Personal data

Privacy policy.

This document explains what data we receive when you contact us, what we do with it, how long we keep it and how to exercise your rights.

Last updated5 August 2026

  1. 01

    Data controller

    Sankofa Capital, Lomé — Togo, is the controller for the personal data processing described in this document.

    For any question or request concerning your data: contact@sankofacapital.org.

  2. 02

    The data we collect

    We apply the principle of minimisation: we collect only the data needed to handle your request.

    Data you send us through the contact form:

    • first and last name;
    • company name (optional);
    • email address;
    • phone number (optional);
    • nature of the need and amount considered (optional);
    • the free text of your message, along with any document you may subsequently send us by email.

    Technical data generated automatically by the host for security and proper operation: IP address, timestamp, browser type, pages viewed. These technical logs are not used to profile you.

    We collect no sensitive data and ask that you do not send us any unprompted.

  3. 03

    Purposes and legal basis

    • Responding to your request and reviewing your project — performance of pre-contractual measures taken at your request.
    • Assessing the feasibility of financing or of an advisory engagement — legitimate interest of Sankofa Capital in evaluating the projects submitted to it.
    • Securing the website and preventing abuse — legitimate interest.
    • Meeting our legal obligations, in particular accounting and anti-money-laundering obligations once a business relationship begins — legal obligation.

    Your data is never sold, rented, or used for third-party marketing.

  4. 04

    Who accesses your data

    • the directors and staff of Sankofa Capital responsible for reviewing requests, limited to what their role requires;
    • our host, Vercel Inc., as a technical processor;
    • where applicable, our advisers (legal, accounting) and the competent authorities where the law requires it.

    As our technical providers may be established outside Togo and outside the European Union, an international data transfer may occur. It is framed by the contractual safeguards those providers offer, in particular the European Commission's standard contractual clauses.

  5. 05

    Retention periods

    • Request with no follow-up: three years from the last contact, then deletion.
    • File reviewed without commitment: three years from the close of the review.
    • Contractual relationship entered into: for the duration of the relationship, then in line with the statutory retention periods applicable to accounting and financial records.
    • Technical logs: a short period set by the host, for security purposes.
  6. 06

    Security

    The website is served entirely over HTTPS. Access to incoming requests is restricted to those who need to know. As no system is infallible, we undertake to inform you without undue delay of any data breach likely to result in a high risk to your rights.

  7. 07

    Cookies and analytics

    This website places no advertising cookies, no analytics trackers and no social network pixels. No consent is therefore required to browse it.

    Should an analytics tool be added, this page would be updated and a consent mechanism put in place beforehand.

  8. 08

    Your rights

    You have the following rights over your data:

    • access — obtain a copy of the data concerning you;
    • rectification — correct inaccurate or incomplete data;
    • erasure — request deletion of your data, subject to our statutory retention obligations;
    • restriction and objection — limit or contest processing based on our legitimate interest;
    • portability — receive your data in a structured, machine-readable format;
    • post-mortem instructions — determine what happens to your data after your death.

    To exercise these rights, write to contact@sankofacapital.org. We respond within one month at the latest. Proof of identity may be requested where there is reasonable doubt as to the identity of the requester.

  9. 09

    Complaints

    If our response does not satisfy you, you may refer the matter to the competent data protection authority: the Togolese authority responsible for personal data protection if you reside in Togo, or the supervisory authority of your country of residence within the European Union — the CNIL for France.

    See also our legal notice and terms.

  10. 10

    Changes to this policy

    This policy may be amended to reflect changes in our processing or in regulation. The date of last update appears at the top of the page. In the event of a substantial change, the individuals concerned whose email address we hold will be informed.

For any question about this document, write to contact@sankofacapital.org.