_Last updated: 31 August 2026_

Gabriel Saka trading as OnTheTable.Africa ("OnTheTable.Africa", "we", "us") is the controller of personal data described in this policy. We operate from Nairobi, Kenya. Contact us at [hello@onthetable.africa](mailto:hello@onthetable.africa).

This policy applies to people who use OnTheTable.Africa in Kenya and the United Kingdom. It explains what we collect, why we use it, who receives it, how long we keep it, and the choices and rights available to you.

Information we collect

• Account and authentication information, including your email address and authentication identifiers

• Profile and application information you choose to provide, including your name, work history, portfolio, CV, skills and visibility choices

• Communications information, including enquiries, email preferences, newsletter subscription status and suppression records

• Newsletter consent evidence, including the consent choice, source, disclosure version and time, plus privacy-protective request metadata used to prevent duplicate or abusive submissions

• Usage, device, security, audit and diagnostic information required to operate and protect the platform

How and why we use information

• Provide authentication, profile hosting, hiring, application, community and account services you request

• Process resume uploads and optional AI-assisted extraction when enabled

• Send transactional messages needed to provide and secure the service

• Send the OnTheTable.Africa newsletter with platform news, opportunities and community updates only when you have given affirmative consent

• Record and demonstrate consent, honour withdrawals and suppressions, prevent duplicate submissions, and protect the platform from abuse

• Meet legal obligations, resolve disputes, investigate misuse and maintain platform security

For newsletter marketing, we rely on your consent where required under Kenya's Data Protection Act, 2019 and the United Kingdom's data-protection and electronic-marketing rules. You may withdraw that consent at any time. Other processing may rely on performing our agreement with you, complying with law, protecting legitimate interests, or your consent, depending on the activity.

Newsletter choices and withdrawal

The newsletter checkbox is optional and is not preselected. You can unsubscribe through the link in a marketing email or change your choices through the email preference centre. Opening an unsubscribe page does not change your preferences until you confirm. Withdrawal does not affect processing that occurred before withdrawal. We retain a suppression record where necessary so that we continue to honour your opt-out.

Sharing and service providers

We use approved hosting, database, security, analytics and email-delivery providers to operate the platform. They may process personal data only for the services they provide to us and under appropriate contractual and security controls. Public profile information you choose to make visible may be viewed by visitors, companies or recruiters according to your settings. We do not sell personal data.

International transfers

Our providers or users may be located outside Kenya or the United Kingdom. Where personal data is transferred internationally, we use safeguards required by applicable law, which may include adequacy decisions, approved contractual protections and additional technical or organisational measures.

Retention

• Newsletter consent evidence is retained for the duration of the subscription and for six years after withdrawal

• Suppression records are retained for as long as reasonably necessary to honour the opt-out

• Operational and security logs are normally retained for 12 months unless a longer period is required for an active investigation, dispute or legal obligation

Other account, profile and application information is retained only for as long as needed for the purposes described here, the services you request, and applicable legal obligations.

Your rights

Subject to applicable law, you may ask to access, correct, delete, restrict or receive a copy of your personal data, and you may object to certain processing. You may withdraw consent at any time. Some rights are subject to legal exceptions and identity verification.

If you are in Kenya, you may raise a concern with the Office of the Data Protection Commissioner. If you are in the United Kingdom, you may raise a concern with the Information Commissioner's Office. We encourage you to contact us first so we can try to resolve the issue.

Security

We use access controls, encryption where appropriate, audit logging, abuse prevention and other technical and organisational safeguards. No service can guarantee absolute security.

Changes to this policy

We may update this policy when our services or legal obligations change. We will publish the revised date and provide additional notice where required.

Contact

Controller: Gabriel Saka trading as OnTheTable.Africa

Location: Nairobi, Kenya

Privacy enquiries: [hello@onthetable.africa](mailto:hello@onthetable.africa)