Privacy

Privacy notice

Effective 11 August 2026 · Last updated 21 August 2026

This Privacy Notice explains how Dr. Akin Akinpelu (“we”, “us”, or “our”) collects, uses, discloses, and safeguards personal data obtained from visitors and users (“you”) of theakinakinpelu.org (the “Website”). The Website is the public platform for Akin Akinpelu, Ph.D., Amb., FLPi, spanning leadership, governance, professional keynotes, and strategic enterprise platforms, including Akin Akinpelu Learning & Development (AALD) and PerformX Nexus.

We process personal data in compliance with applicable data protection laws, including the Nigeria Data Protection Act 2023 (NDPA), General Application and Implementation Directives (GAID) issued by the Nigeria Data Protection Commission (NDPC), and the General Data Protection Regulation (EU/UK GDPR) for individuals visiting from or residing in the European Economic Area (EEA) or the United Kingdom.

1. Data controller and contact

Dr. Akin Akinpelu is the data controller for personal data processed through this Website. To ask about this notice, our processing activities, or to exercise your legal rights, contact us:

  • Data controller: Dr. Akin Akinpelu
  • Email: hello@theakinakinpelu.org
  • Telephone: +234 805 033 8853
  • Privacy requests: email us with the subject line “Privacy request”, or use the contact form and select “Privacy or data request”.

2. Personal data we collect

We collect personal information when you interact with the Website, complete forms, request bookings, opt in to updates, or (for authorized staff) access administrative features.

2.1 Contact form

When you submit a general enquiry, we collect your name, email address, telephone number (optional), organization, topic of interest, and message content.

2.2 Booking and engagement requests

When you request a speaking engagement, keynote, workshop, or advisory session, we collect your name, email, phone number, organization, time zone, engagement details, preferred dates, location or format, audience size, budget range, and your acceptance of the engagement terms.

2.3 Marketing communications (opt-in only)

If you choose to receive updates via a separate, unselected-by-default checkbox, we collect your name and email address to send newsletters, summit announcements, event invitations, insights digests, and partner updates. Marketing is never bundled with operational form submission.

2.4 Internal administrative accounts

For authorized team members and platform administrators, we collect names and email addresses to manage secure access and platform operations.

2.5 Technical data and anti-spam security

To protect contact forms from abuse, we temporarily evaluate a cryptographically hashed representation of email addresses for rate limiting. This token is used for infrastructure protection only and is not stored as identifiable personal data or linked to user profiles.

3. Lawful bases and purposes

Every processing activity rests on a documented lawful basis. Operational processing (responding to enquiries and coordinating engagements) is separate from marketing communications, which rely exclusively on explicit opt-in consent.

We do not sell, rent, trade, or commercially monetize your personal data.

Inquiry resolution

Responding to enquiries and coordinating initial contact.

Data: name, email, phone (optional), organization, topic, message · NDPA s.26(1)(a)–(b) · GDPR Art. 6(1)(b)

Booking and engagement delivery

Managing keynotes, advisory sessions, organizer resources, and scheduling.

Data: booking form fields · NDPA s.26(1)(b) · GDPR Art. 6(1)(b)

Marketing communications

Newsletters, summit and event announcements, insights digests, and partner updates.

Data: name, email · NDPA s.26(1)(a) consent · GDPR Art. 6(1)(a) consent

System security and integrity

Anti-spam rate limiting, platform security, and administrator access control.

Data: hashed email tokens, admin credentials, security logs · NDPA s.26(1)(f) · GDPR Art. 6(1)(f)

4. Third-party processors

We use trusted service providers that process data on our instructions and under contractual safeguards:

  • Supabase — database and authentication
  • Vercel — website hosting and serverless API
  • Resend — transactional email (confirmations and admin alerts)
  • Beehiiv or Kit (ConvertKit) — marketing email lists (when enabled); every marketing email includes an unsubscribe link

4.1 Platform and brand teams

When you submit a contact enquiry from a specific platform page (or a link that includes a platform context), we may route your message to the relevant brand team so they can respond. Booking requests, media enquiries, general enquiries, privacy requests, and organizer support are handled by the core operations team at ea@theakinakinpelu.org.

  • Akin Akinpelu Learning & Development (AALD) — hello@aaldcompany.org
  • PerformX Nexus — performx@aaldcompany.org
  • Erudio Hub — hello@erudiohub.org
  • Auctus Africa — info@auctusafrica.org
  • Future Africa — hello@erudiohub.org (interim; enquiries are clearly labelled as Future Africa and handled on behalf of Future Africa until a dedicated inbox is available)

Each brand team processes enquiries under instructions from Dr. Akin Akinpelu and applicable data protection agreements. We use Resend to deliver notifications; brand inboxes receive email only—they are not website processors unless separately contracted.

5. International transfers

Our providers may process data outside Nigeria or the EEA/UK, including in the United States. Where transfers occur, we rely on mechanisms required under NDPA Sections 41–43 and GDPR Chapter V, including adequacy decisions and standard contractual clauses, supported by technical measures such as encryption in transit and at rest.

6. Retention

We retain personal data only as long as necessary for the purpose collected or as required by law:

  • Contact enquiries: up to twelve (12) months after final resolution, then deleted or anonymized
  • Booking records: up to six (6) years after engagement completion for accounting, tax, and contractual limitation purposes
  • Marketing subscriptions: until you unsubscribe or withdraw consent; suppressed addresses are retained only to honour your opt-out
  • Security tokens and logs: hashed rate-limit tokens purged within thirty (30) days; admin security logs retained up to ninety (90) days

7. Your rights

Under the NDPA and GDPR, you may have the right to:

  • Access a copy of your personal data
  • Rectify inaccurate or incomplete data
  • Request erasure where processing is no longer necessary
  • Object to or restrict certain processing
  • Withdraw consent for marketing at any time (without affecting prior lawful processing)
  • Receive portable data you provided in a structured, machine-readable format

To exercise these rights, email hello@theakinakinpelu.org with the subject “Privacy request”, or use the contact form. We aim to acknowledge receipt within five (5) business days and respond fully within thirty (30) days.

8. Children

This Website is intended for adult professionals and organizations. We do not knowingly collect personal data from children under sixteen (16). If we learn that a minor has submitted data, we will delete it promptly.

9. Complaints to supervisory authorities

If you believe our processing violates applicable law, you may lodge a complaint with:

  • Nigeria: Nigeria Data Protection Commission (NDPC) — ndpc.gov.ng
  • EU / UK: your local EU supervisory authority or the UK Information Commissioner’s Office — ico.org.uk

10. Changes to this notice

We may update this Privacy Notice to reflect legal, technical, or operational changes. Revisions will be published on this page with an updated “Last updated” date. We encourage you to review this notice periodically.