Privacy policy
What personal data we collect, why, and the choices you have.
Last updated 11 October 2026 · Effective [[launch date]]
Who we are
This website, weorg.ai, is run by two companies. WE Org Corporation, a Maryland corporation, provides the services on the US pages. WE Org Limited, based in Accra, Ghana, provides the services on the Africa pages. The company whose pages you use, or whose services you ask about, decides how your personal data is used: it is the "controller" (in some laws, the "data controller" or "responsible party"). In this policy, "WE Org", "we" and "us" mean that company.
WE Org Limited is registered with Ghana's Data Protection Commission as a data controller, registration number [[DPC registration number]].
What this policy covers
It covers personal data we collect through this website, when you contact us by email, phone or WhatsApp, and when you apply for a role or a fellowship.
It does not cover data we handle for clients under contract. There we act on the client's instructions as their processor (or "operator"), and the client's own privacy notice applies. Our platforms (Adisa, Kuro and NURA) and our careers site are covered by the agreements and notices that come with them.
What we collect
When you contact us: your name, email address, organization, country, the topic you choose, your message and anything else you include. If you call or message us, your phone number and what you send.
When you apply for a role or a fellowship: your CV, portfolio and answers to the application.
When you visit: our hosting provider receives the technical details every website receives: your IP address, browser and device type, the page requested and the time. When you arrive without a region in the address, we use your IP address once to work out your country and send you to the US or Africa site. We do not store that country or build a profile from it.
Preferences you set: if you choose a region with the region switcher or turn on Reduce motion, your browser stores that choice. See the Cookie policy.
We do not use analytics, advertising or social media tracking on this website, and we do not set out to collect sensitive data, such as health, biometric or precise location data. Please do not include sensitive data in a message.
How we use it, and why
To reply to you and discuss working together: because you asked us to, before any contract, and because we have a legitimate interest in answering enquiries.
To assess applications: as a step before a possible employment or fellowship agreement, and our legitimate interest in recruiting.
To keep the website running and secure: our legitimate interest in protecting the site and the people who use it.
To keep business records and meet legal duties, such as tax, accounting and lawful requests from authorities: legal obligation.
To send news or updates, only if you ask for them: your consent. You can withdraw it at any time, and every email has an unsubscribe link.
We do not make automated decisions about you that have legal or similarly significant effects.
Who we share it with
We do not sell personal data. We do not share it for cross-context behavioral advertising, and we do not use it for targeted advertising.
Within WE Org: between WE Org Corporation and WE Org Limited, when your enquiry concerns the other company.
Service providers that run the website and our communications for us, under contracts that limit them to our instructions: hosting and delivery ([[hosting provider]]), email ([[email provider]]) and contact-form handling ([[form provider]]).
WhatsApp, run by Meta, if you choose to message us there. Meta's own privacy policy applies to that conversation.
Professional advisers, auditors and insurers, under a duty of confidentiality.
Authorities, when the law requires it, or to protect our rights or someone's safety.
A buyer or successor, if WE Org is reorganized, merged or sold, under the same protections as this policy.
International transfers
We work from Ghana and the United States, and our service providers may process data in other countries. When personal data leaves the country where it was collected, we protect it as that country's law requires, for example with contracts that include standard data protection clauses, and we send only what is needed.
How long we keep it
Enquiries and correspondence: up to 24 months after our last contact. If you become a client, we keep it for the life of the contract and afterwards for as long as the law requires.
Applications: up to 24 months, so we can consider you for other roles, unless you ask us to delete it sooner.
Business and financial records: as long as tax and company law requires.
Hosting logs: [[log retention period]].
Security
We use technical and organizational measures suited to the risk to protect your personal data. No method is perfectly secure, so we keep improving our safeguards.
If a breach puts your personal data at risk, we will tell you and the relevant regulator as the law requires.
Your rights
Wherever you are, you can ask us to:
Access: confirm whether we hold personal data about you, and give you a copy.
Correct: fix anything that is wrong or incomplete.
Delete: erase it, unless we must keep it by law.
Object or restrict: stop or limit how we use it.
Portability: give it to you in a format you can take elsewhere.
Withdraw consent: where we rely on your consent, including for news and updates.
To make a request, email [[privacy email]] or contact us. We may need to confirm your identity first. Someone you authorize can make a request for you if they show us your permission. We do not charge for requests, we will not treat you differently for making one, and we reply within the time the law that applies to you sets.
If we decline a request, we will tell you why. You can ask us to look at it again (an appeal), and we will give you our decision in writing.
If you are in the United States
Several US states, including California, Maryland, Virginia, Colorado and Connecticut, give residents specific privacy rights. We honor the requests above for every US visitor, whether or not a state law applies to us.
In the past 12 months we collected: identifiers and contact details (name, email address, phone number); professional information (organization and role); internet activity (IP address, browser and pages requested); and, for applicants, education and employment history. The sources, purposes and recipients are described above.
No sale or sharing: we have not sold personal data, shared it for cross-context behavioral advertising or used it for targeted advertising, and we do not knowingly process the personal data of anyone under 16.
Do Not Track and Global Privacy Control: we do not track you across websites, so these signals have nothing to switch off here. We treat a Global Privacy Control signal as a valid request to opt out of sale and sharing.
California "Shine the Light": we do not disclose personal information to third parties for their own direct marketing.
If you still disagree after an appeal, you can contact your state's Attorney General.
If you are in Africa, the EU or the UK
Ghana: WE Org Limited processes personal data under the Data Protection Act, 2012 (Act 843). You can complain to the Data Protection Commission (dataprotection.org.gh).
Elsewhere in Africa: when we deal with people in other countries, we follow their data protection laws, including Nigeria's Data Protection Act 2023, Kenya's Data Protection Act 2019 and South Africa's Protection of Personal Information Act 2013. You can complain to the regulator where you live, such as the Nigeria Data Protection Commission, Kenya's Office of the Data Protection Commissioner or South Africa's Information Regulator.
EU and UK: where the GDPR or UK GDPR applies, the legal bases are the ones listed under "How we use it, and why", and you can complain to your data protection authority.
Direct marketing: we send marketing only to people who have opted in.
Children
This website and our services are for organizations. They are not meant for anyone under 18, and we do not knowingly collect personal data from children. If you think a child has sent us personal data, contact us and we will delete it.
Changes
When we change this policy, we post the new version here with a new date. If a change is significant, we say so at the top of this page.
Contact
Privacy questions and requests: [[privacy email]].
WE Org Corporation: [[street address]], Maryland, USA.
WE Org Limited: [[street address]], Accra, Ghana · +233 53 694 5996.
Data protection lead: [[name and role]].