Privacy Policy

Wall Street Africa Inc (“Wall Street Africa,” “we,” “us,” or “our”) respects your privacy. This policy explains what personal data we collect through wallstreet.africa and its sub-pages, how we use it, and the rights you have over it. We handle personal data in line with Kenya’s Data Protection Act, 2019.

1. Who we are

Wall Street Africa Inc is the data controller for personal data collected through this website. Our headquarters is at 2nd Floor, Nairobi Securities Exchange, 55 Westlands Road, Westlands, Nairobi, Kenya. For any privacy-related question or request, contact us at info@wallstreet.africa.

2. What we collect

We only collect the personal data you choose to give us when you submit a form on this site:

• Contact form: your name, organization, title, email address, phone number, and any message you write.
• Business Intelligence waitlist: the details you provide to register your interest in the WSA BI platform (such as name, email, and organization).

We do not ask for, and you should not send us, sensitive personal data (for example, financial account numbers, government ID numbers, or health information) through these forms.

3. How we use your data

• To respond to your enquiry and follow up with you.
• To add you to the BI platform waitlist and tell you when it launches, where you requested this.
• To send you information you have asked for about our products, events, and media.

We rely on your consent, and on our legitimate interest in responding to people who contact us, as the legal bases for this processing.

4. Service providers

We use the following third parties to operate the site. Each processes data on our behalf:

• Formspree: receives and forwards form submissions to us by email. See the Formspree Privacy Policy.
• Cloudflare Pages: hosts and delivers this website and keeps standard server and security logs (including IP addresses) to protect the site from abuse.
• Google Analytics: measures how visitors find and use the site. It sets cookies in your browser and receives your IP address, which Google uses to derive an approximate location and then discards without storing it. See the Google Privacy Policy and how Google uses data from sites that use its services.
• Luma: hosted ticket registration and payment for Bullish Africa 2026, which took place on 22 September 2026. If you registered or bought a ticket, the details you entered are held by Luma under its own privacy policy, not by us. See the Luma Privacy Policy.
• Stripe: processed card payments for Bullish Africa 2026 tickets on Luma's behalf. Card details were entered directly into Stripe's own fields inside the Luma form and were never received, stored, or transmitted by this website. See the Stripe Privacy Policy.

Some of these providers are based outside Kenya, which means your data may be transferred and stored abroad. Where this happens, we take reasonable steps to ensure it remains protected to a comparable standard.

5. Cookies and analytics

This site uses Cloudflare Web Analytics to understand how visitors use our website. This service does not set cookies on your device and does not collect or store any personal data. It processes only anonymised information (such as page views and referrer) for statistical purposes. Because this analytics service sets no cookies and collects no personal data, it does not by itself require a cookie consent banner. For more information, see the Cloudflare Privacy Policy.

We also use Google Analytics 4 across the whole site to understand which pages people read, how they arrive, and which content is worth producing more of. Unlike the service above, Google Analytics does set cookies in your browser. It does so on every page, as soon as the page loads, whether or not you interact with anything. The main ones are _ga, which lasts about two years, and a _ga_ cookie specific to this site. They hold a randomly generated identifier that lets Google recognise the same browser on a later visit. Google also receives your IP address in order to estimate the country or city you are in, and does not store the address itself. We have not enabled Google Signals or advertising personalisation, so we do not use this data to build advertising profiles or to follow you onto other websites. You can opt out on any site by installing the Google Analytics Opt-out Browser Add-on, or by blocking cookies for this site in your browser settings.

We do not serve advertising on this site and we set no advertising cookies of our own. Apart from the Google Analytics cookies described above, the only cookies involved are those that may be set by the third-party embed described next. Our hosting provider may also use strictly necessary cookies or logs to keep the site available and secure.

Third-party embeds. Our Media page loads a YouTube playlist from Google's servers, using YouTube's no-cookie player, which does not set advertising cookies unless you start playing a video. We do not control any cookies YouTube sets and we do not receive any analytics from it. See the Google Privacy Policy. If you would rather not load it, you can block third-party cookies in your browser settings. The rest of the site works normally without them.

Until 23 September 2026 our Bullish Africa 2026 page also embedded the ticket registration form from Luma, our ticketing provider, which set Luma's own cookies (including a device identifier, luma.did, lasting about 120 days) when that page loaded. The summit has taken place and the form has been removed, so that page no longer loads anything from Luma. Cookies it set earlier expire on their own, or you can clear them in your browser. See the Luma Privacy Policy.

6. How long we keep it

We keep the data you submit for as long as needed to deal with your request and to maintain a record of our correspondence, after which we delete or anonymise it. You can ask us to delete it sooner at any time.

7. Your rights

Under the Data Protection Act, 2019, you have the right to:

• be informed about how your data is used;
• access the personal data we hold about you;
• ask us to correct inaccurate or incomplete data;
• ask us to delete your data, or restrict or object to its processing;
• withdraw consent where we rely on it; and
• lodge a complaint with the Office of the Data Protection Commissioner (Kenya).

To exercise any of these rights, email info@wallstreet.africa. We will respond within the timeframes set by law.

8. Security

We take reasonable technical and organisational measures to protect your data, including HTTPS encryption in transit and security controls at the hosting layer. No method of transmission over the internet is completely secure, however, and we cannot guarantee absolute security.

9. Children

This site is intended for a professional, business audience and is not directed at children. We do not knowingly collect data from anyone under 18.

10. Changes to this policy

We may update this policy from time to time. The “last updated” date above shows when it last changed. Material changes will be reflected here on this page.

11. Contact

Questions about this policy or your data? Email info@wallstreet.africa or write to us at the address in section 1.