Privacy Policy

Effective Date: July 2026

1. Introduction

The African Urban Observatory (“AUO,” “we,” “us,” or “our”) respects the privacy of individuals who visit, access, interact with, or provide information through its website and analytical platform.

This Privacy Policy explains how we may collect, use, store, disclose, and protect personal information.

The African Urban Observatory is powered by Veridian Urban Systems, a data analytics platform of Veridian Intelligence Group.

This Policy applies to the AUO website, African Urban Index, institutional portals, dashboards, assessments, communications, reports, and associated digital services.

2. The Nature of AUO’s Data

AUO primarily analyzes information concerning cities and urban systems.

This can include:

  • governance;
  • institutions;
  • infrastructure;
  • public services;
  • economic conditions;
  • investment environments;
  • environmental systems;
  • mobility;
  • housing;
  • land;
  • education;
  • health systems;
  • employment;
  • social cohesion;
  • conflict management;
  • resilience; and
  • cultural and urban conditions.

Most of this information concerns cities, institutions, policies, infrastructure, and public conditions rather than private individuals.

Personal information may nevertheless arise where urban or institutional data relates to identifiable persons.

3. Scope of This Policy

This Policy applies when you:

  • visit our website;
  • register for an account;
  • use a client portal;
  • request an assessment;
  • participate in research;
  • submit information;
  • communicate with us;
  • receive AUO communications;
  • access a report;
  • use an AUO dashboard; or
  • otherwise interact with the Service.

A separate Data Processing Agreement or institutional contract may apply where AUO processes information on behalf of another organization.

4. Information You Provide

We may collect information you choose to provide, including:

  • name;
  • work email address;
  • organization;
  • professional title;
  • telephone number;
  • account details;
  • correspondence;
  • inquiry information;
  • assessment submissions;
  • evidence uploaded through the platform;
  • research materials;
  • feedback;
  • billing or subscription information; and
  • information provided in connection with an institutional engagement.

5. Information Collected Automatically

When you use the Service, certain technical information may be collected automatically.

This may include:

  • IP address;
  • browser;
  • operating system;
  • device type;
  • approximate geographic region;
  • referring website;
  • pages accessed;
  • session duration;
  • access timestamps;
  • dashboard activity;
  • login records;
  • security logs;
  • error logs; and
  • cookie identifiers.

6. Information Obtained From Other Sources

AUO may obtain information from legitimate third-party sources, including:

  • government records;
  • municipal databases;
  • legislation;
  • official statistics;
  • international organizations;
  • academic publications;
  • research institutions;
  • public registries;
  • satellite and geospatial data;
  • civil-society reports;
  • media sources;
  • development institutions;
  • commercial data providers; and
  • other publicly or lawfully available sources.

Where such information contains personal data, AUO seeks to process only information reasonably relevant to its analytical purpose.

7. Sensitive Personal Information

AUO is designed principally to analyze urban systems rather than sensitive personal characteristics.

AUO does not ordinarily seek to collect:

  • health records concerning identifiable individuals;
  • biometric identifiers;
  • passwords belonging to external services;
  • personal financial credentials;
  • government identification numbers;
  • children’s private information; or
  • other highly sensitive categories unrelated to legitimate AUO functions.

Where sensitive personal information is required for a specific authorized project, additional legal, contractual, security, and data-protection measures may apply.

8. How We Use Information

AUO may use personal information to:

  • operate the platform;
  • create and manage accounts;
  • authenticate users;
  • provide requested services;
  • conduct city assessments;
  • verify evidence;
  • prepare reports;
  • conduct research;
  • respond to inquiries;
  • provide technical assistance;
  • administer partnerships;
  • communicate with users;
  • maintain security;
  • prevent fraud;
  • investigate misuse;
  • improve methodologies;
  • improve platform performance;
  • comply with legal obligations; and
  • maintain appropriate institutional records.

9. Legal Basis for Processing

Where applicable data-protection law requires a legal basis, AUO may rely upon:

Contract

Where processing is necessary to provide a service requested by a user, client, partner, or institution.

Legitimate Interests

Where processing is reasonably necessary for purposes such as:

  • security;
  • fraud prevention;
  • research;
  • platform improvement;
  • methodological development;
  • institutional communication; and
  • responsible operation of the Service.

Consent

Where consent is required, including for certain:

  • marketing communications;
  • optional cookies;
  • surveys; or
  • voluntary forms of data collection.

Consent may be withdrawn where applicable.

Legal Obligation

Where processing is necessary to comply with applicable law, regulation, judicial process, or other legally binding requirement.

Other Lawful Bases

Where applicable law permits processing of public information, research data, institutional information, or other information under an additional lawful basis.

10. Artificial Intelligence

AUO is supported by Veridian Urban Systems and may use artificial intelligence and automated technologies.

Personal information may therefore be processed by automated systems where reasonably necessary to:

  • organize information;
  • detect anomalies;
  • analyze evidence;
  • identify patterns;
  • search datasets;
  • produce summaries;
  • support forecasting; or
  • generate analytical outputs.

AUO primarily uses these systems for urban and institutional analysis.

AUO does not ordinarily use automated processing to make decisions that produce legal or similarly significant consequences for individuals without appropriate safeguards.

11. Human Review

Where appropriate, AI-generated or automated outputs may be subject to human evaluation.

Human review may include:

  • analysts;
  • evaluators;
  • subject specialists;
  • researchers;
  • institutional representatives; or

authorized quality-control personnel.

12. Data Minimization

AUO seeks to collect and process information reasonably necessary for a defined purpose.

Where personal identifiers are unnecessary for urban analysis, AUO may use:

  • aggregated data;
  • anonymized data;
  • pseudonymized data;
  • statistical summaries; or

other techniques that reduce exposure of personal information.

