Operate the members’ portal and private membership      directory;
• Register participants for events and programmes;
• Deliver seminars, roundtables, conferences and      executive education;
• Issue invitations, admission letters, certificates,      invoices and receipts;
• Facilitate approved professional introductions;
• Communicate programme, membership and partnership      opportunities;
• Manage committees, advisory bodies and working groups;
• Conduct research, surveys and executive consultations;
• Prepare reports, publications and policy      recommendations;
• Develop aggregated and anonymised business      intelligence;
• Consider qualified individuals for speaking,      facilitation and advisory opportunities;
• Administer partnerships, sponsorships and institutional      relationships;
• Respond to enquiries and provide stakeholder support;
• Improve our website, programmes and member services;
• Protect the Council, its members and its digital      systems;
• Prevent fraud, misrepresentation, unauthorised access      and misconduct;
• Comply with legal, regulatory, contractual and      governance obligations; and
• Establish, exercise or defend legal rights.

6. Lawful Bases for Processing

Where required by applicable law, we process personal information on one or more of the following grounds:

• Your consent;
• Performance of a contract or steps taken at your      request before entering a contract;
• Compliance with a legal obligation;
• Protection of vital interests;
• Performance of an appropriate public-interest function;      and
• The legitimate interests of the Council or a third      party, provided those interests are not overridden by your rights and      freedoms.

You may withdraw consent where processing is based on consent. Withdrawal will not affect processing lawfully completed before the withdrawal.

7. Membership Directory

The African CEO Council may maintain a private membership directory to facilitate trusted professional connections among approved members.

The directory may contain authorised information such as:

• Member’s name;
• Photograph;
• Professional title;
• Organisation;
• Country;
• Industry;
• Professional biography;
• Areas of expertise or interest; and
• Contact information expressly approved by the member.

The membership directory:

• Is reserved exclusively for authorised members;
• Is not intended for public access;
• Must not be copied, sold, transferred or shared with      unauthorised persons;
• Must not be used for unsolicited mass marketing;
• Must not be used to create an independent commercial      database; and
• Must be accessed and used in accordance with the      Council’s membership rules.

Members may request reasonable corrections to their directory information and may withdraw consent for optional contact information to be displayed.

Membership does not automatically authorise the Council to publish a member’s private contact details publicly.

8. Photographs, Recordings and Publicity

The Council may photograph, record or livestream certain public events and programmes for:

• Institutional reporting;
• News and media coverage;
• Publications;
• Educational materials;
• Programme promotion;
• Website and social-media communication; and
• Historical documentation.

Where practical, participants will be notified that photography or recording will take place. Separate consent may be requested for individual interviews, testimonials, detailed profiles or promotional features.

Participants who have a reasonable concern about appearing in photographs or recordings should notify the Council before the activity or speak to an authorised event representative.

9. Research, Surveys and Publications

The Council may collect information through surveys, interviews, consultations and research programmes.

Unless otherwise disclosed:

• Individual responses will be treated confidentially;
• Published findings will ordinarily be aggregated or      anonymised;
• Attributable quotations will require appropriate      authorisation;
• Participation will not automatically guarantee      publication; and
• Research data will be used only for legitimate      institutional, policy, educational or programme purposes.

10. Communications and Marketing

Where permitted, the Council may send communications concerning:

• Membership;
• Events and programmes;
• Publications and research;
• Partnership opportunities;
• Executive briefings;
• Surveys and consultations;
• Institutional announcements; and
• Other activities relevant to the Council’s mission.

Recipients may unsubscribe from non-essential promotional email communications by using the unsubscribe facility provided or contacting the Council.

Members may continue to receive administrative communications necessary to manage their membership, payment, security or participation.

The Council does not sell personal information to third parties for independent marketing.

11. Cookies and Website Analytics

Our website may use cookies and similar technologies to:

• Enable essential website functions;
• Remember user preferences;
• Support account access;
• Analyse website traffic;
• Understand how visitors use the website;
• Improve website performance;
• Prevent fraud and unauthorised access; and
• Support embedded or third-party services.

Where required, visitors will be given an opportunity to manage non-essential cookies.

You may also adjust your browser settings to block or delete cookies. Blocking essential cookies may affect the operation of certain website features.

12. When Information May Be Shared

The Council may share personal information with:

• Authorised Council personnel;
• Committees and governance bodies with a legitimate need      to know;
• Website, hosting and information-technology providers;
• Payment processors, banks and financial-service      providers;
• Event venues and programme-service providers;
• Research, communications and professional advisers;
• Auditors, insurers and legal advisers;
• Government authorities, courts and regulators where      legally required;
• Institutional partners where necessary for an agreed      programme;
• Security, verification and due-diligence providers; and
• Successor organisations in connection with an      authorised restructuring, merger or transfer.

