Privacy policy
We collect only what we need in order to reply to you. Here is what, why, for how long, and how to take back control.
Dernière mise à jour · August 2026
Who is responsible
Ubuntu University, whose registered office is at Ngor Almadies, Zone 10, Dakar, Republic of Senegal, decides the purposes and means of the processing described below. For any question, write to contact@ubuntuuniversity.org.
This processing falls under Senegalese law no. 2008-12 of 25 January 2008 on the protection of personal data. If you live in the European Union, the General Data Protection Regulation also applies.
What we collect, and why
We collect only what you send us through a form. No data is bought, and none is inferred from your browsing.
- Programme application
- Name, email address, phone if you give it, country of residence, programme, current situation, availability, funding route, motivation. Purpose: assess your application and reply.
- Startup Studio application
- Founder name, email address, venture name, sector, country, stage, description. Purpose: assess the venture and arrange an interview.
- Organisation enquiry
- Organisation, contact name, email address, size, need, timeframe and indicative budget if you give it. Purpose: prepare a tailored proposal.
- Contact message
- Name, email address, organisation if you give it, subject and message. Purpose: reply to you.
- Newsletter
- Email address only. Purpose: send you our publications. You may unsubscribe at any time.
- Resource request
- Email address and the resource requested. Purpose: send you the document.
The legal basis is your consent, collected through a checkbox that is never pre-ticked, or the performance of pre-contractual steps when you apply or request a proposal.
Your IP address is never stored in the clear
To prevent automated bulk submissions, we store a salted cryptographic digest of your IP address alongside each submission. That digest cannot be reversed to recover the original address and serves only to count recent submissions from one connection. The IP address itself is never written to the database.
Cookies and local storage
This site sets no advertising cookie, no analytics cookie and no third-party tracker. We use neither Google Analytics nor any social network pixel.
Only two things are stored in your browser, on your device, and never sent to us:
- your choice of light or dark theme, so it is there on your next visit;
- the draft of a multi-step application form, so you do not lose what you typed. It is cleared as soon as the form is sent.
Clearing this site’s data in your browser removes both, with no other consequence.
Who sees your data
Your data is read by the Ubuntu University team handling it, and by nobody else. It is never sold, rented or passed on for commercial purposes.
Three technical providers are involved, each for one function:
- Supabase Inc. hosts the database that records submissions;
- Resend Inc. delivers confirmation emails and internal notifications;
- Vercel Inc. hosts the site and serves the pages.
These providers operate from servers outside Senegal and the European Union. The corresponding transfers rely on the contractual safeguards each of them offers.
How long we keep it
- Applications
- Three years from the last exchange, so we can come back to you for a later cohort.
- Organisation enquiries
- Three years from the last exchange.
- Contact messages
- One year from our reply.
- Newsletter
- Until you unsubscribe.
- IP digests
- Twelve months, beyond which they serve no purpose.
Your rights
You have rights of access, correction, erasure, restriction and objection over the data concerning you, as well as a right to portability. You may withdraw your consent at any time, without affecting processing already carried out.
One address for all of it: contact@ubuntuuniversity.org. We reply within thirty days. State your request and the email address you used, which is how we find your file.
If our answer does not satisfy you, you may refer the matter to Senegal’s Personal Data Protection Commission, or to the supervisory authority in your country of residence.
Security
Exchanges with this site are encrypted end to end. No visitor can read the database: the forms can only write to it, and only the authorised team consults the records through a protected account. Keys to third-party services never leave the server.
Changes to this policy
Any change to this document is dated at the top of the page. A substantial change of purpose will be announced separately. For any question, our contact form is open.