13. How Information May Be Shared

AUO may share personal information with limited categories of recipients where necessary.

These may include:

Technology and infrastructure providers
For hosting, storage, cybersecurity, authentication, and technical operations.

Analytics providers
For understanding website performance and platform usage.

Communications providers
For delivering legitimate account, institutional, or authorized communications.

Payment providers
Where subscriptions or paid services are offered.

Professional advisers
Including legal counsel, auditors, accountants, and security advisers.

Institutional clients or partners
Where information is processed as part of an authorized assessment or engagement.Authorities
Where disclosure is required by applicable law or valid legal process.

14. Sale of Personal Information

AUO does not sell personal information for monetary consideration.

AUO does not provide personal information to third parties for their own independent commercial marketing merely because an individual uses the AUO platform.

15. International Data Transfers

Third-party providers may process information on AUO’s behalf.

Where appropriate, such providers are expected to:

  • process information only for authorized purposes;
  • maintain appropriate safeguards;
  • preserve confidentiality;
  • comply with applicable law; and

delete or return information when no longer required.

16. International Data Transfers

AUO has a pan-African and international orientation.

Information may therefore be processed in jurisdictions other than the country where it originated.

Where applicable law requires safeguards for international transfers, AUO may use:

  • contractual protections;
  • standard contractual clauses;
  • recognized transfer mechanisms;
  • security safeguards; or

other lawful methods.

17. Data Security

AUO seeks to apply technical, administrative, and organizational safeguards appropriate to the nature of the information processed.

Measures may include:

  • encryption;
  • access controls;
  • authentication;
  • role-based permissions;
  • security logging;
  • secure infrastructure;
  • backups;
  • monitoring;
  • vulnerability management; and
  • incident-response procedures.

No digital system can provide an absolute guarantee of security.

18. Data Breaches

Where AUO becomes aware of a personal-data breach, it will assess the nature and seriousness of the incident.

Where legally required, AUO will notify affected persons, institutional clients, or relevant authorities within applicable statutory requirements.

19. Data Retention

AUO retains personal information only for as long as reasonably necessary for legitimate purposes.

Factors considered may include:

  • duration of an account;
  • contractual obligations;
  • assessment cycles;
  • research requirements;
  • security requirements;
  • audit requirements;
  • dispute resolution;
  • applicable limitation periods; and
  • legal retention obligations.

Information may subsequently be:

  • deleted;
  • anonymized;
  • aggregated; or
  • archived where a lawful basis exists.

20. Research and Historical Data

Urban analysis frequently requires longitudinal information.

AUO may retain de-identified, aggregated, statistical, methodological, or historical information for longer periods where it no longer identifies an individual or where continued retention is otherwise lawful.

21. Individual Privacy Rights

Depending upon applicable law, individuals may have rights to:

  • know whether AUO processes their information;
  • request access;
  • request correction;
  • request deletion;
  • request restriction;
  • object to certain processing;
  • withdraw consent;
  • request data portability; and
  • lodge a complaint with a data-protection authority.

Not every right applies in every jurisdiction or circumstance.

22. Exercising Privacy Rights

Privacy requests should be sent to:

info@africanurbanobservatory.net

Please describe the request sufficiently for us to identify the relevant information.

AUO may request reasonable verification of identity before providing or modifying personal information.

23. California Residents

Where applicable, California residents may have rights under relevant California privacy legislation, including rights relating to:

  • access;
  • correction;
  • deletion;
  • disclosure of processing practices; and
  • certain forms of sale or sharing.

AUO does not sell personal information for monetary consideration.

Where applicable law requires recognition of a valid privacy preference signal, AUO will address such signals in accordance with applicable requirements.

24. European Economic Area and United Kingdom

Where the GDPR or UK GDPR applies, eligible individuals may have rights of:

  • access;
  • rectification;
  • erasure;
  • restriction;
  • objection;
  • portability;
  • withdrawal of consent; and
  • complaint to a supervisory authority.

Requests will be handled within applicable legal timeframes.

25. African Data-Protection Laws

AUO operates with a continental focus and recognizes that African jurisdictions increasingly maintain national data-protection frameworks.

Where the personal information of individuals in an African jurisdiction is subject to applicable national privacy or data-protection legislation, AUO seeks to process that information consistently with applicable legal requirements.

26. Children

AUO is designed principally for:

  • governments;
  • municipalities;
  • professionals;
  • researchers;
  • universities;
  • institutions;
  • businesses; and
  • adult users.

AUO does not knowingly solicit personal information directly from children in circumstances where parental or lawful authorization is required.

Where we learn that information has been collected contrary to applicable children’s privacy requirements, we will take appropriate steps.

27. Client-Supplied Data

A city, government, institution, or client may provide information for an assessment or other engagement.

Depending on the circumstances, that institution may determine why and how personal information is processed.

Where AUO, Veridian Urban Systems, or Veridian Intelligence Group processes personal data solely on instructions from such an institution, the relevant parties may operate under a separate Data Processing Agreement.

28. Public Officials and Public Information

Urban governance research may legitimately involve information concerning public officials or institutional representatives.

AUO may process publicly available professional information where relevant to legitimate urban analysis.

AUO does not treat the public status of an individual as permission to collect unrelated private information.

29. Third-Party Websites

AUO may link to third-party websites.

Their privacy practices are governed by their own policies.

AUO is not responsible for privacy practices of websites it does not control.

30. Changes to This Privacy Policy

We may revise this Policy as:

  • laws change;
  • technologies develop;
  • the Service evolves; or
  • data-processing practices change.

The revised effective date will appear at the beginning of this Policy.

Where required, material changes may also be communicated directly.

31. Contact Us

Questions, privacy requests, or concerns should be sent to:African Urban Observatory
Email: info@africanurbanobservatory.net