ForgeTech Summit is organized by CloudPlexo. We respect your privacy and are committed to protecting the personal data of our applicants, confirmed participants, speakers, and partners.

This policy explains how we collect, use, and protect your information, strictly adhering to the Kenya Data Protection Act (2019) and international best practices, including the General Data Protection Regulation (GDPR).

1. Data Controller

CloudPlexo is the data controller responsible for your personal information. If you have any questions regarding this policy or how your data is handled, you can reach our team at hello@forgetechsummit.com.

2. Information We Collect

Because ForgeTech Summit is a highly curated, application-based gathering, we collect specific professional data to evaluate applicants and build the room's professional density.

• Application & Identity Data: Full name, corporate email address, phone number, current organization, professional title, nationality, and industry sector.

• Professional Context: Information you provide regarding your current strategic priorities, funding track record, or regulatory focus to help us align our working groups.

• Transactional Data: Payment confirmation details processed securely via our local payment gateways (such as Paystack). We do not store your credit card or bank account details on our servers.

• Experience & Media Data: Dietary requirements or accessibility preferences, alongside candid photography or videography captured during the open programming and the After-Dark mixer in Nairobi.

3. How We Use Your Data

We use your information strictly to maintain the operational integrity of the summit:

• To evaluate applications and confirm invitations to the room.

• To organize closed-door roundtables and pair builders, backers, and policymakers effectively.

• To process transaction fees for confirmed passes.

• To send critical event updates, session briefs, and logistical details about the Nairobi venue.

4. Legal Basis for Processing

Under the Kenya Data Protection Act and global data laws, we process your information based on:

1. Contractual Necessity: To process your application and manage your pass access.

2. Legitimate Interest: To curate a balanced professional environment and ensure high-context networking among peers.

3. Consent: For specific operational needs, such as capturing your preference data or publishing your name on the internal attendee directory.

5. Data Sharing and Third Parties

We do not sell, rent, or monetize your professional data. We only share information with trusted operational partners required to deliver the summit experience:

• Technology Providers: Application platforms (e.g., Luma) and secure payment processors.

• Venue & Hospitality: Strict logistical data shared with our Nairobi venue partners for catering and security clearance.

• Cross-Border Transfers: If your data is processed outside Kenya by our cloud infrastructure providers, we ensure appropriate data transfer agreements and safeguards are in place, in line with the regulations set by the Office of the Data Protection Commissioner (ODPC) in Kenya.

6. The Closed-Door Rule & Attendee Privacy

Specific executive discussions at ForgeTech operate under the Chatham House Rule to encourage absolute candor. While we facilitate introductions between builders, backers, and policymakers, we will never distribute your private contact details (such as your personal email or phone number) to other attendees without your explicit permission.

7. Data Retention

We retain your professional profile on file only as long as necessary to fulfill the curation purposes outlined in this policy, or to comply with statutory financial auditing obligations in Kenya. If your application is not confirmed for this cycle, we keep your details on file to prioritize your application for future cycles, unless you request removal.

8. Your Rights

Depending on your jurisdiction, you hold specific rights regarding your personal information, including:

• The right to access the personal data we hold about you.

• The right to correct inaccurate or incomplete professional profiles.

• The right to request the erasure of your data from our systems.

• The right to object to or restrict specific processing activities.

To exercise any of these rights, please contact our team directly.