I-Grow Venture Ltd | igrowventure.com | Last updated 5 November 2026

1 Who is responsible for your information

I-Grow Venture Ltd (I-Grow, we, us or our) is responsible for deciding how personal information covered by this Policy is used. For data-protection purposes, I-Grow acts as the controller unless a separate contract states that we process information only on another organisation's instructions.

This Policy is intended to reflect applicable Gambian data-protection law, including the Personal Data Protection and Privacy Act 2025 where it is in force and applies, as well as any other law that applies to a particular visitor or processing activity.

2 Information this Policy covers

The information we collect depends on how you use the Site and what you choose to send. It may include:

• identity and contact details, such as your name, email address and phone number;
• business details, such as your employer, role, company information and the nature of your enquiry;
• documents and matter information you voluntarily provide, which may include a curriculum vitae, financial statements, business plans or client records;
• communications, meeting requests, marketing preferences and records of our response;
• technical and usage information made available by your browser or our service providers, such as an Internet Protocol address, browser and device information, timestamps, requested pages, referring pages and security logs; and
• cookie or similar-technology information, if those technologies are used on the Site.

The Site does not require a public user account or online checkout. The PAYE tax calculator can operate from salary and benefit figures entered into the page; those figures are not intended to identify you. Do not include names or other personal information in calculator fields.

3 Sensitive information and information about other people

We do not ask visitors to submit sensitive personal information through a general website channel. Sensitive information may include health information, biometric or genetic data, political or religious beliefs, racial or ethnic origin, sexual-life information, criminal allegations, and government identification details. Please do not send it unless we specifically request it, explain why it is needed and provide an appropriate method.

If you send information about another person, including an employee, job applicant, client or business contact, you must be entitled to provide it. Where required, you must give that person an appropriate privacy notice and obtain any necessary permission. We may ask you to confirm this before using the information.

4 How we collect information

We may collect personal information:

• directly from you when you email, call, request a meeting, subscribe to updates, respond to us or send documents;
• automatically from your browser, device, cookies, server logs and security tools when you use the Site;
• from an organisation or person that refers you or includes you in a business enquiry, where it is lawful for us to receive it; and
• from publicly available professional or company sources when reasonably necessary to understand or respond to an enquiry.

5 Why we use information and our legal bases

We use personal information only where we have a valid legal basis. The basis depends on the context. The main purposes and expected bases are summarised below.

Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect processing that was lawful before withdrawal. Where we rely on legitimate interests, we consider the purpose, necessity and possible effect on your rights before proceeding.

6 Marketing communications

We may send marketing emails about I-Grow's own services, training, publications or events when we have the required permission or another lawful basis. Each marketing email should provide a clear way to opt out. You can also opt out at any time by emailing igbfteam@gmail.com. We may retain a minimal suppression record so that we can respect your choice.

Opting out of marketing does not stop service, administrative or legal communications that are necessary for an existing matter.

7 Cookies and website technologies

The Site may use cookies or similar technologies for functions such as security, language or display preferences, traffic measurement and analytics. Necessary technologies may operate without consent where the law permits. We will seek consent before using non-essential technologies where applicable law requires it.

The technologies actually used can change as the Site and its providers change. Any cookie banner or cookie settings shown on the Site should identify the available categories and choices. You can also control cookies through your browser. Blocking cookies may affect some Site features.

8 Who may receive information

We may disclose personal information only as reasonably necessary to:

• website hosting, email, cloud storage, productivity, customer-relationship, newsletter, analytics, security and technical-support providers, which may include Google, Zoho and the Site's hosting provider;
• professional advisers, auditors, insurers, bankers and contractors who need the information for an authorised purpose and are subject to appropriate duties;
• government, regulatory, law-enforcement, tax or judicial authorities where disclosure is required or permitted by law;
• a prospective buyer, investor, lender or restructuring counterparty where necessary for a legitimate transaction and subject to suitable confidentiality safeguards; or
• another person where you direct us to disclose the information or give valid consent.

A provider must be engaged for a defined purpose and should receive only the information needed for that purpose. Where required, we use contracts that address confidentiality, security, permitted processing, assistance with rights and the use of sub-processors.

