Privacy Policy

When you apply, the system records:

• Your name, date of birth, gender, nationality, email address, phone numbers and postal address.
• Your language proficiency, education, employment and volunteering history, and selected skills.
• Documents you upload — identity, educational, good conduct, medical and photographic — held in private storage, not publicly readable.
• Your deployment preferences, availability dates, passport and visa status, commute method, and whether you have declared a medical condition or disability.
• An audit record of administrative actions taken on your application, including who viewed your documents and when.

We process your information to run the volunteer application and selection process: to assess your eligibility, verify your documents, match you to a role and venue, and communicate with you about your application. Where you have ticked the consent box at Step 1 of the application, we rely on that consent; where processing is necessary to run the selection process you have applied to join, we rely on our legitimate interest in doing so.

Applicant records and uploaded documents are kept for as long as needed to run the current recruitment cycle and, for successful applicants, the tournament itself — an exact retention period is still being confirmed. After that, records are either deleted or retained only as required by law. Contact us via the Contact page to request deletion of your records before that point.

CAF retains operational decisions for the tournament, including selection criteria and deployment, so relevant application details are shared with CAF, the relevant host-nation authority, and the venue you are assigned to. Where a document requires independent verification — a certificate of good conduct, for example — the issuing authority or a background-check provider may confirm its authenticity. Documents are never made publicly readable; reviewers access them through short-lived signed links, and every access is logged.

The platform is hosted using cloud infrastructure, which may store or process data in a data centre outside Kenya, Tanzania or Uganda. Where that happens, we take reasonable steps to ensure your data receives an equivalent level of protection, in line with the Kenya Data Protection Act (No. 24 of 2019), the Tanzania Personal Data Protection Act (2022), and the Uganda Data Protection and Privacy Act (No. 9 of 2019).

Medical conditions, disabilities and similar sensitive details are only ever collected because you have chosen to declare them — for example, to request a reasonable accommodation for your role or venue — and are handled with additional care: visible only to the reviewers who need them to act on your request.

Under the data protection laws of Kenya, Tanzania and Uganda, you generally have the right to access the personal data we hold about you, request correction of inaccurate data, request deletion, and withdraw consent you have previously given. To exercise any of these, contact us using the details on the Contact page — a named data protection officer and a direct complaints route to each host country's data protection authority will be published here once appointed.