Loading…
This policy explains exactly what The Strategic Founder collects when you use this site, why we hold it, who else can see it, and what you can ask us to do with it.
Section 01
The Strategic Founder (TSF) is an institution for entrepreneurial formation. We work with exceptional African founders while they build, develop the intellectual capacity their ambitions require, and back the ones who prove themselves. This site is how founders find us and apply, and how partners and investors get in touch.
Awaiting legal review
The data controller for the information described in this policy is [REGISTERED ENTITY NAME], registered in [JURISDICTION] under company number [NUMBER], at [REGISTERED ADDRESS].
Needs an answer: Registered legal entity name, company registration number, and registered address of the data controller.
Contact
For any question about this policy or about data we hold on you, write to contact@thestrategicfounder.com.
Section 02
We collect only what you type into a form. There are three, and this is the complete list of fields in each.
When you apply to a programme:
When you use the contact form: your name, your email address, your message, and a subject line if you add one.
When you create an account: your email address and your name. Your password is handled by our authentication provider and stored only as a cryptographic hash — we never see it, hold it, or have any way to recover it.
Server logs
Our hosting provider records standard request logs, which include IP addresses, for the operation and security of the service. We do not use those logs to build a profile of you and we do not combine them with anything you submit.
Section 03
Most privacy policies are vague here, because the honest answer is long. Ours is short, and it is worth stating plainly.
If this changes
If we ever add analytics, we will say so here and in the Cookie Policy before it goes live, not after.
Section 04
Everything we hold is used for one of these purposes, and nothing else:
We do not send marketing email from this site. There is no newsletter and no mailing list, so there is nothing to unsubscribe from.
Section 05
Where data protection law requires us to name a legal basis for holding your information, we rely on the following.
Awaiting legal review
This policy is written to comply with [APPLICABLE DATA PROTECTION REGIME], and the supervisory authority for complaints is [SUPERVISORY AUTHORITY].
Needs an answer: Which data protection regime governs this entity? The site's contact numbers are Nigerian, which points to the NDPA 2023 and the NDPC as supervisory authority — but that depends on where the entity is registered and where founders are located. A lawyer should confirm whether NDPA, GDPR, or both apply.
Section 06
Three service providers process data on our behalf in order for the site to work. They are bound to use it only to provide their service to us. There are no others.
Beyond those providers, your information is visible only to the TSF team members who operate the admin panel.
Investor introductions are never automatic
We do not pass your application, your startup details, or your contact information to any investor or third party without asking you first and getting your agreement. An introduction is something we arrange with you, not something that happens to you.
We may disclose information where the law requires it — a court order, a regulatory demand, or to establish or defend a legal claim.
Section 07
Your data is stored in our Supabase project and served through Vercel's global network. Both operate infrastructure in multiple countries, so your information may be processed outside the country you live in.
Awaiting legal review
Our database is hosted in [REGION]. Where information leaves that region, the transfer is covered by [TRANSFER MECHANISM].
Needs an answer: Which region is the Supabase project hosted in, and which transfer mechanism covers data leaving that region — Standard Contractual Clauses, an adequacy decision, or something else?
Section 08
We keep applications and contact submissions for as long as we may reasonably need them — an application we declined this year may be exactly the founder we want to revisit next year, and we would rather write to you than ask you to start again.
Awaiting legal review
Applications are retained for [PERIOD]. Contact submissions are retained for [PERIOD]. Account data is retained for [PERIOD] after an account is closed.
Needs an answer: Concrete retention periods. How long are declined applications kept? How long are contact submissions kept? Is there an automatic deletion schedule, or is it on request only? A policy that says 'as long as necessary' without a number is not compliant under most regimes.
You can ask us to delete what we hold at any point, and we will, subject to anything we are legally required to keep.
Section 10
These are the specific controls in place, not a general assurance that we take security seriously.
No system is perfectly secure, and we will not pretend otherwise. If we discover a breach affecting your personal data, we will tell you and the relevant authority as the law requires.
Section 11
Whatever regime applies to you, we will honour the following for anyone who asks:
How to exercise any of these
Email contact@thestrategicfounder.com from the address you gave us. We do not charge for this, and we will respond within 30 days.
Section 12
Minimum age
This site is intended for people building companies and is not directed at children. We do not knowingly collect information from anyone under 18.
If you believe a child has given us personal information, write to us and we will delete it.
Section 13
If we change this policy we will update the date at the top of this page. Where a change materially affects what we do with information we already hold, we will contact the people affected directly rather than relying on you to re-read this page.
Ask us anything about this policy, or about the information we hold on you. We answer within 30 days, and usually far sooner.
contact@thestrategicfounder.comThe Strategic Founder