9 International transfers

Some service providers may store or process information outside The Gambia. This can include international cloud, email, website-hosting and newsletter services. The destination country's laws may differ from Gambian law.

Before making a transfer, we will take the steps required by applicable law. Depending on the circumstances, this may include assessing the destination and recipient, using contractual or other recognised safeguards, limiting the information transferred, applying security measures, or obtaining consent where that is a valid basis. You may contact us for information about the safeguards relevant to your information, subject to lawful confidentiality limits.

10 How long we keep information

We do not keep personal information indefinitely by default. We retain it only for as long as reasonably necessary for the purpose collected and any compatible purpose, including responding to an enquiry, performing a contract, maintaining required financial or tax records, resolving disputes, enforcing agreements and meeting legal or regulatory duties.

Retention periods depend on the type and sensitivity of the information, the relationship, the risk of harm from continued storage, applicable limitation periods and legal requirements. When information is no longer needed, we take reasonable steps to delete or anonymise it. Backups may be retained for a limited cycle and protected from routine use. A legal hold or regulatory request may require longer retention.

11 How we protect information

We use administrative, technical and organisational safeguards appropriate to the nature of the information and the risks involved. These may include access controls, authentication, provider due diligence, confidentiality duties, backups, updates and incident-response procedures. No internet transmission or storage system is completely secure, so we cannot guarantee absolute security.

If a personal-data breach occurs, we will assess it and make notifications to the Information Commission and affected individuals where and within the time required by applicable law.

12 Your rights

Depending on the law that applies to you and the circumstances, you may have the right to:

• receive information about how your personal information is used;
• ask whether we process your information and obtain access to it;
• correct inaccurate or incomplete information;
• ask us to erase information in specified circumstances;
• restrict processing in specified circumstances;
• object to processing based on your situation and object at any time to direct marketing;
• withdraw consent without charge where processing is based on consent;
• not be subject to a decision based solely on automated processing that has a legal or similarly significant effect, subject to lawful exceptions; and
• complain to the Information Commission or another competent supervisory authority.

The Gambian data-protection framework does not necessarily provide every right found in another jurisdiction. For example, data portability is available only if a law that applies to the particular processing grants it. Rights can also be limited by exemptions, other people's rights, legal duties and the need to establish or defend claims.

To make a request, email igbfteam@gmail.com and describe the information or right concerned. We may ask for proportionate information to verify your identity and authority. We aim to respond within the period required by applicable law. Where the Personal Data Protection and Privacy Act 2025 applies, access requests are generally expected to be addressed within one month, subject to any lawful qualification.

13 Automated decisions and the tax calculator

The Site is not intended to make decisions about you based solely on automated processing. The PAYE tax calculator applies displayed assumptions and rules to numbers entered by a visitor. Its output is general and indicative; it is not used by I-Grow to decide whether to provide a service, make an investment, employ a person or confer a legal right.

14 Children

The Site is directed to business and professional audiences and is not intended to collect personal information from children under 18. A child should not submit personal information through the Site without the involvement of a parent, guardian or legal representative. If we learn that a child provided information without an appropriate basis, we will take reasonable steps to delete it or obtain the required authorisation, taking the child's best interests into account.

15 Third party sites and separate platforms

The Site may link to third-party services and other platforms associated with I-Grow, including the Gambia CFO Conference and Awards, Future CFO Institute and Business in Gambia. This Policy covers only igrowventure.com unless another site expressly adopts it. Review the privacy notice on any other site before providing personal information.

16 Changes to this Policy

We may update this Policy to reflect changes in the Site, our practices or applicable law. We will post the revised version on the Site and change the last-updated date. If a change materially affects how we use information already collected, we will take any additional notice or consent steps required by law.

17 Questions and complaints

Contact us first if you have a privacy question, request or complaint. We will review it and respond in accordance with applicable law.

Where Gambian data-protection law applies, you may also have the right to complain to the Information Commission of The Gambia. If another country's data-protection law applies to the processing, you may be entitled to contact the competent authority in that country.