Service providers are expected to use personal information only for authorised purposes and to apply appropriate confidentiality and security safeguards.

The Council will not disclose confidential membership-directory information to an unauthorised third party except where required by law, necessary to protect legitimate rights or expressly approved by the relevant member.

13. International Data Transfers

Because the African CEO Council operates across countries, personal information may be processed or stored outside the country in which it was collected.

Where information is transferred internationally, the Council will take reasonable steps to ensure that appropriate contractual, organisational and technical safeguards are applied in accordance with applicable law.

14. Data Security

The Council uses reasonable administrative, organisational and technical measures intended to protect personal information against:

• Unauthorised access;
• Accidental loss;
• Improper disclosure;
• Misuse;
• Alteration;
• Destruction; and
• Unlawful processing.

These measures may include access controls, password protection, secure hosting, authorised-user restrictions, confidentiality obligations, data backups and appropriate service-provider controls.

No internet transmission or electronic-storage system can be guaranteed to be completely secure. Users should protect their passwords and notify the Council promptly of suspected unauthorised account activity.

15. Data Retention

The Council retains personal information only for as long as reasonably necessary to:

• Fulfil the purpose for which it was collected;
• Administer membership and programmes;
• Maintain appropriate institutional records;
• Resolve disputes;
• Enforce agreements;
• Satisfy financial, audit and legal requirements; and
• Protect legitimate institutional interests.

Retention periods may differ depending on the nature of the information and applicable legal obligations.

Information that is no longer required will be securely deleted, anonymised or archived with appropriate access restrictions.

16. Your Rights

Subject to applicable law, you may have the right to:

• Request confirmation that we process your information;
• Obtain access to your personal information;
• Request correction of inaccurate or incomplete      information;
• Request deletion of information in appropriate      circumstances;
• Restrict or object to certain processing;
• Withdraw consent;
• Request portability of eligible information;
• Object to direct marketing;
• Request information about international transfers;
• Lodge a complaint with an appropriate data-protection      authority; and
• Request review of a decision based solely on automated      processing, where applicable.

These rights are not absolute. The Council may retain or continue processing information where required by law or justified by legitimate legal, contractual, governance or security considerations.

We may request reasonable proof of identity before responding to a data-rights request.

17. Confidentiality of Enquiries and Applications

Membership enquiries and applications will be handled with appropriate confidentiality.

Submitting an enquiry or application does not automatically confer membership. Information may be reviewed by authorised personnel or relevant admissions and governance bodies for eligibility, due diligence and approval.

The Council will not publicly announce an applicant as a member without formal admission and appropriate authorisation.

18. Information About Other People

If you provide personal information about another person, including a colleague, nominee, referee, guest or authorised representative, you are responsible for ensuring that:

• The information is accurate;
• You are authorised to provide it;
• The person has been appropriately informed; and
• The disclosure complies with applicable law.

19. Children’s Privacy

The African CEO Council’s services are intended primarily for adult business leaders, executives and institutional representatives.

We do not knowingly collect personal information from children through membership services. Youth programmes involving persons below the applicable legal age will be operated with appropriate safeguards and parental or guardian consent where required.

20. Third-Party Links and Services

Our website may contain links to external websites, payment services, social-media platforms and other third-party services.

The Council is not responsible for the privacy, security or content practices of independently operated third parties. Users should review the privacy policies of those services before providing personal information.

21. Automated Decision-Making

The Council does not ordinarily make membership or other significant decisions solely through automated processing.

Membership and programme decisions are expected to involve appropriate human review.

22. Changes to This Privacy Policy

The Council may update this Privacy Policy to reflect:

• Changes in law;
• New programmes or services;
• Developments in technology;
• Changes in data-processing practices; or
• Institutional and governance requirements.

The revised version will be published on the website with an updated effective date. Material changes may also be communicated through appropriate channels.

23. Contact Us

Questions, concerns or requests relating to privacy and personal information may be directed to:

African CEO Council
African Council of Chief Executives, Inc.
Email: info@africanceocouncil.org
Telephone/WhatsApp: +1 646 444 8160 / +234 806 542 5974
Website: www.africanceocouncil.org

Please use the subject line: Privacy and Data Protection Enquiry.

We will review legitimate privacy requests and respond within a reasonable period, subject to identity verification and applicable legal requirements.

24. Complaints

If you believe that the Council has handled your personal information improperly, please contact us first so that we can investigate and address the concern.

You may also have the right to complain to the data-protection or regulatory authority responsible for your jurisdiction.

25. Our Privacy Commitment

The African CEO Council is committed to handling personal information responsibly, lawfully and transparently.

We recognise that trust is fundamental to membership, executive engagement and institutional partnership. We will therefore continue to strengthen our privacy, confidentiality, data-security and governance practices as the Council’s membership, programmes and continental activities develop.

Copyright © 2026 African CEO Council. All Rights Reserved.