Privacy notice
This notice covers this website (afriphish.com), including the free tools it hosts. The AfriPhish platform itself — used by customer organisations to run training and simulations — is governed by the agreements those organisations sign with us.
What we collect on this site
- Nothing that identifies you, by default. Browsing the site does not require an account.
- Free tools. The Human Risk Maturity Assessment stores your answers, your organisation profile (country, industry, size — all optional), and a technical fingerprint of your network address. We store a one-way hash of your IP address, never the address itself.
- Contact details you choose to give us. If you request your full assessment report, we store the name, work email, company, and optional phone number you provide, in order to send you the report.
How we use it
- Assessment answers are used to compute your maturity score and generate your report.
- Your email address is used once to send your report link. We only send you anything else if you separately tick the marketing checkbox — which is optional and unticked by default.
- Aggregated, non-identifying statistics (for example, average scores by industry) may be used to improve the assessment.
Retention
- Assessment responses that are not linked to any contact details are deleted automatically after 90 days.
- If you requested your report, we keep your submission and contact details until you ask us to delete them.
Your choices
Email privacy@afriphish.com to access, correct, or delete your data, or to withdraw marketing consent at any time. We answer every request.
Questions
AfriPhish is built for organisations subject to African data-protection laws — POPIA, NDPA, Kenya's DPA, Ghana's PDPA, Rwanda's CDPA, Morocco's Law 09-08, Egypt's PDPL — and we hold ourselves to the same standard we help our customers evidence.