Privacy Notice

The Legum Compliance Institute operates the Digital Assets & Compliance Founding Fellowship and is the data controller for personal data processed through this website and the admissions process. Contact: [EMAIL]. Registered address: [ADDRESS]. Our data protection contact is the Programme Office, which reports data protection matters to the Ethics Committee.

• Applicant data: name, contact details, country of residence and citizenship, employment history, education, CV, motivation statement, portfolio evidence, track preferences, referee details, funding and scholarship information, and accessibility or connectivity needs you choose to disclose.
• Assessment data: written task submissions, interview notes, panel scores, and selection decisions.
• Fellow data: attendance, deliverables, assessment outcomes, mentorship records, and alumni-year engagement.
• Partner, faculty and mentor data: professional contact details, organisational affiliation, declared conflicts of interest, and correspondence.
• Subscriber and enquiry data: the details you submit through the enquiry, briefing, registration and subscription forms on this site.
• Technical data: aggregate, non-identifying usage analytics. We do not use advertising trackers or sell data to advertisers.

• To assess applications and construct a cohort against published selection criteria.
• To deliver the programme, assess work, and issue certification.
• To administer fees, discounts, scholarships and employer-sponsored seats.
• To match Fellows with mentors and to introduce graduates to the Talent Pool and placement partners, with your consent.
• To report anonymised, aggregate outcomes to funders and in the Annual Report.
• To meet legal, accounting, safeguarding and integrity obligations.
• To send you communications you have asked for.

Our lawful bases are: performance of a contract with you, your consent (for marketing and for Talent Pool introductions), our legitimate interest in running and evaluating the programme, and compliance with legal obligations.

We ask about accessibility and connectivity needs only to accommodate them. Where you volunteer health, disability or other sensitive information, we process it on the basis of your explicit consent, restrict access to the Programme Office, and delete it once the accommodation is no longer needed.

• Selection Committee members, panel interviewers and faculty assessors, under confidentiality undertakings.
• Referees you nominate, solely to verify what you have told us.
• Mentors, limited to what is needed for the match to work.
• Placement partners and Talent Pool employers, only with your explicit, revocable consent.
• Service providers who host our systems and send our email, under data processing agreements.
• Funders and partners, in anonymised aggregate form only. We do not sell partner access to applicant data.
• Regulators, auditors or law enforcement where we are legally required to disclose.

Applicants come from across Africa and beyond, and some of our processors operate outside your country of residence. Where personal data is transferred across borders, we rely on appropriate safeguards, including contractual data protection terms with each processor, and we transfer only the minimum data needed.

• Unsuccessful applications: 24 months from the decision, so that you can reapply without starting again. You can ask us to erase them sooner.
• Fellow records and assessment outcomes: 7 years, because certification must remain independently verifiable.
• Financial records, including fees and refunds: as required by applicable tax and accounting law.
• Subscriber data: until you unsubscribe, plus a suppression record so we do not email you again by mistake.
• Conduct and safeguarding records: as set out in the Code of Conduct.

Subject to applicable law, you may request access to your data, correction of inaccurate data, erasure, restriction of processing, portability, and withdrawal of consent at any time. Withdrawing consent does not affect processing already carried out. You may also object to processing based on legitimate interests.

To exercise a right, contact the Programme Office. We respond within 30 days. If you are not satisfied, you may complain to the data protection authority in your jurisdiction.

Access to applicant and Fellow data is role-based and limited to those who need it. Assessment data is pseudonymised where scoring allows. Our systems use encryption in transit and at rest. We will notify affected individuals and the relevant authority of a personal data breach where the law requires it.

We do not make selection decisions by automated means alone. Every application is reviewed by people. The programme is not directed at children, and we do not knowingly collect data from anyone under 18.

We update this notice when our processing changes and record the date at the top of the page. Material changes affecting applicants or Fellows are communicated by email.